CTFHub

Writeup

机密信息

发表于 更新于 分类于 ， ， ，
Challenge | 2017 | 赛客夏令营 | Misc | 机密信息

点击此处获得更好的阅读体验

来源

本 WP 来自无可奈何原创投稿

题目考点

  • 后缀名更改

  • 压缩包暴力破解

  • 简单的Python编程

解题思路

看到一个.png文件，打开无信息，尝试更改文件后缀名

当改成.zip时解压缩需要密码

使用暴力破解软件解得密码为7878

解压缩得flag.txt，经观察像二维码，

使用python编程将二进制转为二维码

扫二维码得flag

附转二维码脚本

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
from PIL import Image

MAX = 70
img = Image.new("RGB",(MAX,MAX))

str  = "0000000000000000000000000000000000000000000000000000000000000000000000"
str += "0000000000000000000000000000000000000000000000000000000000000000000000"
str += "0011111111111110110000111110000001001111110000000110000011111111111100"
str += "0011111111111110110000111110000001001111110000000110000011111111111100"
str += "0011000000000110110000001111100110111111001111111001110011000000000100"
str += "0011000000000110110000001111100110111111001111111001110011000000000100"
str += "0011001111100110111111110001100111000011110111100111110011011111100100"
str += "0011001111100110001111001000011111001111111000011111110011011111100100"
str += "0011001111100110001111001000011111001111111000011111110011011111100100"
str += "0011001111100110000011000000011001110011000111111000000011011111100100"
str += "0011001111100110000011000000011001110011000111111000000011011111100100"
str += "0011000000000110110000000110011111000011110001111111110011000000000100"
str += "0011000000000110110000000110011111000011110001111111110011000000000100"
str += "0011111111111110110011001001100110110011001001100110110011111111111100"
str += "0011111111111110110011001001100110110011001001100110110011111111111100"
str += "0000000000000000111100000110000110111100000111111000000000000000000000"
str += "0000001111100110110000001110000111110011111000000111111111100001111100"
str += "0000001111100110110000001110000111110011111000000111111111100001111100"
str += "0000110111100001110011110000000000000011000110000001001100111110011000"
str += "0000110111100001110011110000000000000011000110000001001100111110011000"
str += "0011000000000110000011111110011000110000001000011111111111100111100100"
str += "0011000000000110000011111110011000110000001000011111111111100111100100"
str += "0000000001111001000011110110011111000000001001100001001100100000000000"
str += "0000000001111001000011110110011111000000001001100001001100100000000000"
str += "0000001110011110000011110111100000110000000110011001111111111001100100"
str += "0000000001111001000011110000011000001111000000011110001100000000011000"
str += "0000000001111001000011110000011000001111000000011110001100000000011000"
str += "0011111110011110111111001001100111111111001111100001110011011111100100"
str += "0011111110011110111111001001100111111111001111100001110011011111100100"
str += "0011001000011000001100000001111111111111110001100001111111100000000100"
str += "0011001000011000001100000001111111111111110001100001111111100000000100"
str += "0011001001100111111100111110011111001100000111111111110011011111100100"
str += "0011001001100111111100111110011111001100000111111111110011011111100100"
str += "0000110110011001111111000111100001110011001001100000001100100110000000"
str += "0011001110000111110011001111100000000011110000000111111111011111111100"
str += "0011001110000111110011001111100000000011110000000111111111011111111100"
str += "0011000001100000111100000001111000111100110110000000000000100110011000"
str += "0011000001100000111100000001111000111100110110000000000000100110011000"
str += "0000001000011110111100000111111000110000000000011111110011011001111000"
str += "0000001000011110111100000111111000110000000000011111110011011001111000"
str += "0000111111111001000000111110011111001111110001100000001100100111111100"
str += "0000111111111001000000111110011111001111110001100000001100100111111100"
str += "0000111001111110110000111110000001000011000111100001111111100000011100"
str += "0011001111111001000011000001111000111111000111100111000011000000011000"
str += "0011001111111001000011000001111000111111000111100111000011000000011000"
str += "0000110000000110001100110000011110001111111000000001000011000111100000"
str += "0000110000000110001100110000011110001111111000000001000011000111100000"
str += "0011000001100001110011001110011000001100111001100111110011000110000000"
str += "0011000001100001110011001110011000001100111001100111110011000110000000"
str += "0011001000000111000011001110011110110011110000000110000000000001111100"
str += "0011001000000111000011001110011110110011110000000110000000000001111100"
str += "0011001111111001111100111111100111001111001001100110111100000110011100"
str += "0011001000011111110011110111111001001111001000011110111111111000000100"
str += "0011001000011111110011110111111001001111001000011110111111111000000100"
str += "0000000000000000111111110000000111110011110001100001110000011001111000"
str += "0000000000000000111111110000000111110011110001100001110000011001111000"
str += "0011111111111110000011001000011000001111000001111000110011011110000100"
str += "0011111111111110000011001000011000001111000001111000110011011110000100"
str += "0011000000000110000011110000000110111111111001100000110000011000000000"
str += "0011001111100110111111110001100001111111001001111111111111111111100100"
str += "0011001111100110111111110001100001111111001001111111111111111111100100"
str += "0011001111100110110011001001111110110011001000000001001111011000011100"
str += "0011001111100110110011001001111110110011001000000001001111011000011100"
str += "0011001111100110110000000110011001000011001111100001110000100000000100"
str += "0011001111100110110000000110011001000011001111100001110000100000000100"
str += "0011000000000110001111001111100110110011111110000111110011100000000100"
str += "0011000000000110001111001111100110110011111110000111110011100000000100"
str += "0011111111111110001111110110000000000011001110000000001100000111111100"
str += "0000000000000000000000000000000000000000000000000000000000000000000000"
str += "0000000000000000000000000000000000000000000000000000000000000000000000"

i = 0
for y in range (0,MAX):
    for x in range (0,MAX):
        if(str[i] == '1'):
            img.putpixel([x,y],(0, 0, 0))
        else:
            img.putpixel([x,y],(255,255,255))
        i = i+1

img.show()
img.save("flag.png")

FLAG

1
flag{a365b025fa3c58bab9af68e3da850460}