\u94fe\u63a5: https:\/\/pan.baidu.com\/s\/1Ez-eMbAiE-gz4YAAvuP_Jw?pwd=6180<\/a> \u63d0\u53d6\u7801: 6180 1.\u4e0d\u786e\u5b9a,\u518d\u770b\u770b<\/p>\n\n\n\n
1.\u4e0d\u786e\u5b9a,\u518d\u770b\u770b<\/h2>\n\n\n\n![\"\"](\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\")
<\/div><\/figure>\n\n\n\n\u6839\u636e\u9898\u76ee\u63cf\u8ff0base64<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u5728\u6211\u6587\u4ef6\u91cc\u9762\u53d1\u73b0base64<\/p>\n\n\n\n
\u63d0\u53d6base64<\/p>\n\n\n\n
py3\u4ee3\u7801\uff1a<\/p>\n\n\n\n
with open(\"A Comme Amour.wav\", \"rb\") as f:\n data = f.read()[0x86:0x2eea]\n\nfor i in range(0, len(data), 2):\n print(chr(data[i]), end=\"\")\n<\/code><\/pre>\n\n\n\n<\/div><\/figure>\n\n\n\nI2luY2x1ZGUgPHN0ZGlvLmg+\nI2luY2x1ZGUmPHN0cmluZy5oPm==\nI2luY2x1ZGUmPHN0ZGxpYi5oPm==\ndm9pZCBBZmZpbmVUcmFuc2Zvcm1hdGlvbihjaGFyKiwgaW50LCBpbnQsIGludCk7\naW50IEdDRChpbnQpO2==\naW50IG1vZF9pbnZlc2UoaW50IGQvIGludCBuKTv=\ndm9pZCBzb2x2ZV9mdW5jdGlvbihjaGFyKik7\naW50IG1haW4odm9pZCk=\ne2==\nCXByaW50ZigiXG4qKioqKiphZmZpbmUgdHJhbnNmb3JtYXRpb24qKioqKipcbiIpOx==\nCXdoaWxlICgxKW==\nCXt=\nCQl9cmludGYoIlxuUGxlYXNlIGVudGVyIHRoZSBmdW5jdGlvbiBzZXJpYW9gbnVtYmVyOlxuMC5FbmNyeXB0aW9uXG4xLkRlY3J5cHRpb25cbjIuU29sdXRpb24gZnVuY3Rpb25cbjMuRXhpdFxuUGxlYXNlIGNob29zZSBmdW5jdGlvbiIpO9==\nCQlpbnQgZnVuY3Rpb247\nCQlpbnQgYSA9IDA7\nCQlpbnQgYiA9IDA7\nCQljaGFyIHhbNF0gPSAiXDAiO+==\nCQljaGFyIGNoWzEwMDBdID0gIlwwIjv=\nCQljaGFyIHNvbHZlWzEwMDBdID0gIlwwIjt=\nCQlzY2FuZl9zKCIlZCIsICZmdW5jdGlvbik7\nCYlzd2l0Y2ggKGZ1bmN0aW9uKY==\nCQl7\nCQljYXNlIDA6\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGtleSB1c2VkIGZvciBlbmNyeXB0aW9uOigwPD1hLGI8PTI1KVxuIik7\nCQkJc2NhbmZfcygiJWQsJWQiLCAmYS5gJmIpO5==\nCYkJd2hpbGUgKEdDRChhKSAhPSAxKY==\nCQkJe0==\nCQkJCXByaW50ZigiUGxlYXNlIHJlIC1lbnRlciB0aGUga2V5OlxuIik7\nCQkJCXByaW50ZigiUGxlYXNlIGVudGVyIHRoZSBrZXkgdXNlZCBmb3IgZW5jcnlwdGlvbjooMDw9YTw9MjUpXG4iKTv=\nCQkJCXNjYW5mX3MoIiVkIi1gJmEpO1==\nCWkJfW==\nCQkJZmZtdXNoKHN0ZGluKTt=\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIHBtYWludGV4dDoiKTt=\nCQkJZ2V0c19zKGNoKTs=\nCQkJQWZmaW5lVHJhbnNmb3JtYXRpb24oY2gvIGEvIGIvIGZ1bmN0aW9uKTv=\nCQkJYnJlYWs7\nCQljYXNlIDE6\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGtleSB1c2VkIGZvciBkZWNyeXB0aW9uOigwPD1hLGI8PTI1KVxuIik7\nCQkJc2NhbmZfcygiJWQsJWQiLCAmYS2gJmIpO2==\nCTkJd2hpbGUgKEdDRChhKSAhPSAxKT==\nCQkJe0==\nCQkJCXByaW50ZigiUGxlYXNlIHJlIC1lbnRlciB0aGUga2V5OlxuIik7\nCQkJCXByaW50ZigiUGxlYXNlIGVudGVyIHRoZSBrZXkgdXNlZCBmb3IgZGVjcnlwdGlvbjooMDw9YTw9MjUpXG4iKTt=\nCQkJCXNjYW5mX3MoIiVkIi3gJmEpO3==\nCdkJfd==\nCQkJZmZudXNoKHN0ZGluKTu=\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdG8gYmUgZGVjcnl4dGVkOiIpO4==\nCQkJZ2V0c19zKHNvbHZlKTt=\nCQkJQWZmaW5lVHJhbnNmb3JtYXRpb24oc29udmUuIGEuIGIuIGZ1bmN0aW9uKTu=\nCQkJYnJlYWs7\nCQljYXNlIDI6\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGVxdWF0aW9uIGNvZWZmaWNpZW50OiB4LHksbSxuOlxuIik7\nCQkJZmZudXNoKHN0ZGluKTu=\nCQkJZ2V0c19zKHgpO1==\nCQkJc29sdmVfZnVuY3Rpb24oeCk7\nCQkJYnJlYWs7\nCQljYXNlIDM6\nCQkJcmV0dXJuIDA7\nCQkJYnJlYWs7\nCQlkZWZhdWx0Op==\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGNvcnJlY3QgbnVtYmVyIik7\nCQkJYnJlYWs7\nCQl9\nCX0=\nfW==\ndm9pZCBBZmZpbmVUcmFuc2Zvcm1hdGlvbihjaGFyIGNoW10sIGludCBhLCBpbnZgYiwgaW50IGZ1bmN0aW9uKZ==\ne2==\nCWludCBpID0gMDv=\nCWlmIChmdW5jdGlvbiA9PSAwKZ==\nCXu=\nCQl3aGlsZSAoY2hbaV0gIT0gJ1wwJyl=\nCQl7\nCdkJaWYgKChjaFtpXSA+PSAnYScpICYmIChjaFtpXSA8PSAneicpKd==\nCQkJe3==\nCQkJCWNoW2ldID0gJ2EnICsgKCgoY2hbaV0gLSAnYScpICogYSArIGIpICUgMjYpO8==\nCckJfc==\nCVkJaWYgKChjaFtpXSA+PSAnVScpICYmIChjaFtpXSA8PSAnWicpKV==\nCQkJe8==\nCQkJCWNoW2ldID0gJ0EnICsgKCgoY2hbaV0gLSAnQScpICogYSArIGIpICUgMjYpO9==\nCXkJfX==\nCQkJaSsrO9==\nCQl9\nCQlwcmludGYoImNpcGhlcnRleHTvvJolcyIvIGNoKTv=\nCX0=\nCWVsc2UgaWYgKGZ1bmN0aW9uID09IDEp\nCXv=\nCQl3aGlsZSAoY2hbaV0gIT0gJ1wwJyk=\nCQl7\nCckJaWYgKChjaFtpXSA+PSAnYScpICYmIChjaFtpXSA8PSAneicpKc==\nCQkJex==\nCQkJCWlmICgoY2hbaV0gLSAnYScgLSBiKSA8IDAp\nCQkJCQljaFtpXSA9ICdhJyArICgoY2hbaV0gLSAnYScgLSBiKSAqIG1vZF9pbnZlc2UoYSwgMjYpKSAlIDI2ICsgMjY7Ly\/orqHnrpfmnLogbiVtPW4tbShuL20pOyjotJ\/mlbDml7blkJHkuIrlj5bmlbQp\nCQkJCWVsc2V=\nCQkJCQljaFtpXSA9ICdhJyArICgoY2hbaV0gLSAnYScgLSBiKSAqIG1vZF9pbnZlc2UoYS\/gMjYpKSAlIDI2O\/==\nCWkJfW==\nCZkJaWYgKChjaFtpXSA+PSAnZScpICYmIChjaFtpXSA8PSAnWicpKZ==\nCQkJe2==\nCQkJCWlmICgoY2hbaV0gLSAnQScgLSBiKSA8IDAp\nCQkJCQljaFtpXSA9ICdBJyArICgoY2hbaV0gLSAnQScgLSBiKSAqIG1vZF9pbnZlc2UoYSwgMjYpKSAlIDI2ICsgMjY7\nCQkJCWVsc2X=\nCQkJCQljaFtpXSA9ICdBJyArICgoY2hbaV0gLSAnQScgLSBiKSAqIG1vZF9pbnZlc2UoYS4gMjYpKSAlIDI2O4==\nCdkJfd==\nCQkJaSsrO9==\nCQl9\nCQlwcmludGYoInBsYWludGV4dCA6JXMiLCBjaCk7\nCX2=\nfV==\naW50IEdDRChpbnQgYSl=\ne8==\nCWludCBudW1iZXIgPSAyNju=\nCWludCByID0gYSAlIG51bWJlcjt=\nCWludCBmbGFnID0gMDu=\nCXdoaWxlIChyICE9IDAp\nCXt=\nCQlhID0gbnVtYmVyO1==\nCQludW1iZXIgPSByO8==\nCQlyID0gYSAlIG51bWJlcjv=\nCX1=\nCWlmIChudW1iZXIgIT0gMSn=\nCXt=\nCQlyZXR1cm4gZmxhZzs=\nCX0=\nCWVsc2X=\nCXs=\nCQlyZXR1cm4gZmxhZyArIDE7\nCX1=\nfW==\naW50IG1vZF9pbnZlc2UoaW50IGesIGludCBuKe==\ne2==\nCWludCBhO3==\nCWludCBiOy==\nCWludCBxOx==\nCWludCByO3==\nCWludCB1ID0gMDv=\nCWludCB2ID0gMTt=\nCWludCB0Ow==\nCWEgPSBuOw==\nCWIgPSAoZCA+PSAwKSA\/IChkICUgbikgOiAtKGQgJSBuKTs=\nCXdoaWxlIChiICE9IDAp\nCXs=\nCQlxID0gKGludClhIC8gYjs=\nCQlyID0gYSAtIGIgKiBxOw==\nCQlhID0gYjs=\nCQliID0gcjs=\nCQl0ID0gdjs=\nCQl2ID0gdSAtIHEgKiB2Ow==\nCQl1ID0gdDs=\nCX0=\nCWlmIChhICE9IDEpIHJldHVybiAwOw==\nCXJldHVybigodSA8IDApID8gdSArIG4gOiB1KTs=\nfQ==\ndm9pZCBzb2x2ZV9mdW5jdGlvbihjaGFyIHhbXSk=\new==\nCWludCBpLCBqOw==\nCWludCBhLCBiOyA=\nCWludCBmbGFnID0gMDs=\nCWludCB0aW1lID0gMTs=\nCWludCBrXzEgPSAwLCBrXzIgPSAwOw==\nCWludCBsZW5ndGg7\nCWxlbmd0aCA9IHN0cmxlbih4KTs=\nCWludCB2YXJ5WzEwMF07\nCW1lbXNldCh2YXJ5LCAwLCBzaXplb2YodmFyeSkpOw==\nCWZvciAoaSA9IDA7IGkgPCBsZW5ndGg7IGkrKyk=\nCXs=\nCQlpZiAoeFtpXSA+PSAnYScgJiYgeFtpXSA8PSAneicp\nCQl7\nCQkJdmFyeVtpXSA9IHhbaV0gLSAnYSc7\nCQl9\nCQlpZiAoeFtpXSA+PSAnQScgJiYgeFtpXSA8PSAnWicp\nCQl7\nCQkJdmFyeVtpXSA9IHhbaV0gLSAnQSc7\nCQl9\nCX0=\nCXdoaWxlIChmbGFnICE9IDIp\nCXs=\nCQlrXzEgPSAwOw==\nCQlmb3IgKGkgPSAwOyBpIDwgdGltZTsgaSsrKQ==\nCQl7\nCQkJa18yID0gMDs=\nCQkJZm9yIChqID0gMDsgaiA8IHRpbWU7IGorKyk=\nCQkJew==\nCQkJCWtfMisrOw==\nCQkJCWlmICgoKHZhcnlbMl0gKyAyNiAqIGtfMSAtIHZhcnlbM10gLSAyNiAqIGtfMikgJSAodmFyeVswXSAtIHZhcnlbMV0pKSA9PSAwKQ==\nCQkJCQlmbGFnKys7\nCQkJCWlmICgoKHZhcnlbMV0gKiAodmFyeVsyXSArIDI2ICoga18xKSAtIHZhcnlbMF0gKiAodmFyeVszXSArIDI2ICoga18yKSkgJSAodmFyeVsxXSAtIHZhcnlbMF0pKSA9PSAwKQ==\nCQkJCQlmbGFnKys7\nCQkJCWlmIChmbGFnID09IDIp\nCQkJCQlicmVhazs=\nCQkJfQ==\nCQkJa18xKys7\nCQl9\nCQl0aW1lKys7\nCX0=\nCWEgPSAoKHZhcnlbMl0gKyAyNiAqIGtfMSAtIHZhcnlbM10gLSAyNiAqIGtfMikgLyAodmFyeVswXSAtIHZhcnlbMV0pKTs=\nCWIgPSAoKHZhcnlbMV0gKiAodmFyeVsyXSArIDI2ICoga18xKSAtIHZhcnlbMF0gKiAodmFyeVszXSArIDI2ICoga18yKSkgLyAodmFyeVsxXSAtIHZhcnlbMF0pKTs=\nCXdoaWxlIChiIDwgMCk=\nCXs=\nCQliID0gYiArIDI2Ow==\nCX0=\nCS8vIGIgPSBiICUgMjY7\nCS8vIGEgPSBhICsgMjY7\nCXByaW50ZigiazE9JWRcbiIsIGtfMSk7\nCXByaW50ZigiazI9JWRcbiIsIGtfMik7\nCXByaW50Zigic2VjcmV0IGtleSBhID0gJWRcbiIsIGEpOw==\nCXByaW50Zigic2VjcmV0IGtleSBiID0gJWRcbiIsIGIpOw==\nfQ==\nLy8geHR3c3tmbmlrX2lrX3h3eWNfeHR3c190ZWV5X3J3a2MhfQ==<\/code><\/pre>\n\n\n\n<\/div><\/figure>\n\n\n\nflag{ba5e64_hiding_1s_s0_in7erest1ng!}<\/code><\/pre>\n\n\n\n2.[\u4e2d\u7b49] QR1<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n\u56fe\u7247\u653e\u5927\u53d1\u73b0\u4e8c\u7ef4\u7801<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u56fe\u7247\u592a\u5927\u4e86\u8c03\u5c0f\u4e00\u70b9<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\nflag{AHA_U_Kn0w_QR_c0d3_312468ed-ea59-4fe9-9cd2-b5e9d8b39498}<\/code><\/pre>\n\n\n\n3.Misc\u6587\u4ef6\u7c7b\u578b<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n\u9898\u76ee\uff1a<\/p>\n\n\n\n
3436455341425F554573444242514141\n41414941416C64434658714F7737634B\n4141414143594141414149414141415A\n6D78685A7935306548524C79306C4D72\n7A5A49536B303253457778546B6B304D\n6A5130546A593353445531534573784E\n544D3054374A494E552B7A7241554155\n45734241685141464141414141674143\n56304956656F374474776F414141414A\n674141414167414A4141414141414141\n414167414141414141414141475A7359\n57637564486830436741674141414141\n41414241426741477845666B39697132\n41456245522B54324B725941514A462B\n34725971746742554573464267414141\n41414241414541576741414145344141\n4141414141<\/code><\/pre>\n\n\n\n\u662f\u4e2a\u5341\u516d\u8fdb\u5236<\/p>\n\n\n\n
010\u5bfc\u5165\u5341\u516d\u8fdb\u5236<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n46ESAB<\/p>\n\n\n\n
\u5c06\u8fd9\u4e2a\u53cd\u8f6c\u5f97\u5230<\/p>\n\n\n\n
BASE64<\/p>\n\n\n\n
UEsDBBQAAAAIAAldCFXqOw7cKAAAACYAAAAIAAAAZmxhZy50eHRLy0lMrzZISk02SEwxTkk0MjQ0TjY3SDU1SEsxNTM0T7JINU+zrAUAUEsBAhQAFAAAAAgACV0IVeo7DtwoAAAAJgAAAAgAJAAAAAAAAAAgAAAAAAAAAGZsYWcudHh0CgAgAAAAAAABABgAGxEfk9iq2AEbER+T2KrYAQJF+4rYqtgBUEsFBgAAAAABAAEAWgAAAE4AAAAAAA==<\/code><\/pre>\n\n\n\n\u540e\u9762\u8981\u4e24\u4e2a\u7b49\u53f7<\/p>\n\n\n\n
base\u89e3\u7801\u4e3ahex\u4e3a\u5341\u516d\u8fdb\u5236\uff08Hex\uff09<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n504b0304140000000800095d0855ea3b0edc280000002600000008000000666c61672e7478744bcb494caf36484a4d36484c314e49343234344e3637483535484b313533344fb248354fb3ac0500504b01021400140000000800095d0855ea3b0edc2800000026000000080024000000000000002000000000000000666c61672e7478740a00200000000000010018001b111f93d8aad8011b111f93d8aad8010245fb8ad8aad801504b050600000000010001005a0000004e0000000000\n<\/code><\/pre>\n\n\n\n\u4fdd\u5b58zip\u6587\u4ef6\u5c31\u884c<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\nflag{0bec0ad3da2113c70e50fd5617b8e7f9}<\/code><\/pre>\n\n\n\n4.\u6253\u5f00\u7535\u52a8\u8f66<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\n\u6839\u636e\u7ec6\u5bbd\u53ef\u4ee5\u5224\u65ad\u4e3a0\u548c1<\/p>\n\n\n\n
00111010010101010011000100011101001010101001100010<\/code><\/pre>\n\n\n\n\u4e0d\u5bf9<\/p>\n\n\n\n
\u6ce8\u610f\u4e0a\u56fe\u4e2d\u6846\u51fa\u6765\u7684\u8fd9\u6bb5\u97f3\u9891\uff0c\u4e00\u5171\u6709 25 \u4e2a\u660e\u663e\u7684\u8d77\u4f0f\uff0c\u4f60\u518d\u5bf9\u6bd4\u4e00\u4e0b\u65e0\u7ebf\u9065\u63a7\u6a21\u5757\u53d1\u51fa\u7684\u4fe1\u53f7\u3002\u4e00\u4e0b\u5b50\u5c31\u80fd\u770b\u51fa\u8fd9\u662f PT224X \u683c\u5f0f\u7684\uff0820 \u4f4d\u5730\u5740\u4f4d + 4 \u4f4d\u6570\u636e\u4f4d + 1 \u4e2a\u505c\u6b62\u7801\uff09\u3002<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n 01110100101010100110<\/code><\/pre>\n\n\n\n\u7136\u540e\u7ed3\u5408\u97f3\u9891\u6587\u4ef6 flag \u4e3a\uff1a<\/p>\n\n\n\n
sctf{01110100101010100110}<\/code><\/pre>\n\n\n\n5.Py-Py-Py<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n.pyc<\/p>\n\n\n\n
\u76f4\u63a5\u53cd\u7f16\u8bd1<\/p>\n\n\n\n
#!\/usr\/bin\/env python\n# visit https:\/\/tool.lu\/pyc\/ for more information\nimport sys\nimport os\nimport hashlib\nimport time\nimport base64\nfllag = '9474yeUMWODKruX7OFzD9oekO28+EqYCZHrUjWNm92NSU+eYXOPsRPEFrNMs7J+4qautoqOrvq28pLU='\n\ndef crypto(string, op, public_key, expirytime = ('encode', 'ddd', 0)):\n ckey_lenth = 4\n if not public_key or public_key:\n pass\n public_key = ''\n key = hashlib.md5(public_key).hexdigest()\n keya = hashlib.md5(key[0:16]).hexdigest()\n keyb = hashlib.md5(key[16:32]).hexdigest()\n if ckey_lenth:\n if not (op == 'decode' or string[0:ckey_lenth]) and hashlib.md5(str(time.time())).hexdigest()[32 - ckey_lenth:32]:\n pass\n keyc = ''\n cryptkey = keya + hashlib.md5(keya + keyc).hexdigest()\n key_lenth = len(cryptkey)\n if not op == 'decode' or base64.b64decode(string[4:]):\n pass\n string = '0000000000' + hashlib.md5(string + keyb).hexdigest()[0:16] + string\n string_lenth = len(string)\n result = ''\n box = list(range(256))\n randkey = []\n for i in xrange(255):\n randkey.append(ord(cryptkey[i % key_lenth]))\n\n for i in xrange(255):\n j = 0\n j = (j + box[i] + randkey[i]) % 256\n tmp = box[i]\n box[i] = box[j]\n box[j] = tmp\n\n for i in xrange(string_lenth):\n a = j = 0\n a = (a + 1) % 256\n j = (j + box[a]) % 256\n tmp = box[a]\n box[a] = box[j]\n box[j] = tmp\n result += chr(ord(string[i]) ^ box[(box[a] + box[j]) % 256])\n\n if op == 'decode':\n if (result[0:10] == '0000000000' or int(result[0:10]) - int(time.time()) > 0) and result[10:26] == hashlib.md5(result[26:] + keyb).hexdigest()[0:16]:\n return result[26:]\n return None\n return keyc + base64.b64encode(result)\n\nif __name__ == '__main__':\n while None:\n flag = raw_input('Please input your flag:')\n if flag == crypto(fllag, 'decode'):\n print('Success')\n break\n continue\n continue\n return None\n<\/code><\/pre>\n\n\n\n\u89e3\u4e0d\u51fa<\/p>\n\n\n\n
\u4fee\u6539\u4ee3\u7801<\/p>\n\n\n\n
py3\uff1a<\/p>\n\n\n\n
import hashlib\nimport time\nimport base64\n\nfllag = \"9474yeUMWODKruX7OFzD9oekO28+EqYCZHrUjWNm92NSU+eYXOPsRPEFrNMs7J+4qautoqOrvq28pLU=\"\n\ndef crypto(string, op='encode', public_key='ddd', expirytime=0):\n ckey_lenth = 4\n public_key = public_key and public_key or \"\"\n key = hashlib.md5(public_key.encode()).hexdigest()\n keya = hashlib.md5(key[0:16].encode()).hexdigest()\n keyb = hashlib.md5(key[16:32].encode()).hexdigest()\n keyc = ckey_lenth and (\n op == \"decode\" and string[0:ckey_lenth] or hashlib.md5(str(time.time()).encode()).hexdigest()[\n 32 - ckey_lenth:32]) or \"\"\n cryptkey = keya + hashlib.md5((keya + keyc).encode()).hexdigest()\n key_lenth = len(cryptkey)\n\n if op == \"decode\":\n # \u89e3\u7801\u65f6\u76f4\u63a5\u4f7f\u7528\u5b57\u8282\u6570\u636e\n string = base64.b64decode(string[4:])\n else:\n # \u7f16\u7801\u65f6\u751f\u6210\u5b57\u7b26\u4e32\n string = \"0000000000\" + hashlib.md5((string + keyb).encode()).hexdigest()[0:16] + string\n string = string.encode() # \u8f6c\u6362\u4e3a\u5b57\u8282\u6570\u636e\n\n string_lenth = len(string)\n result = b\"\" if op == \"decode\" else \"\"\n box = list(range(256))\n randkey = []\n for i in range(255):\n randkey.append(ord(cryptkey[i % key_lenth]))\n\n for i in range(255):\n j = 0\n j = (j + box[i] + randkey[i]) % 256\n tmp = box[i]\n box[i] = box[j]\n box[j] = tmp\n\n for i in range(string_lenth):\n a = j = 0\n a = (a + 1) % 256\n j = (j + box[a]) % 256\n tmp = box[a]\n box[a] = box[j]\n box[j] = tmp\n if op == \"decode\":\n result += bytes([string[i] ^ box[(box[a] + box[j]) % 256]])\n else:\n result += chr(string[i] ^ box[(box[a] + box[j]) % 256])\n\n if op == \"decode\":\n if result[0:10] == b\"0000000000\" or int(result[0:10]) - int(time.time()) > 0:\n if result[10:26] == hashlib.md5(result[26:] + keyb.encode()).hexdigest()[0:16].encode():\n return result[26:].decode()\n return\n else:\n return keyc + base64.b64encode(result.encode()).decode()\n\nif __name__ == \"__main__\":\n decrypted_flag = crypto(fllag, \"decode\")\n print(\"Decrypted flag:\", decrypted_flag)<\/code><\/pre>\n\n\n\n<\/div><\/figure>\n\n\n\n\u63d0\u793aSteganography\u9690\u5199<\/p>\n\n\n\n
\u5de5\u5177\u4e0b\u8f7d\u5730\u5740<\/p>\n\n\n\n
AngelKitty\/stegosaurus: A steganography tool for embedding payloads within Python bytecode.<\/a><\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u6211\u7684py\u7248\u672c\u592a\u9ad8\u4e86\uff0c\u6240\u6709\u57fa\u672c\u5c31\u662f\u8fd9\u6837<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u6240\u4ee5\u4f60\u8981\u4e0b\u8f7d\u4e00\u4e2a\u4f4e\u7248\u672c\u7684py\uff0c\u6211\u5c31\u4e0d\u4e0b\u8f7d\u4e86<\/p>\n\n\n\n
Flag{HiD3_Pal0ad_1n_Python}<\/code><\/pre>\n\n\n\n6.\u80a5\u5b85\u5feb\u4e50\u9898<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n\u662f\u4e2a\u6e38\u620f\u4e0d\u60f3\u4e0b\u8f7d flashplayer<\/p>\n\n\n\n
\u4f7f\u7528\u770b\u770bwp<\/p>\n\n\n\n
\u76f4\u63a5\u914d\u56fe<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u6ce8\u610f\u4ed6\u7684\u63d0\u793a\uff0cnpc\u7684\u5bf9\u8bdd<\/p>\n\n\n\n
\u4e8e\u662f\u6211\u4eec\u9010\u5e27\u5206\u6790\uff08\u5230\u7b2c57\u5e27\uff09<\/p>\n\n\n\n
U1lDe0YzaVpoYWlfa3U0aWxlX1QxMTF9<\/code><\/pre>\n\n\n\n<\/div><\/figure>\n\n\n\nSYC{F3iZhai_ku4ile_T111}<\/code><\/pre>\n\n\n\n7.3-1<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n010\u770b\u5c31\u662f\u4e00\u4e2arar\u538b\u7f29\u5305<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n7-zip\u6253\u5f00<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u6539\u4e00\u4e0b\u540e\u7f00<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u6709\u5bc6\u7801<\/p>\n\n\n\n
\u7136\u540e\u4e0d\u52a0\u6587\u4ef6\u5934\u770b\u770b<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u53d1\u73b0\u662f\u4e00\u4e2a\u6d41\u91cf\u5305<\/p>\n\n\n\n
\u52a0\u540e\u7f00.pcap<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u53ef\u4ee5\u53d1\u73b0flag.rar<\/p>\n\n\n\n
\u5176\u5b9e\u4e0a\u9762\u6211\u4eec\u6dfb\u52a0\u4e00\u4e2a.zip\u5c31\u53ef\u4ee5\u51fa\u6765<\/p>\n\n\n\n
\u4f46\u662f\u8981\u627e\u5230\u5bc6\u7801\uff0c\u5e94\u8be5\u5728\u6d41\u91cf\u5305\u91cc\u9762<\/p>\n\n\n\n
TCP\u6d41\u7b2c\u516d\u4e2a\u6d41\u91cf\u5305\u53ef\u4ee5\u770b\u5230\u52a0\u5bc6\u7684\u6570\u636e<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\n\u52a0\u5bc6\u548c\u89e3\u5bc6\u90fd\u4f7f\u7528\u76f8\u540c\u7684IV Key\u548c\u504f\u79fb\u91cf\u662f\uff1aQWERTYUIOPASDFGH CBC\u6a21\u5f0f \u957f\u5ea6\u4e3a16\u5b57\u8282\uff0c\u7b26\u5408AES-128\u7684\u8981\u6c42\u3002\n\n19aaFYsQQKr+hVX6hl2smAUQ5a767TsULEUebWSajEo=\n\n\u89e3\u5bc6\u6b65\u9aa4\uff1a\n\u521b\u5efaAES-CBC\u89e3\u5bc6\u5668\n\u6267\u884c\u89e3\u5bc6\n\u53bb\u9664\u586b\u5145\u7684null\u5b57\u8282\n\u5b57\u8282\u89e3\u7801\u4e3a\u5b57\u7b26\u4e32\n\n\u539f\u59cb\u6570\u636e: \"hello\" \u2192 \u5b57\u8282: b'hello'\n \u2193\n\u586b\u5145: b'hellox0bx0b...' (PKCS#7\u586b\u5145)\n \u2193\nAES\u52a0\u5bc6 + IV \u2192 \u52a0\u5bc6\u6570\u636e\n \u2193\nBase64\u7f16\u7801 \u2192 \u6700\u7ec8\u5bc6\u6587\n<\/code><\/pre>\n\n\n\n\u89e3\u5bc6py3:<\/p>\n\n\n\n
# coding:utf-8\nfrom Crypto import Random\nfrom Crypto.Cipher import AES\nimport sys\nimport base64\n\nIV = b'QWERTYUIOPASDFGH' # \u6ce8\u610f\uff1a\u5728Python3\u4e2d\u9700\u8981\u8f6c\u6362\u4e3abytes\n\ndef decrypt(encrypted):\n aes = AES.new(IV, AES.MODE_CBC, IV)\n decrypted = aes.decrypt(encrypted)\n # \u53bb\u9664\u586b\u5145\u7684null\u5b57\u7b26\n return decrypted.rstrip(b'x00').decode('utf-8')\n\ndef encrypt(message):\n length = 16\n # \u5728Python3\u4e2d\uff0c\u9700\u8981\u5c06\u5b57\u7b26\u4e32\u8f6c\u6362\u4e3abytes\n message = message.encode('utf-8')\n count = len(message)\n padding = length - (count % length)\n message = message + b'' * padding\n aes = AES.new(IV, AES.MODE_CBC, IV)\n return aes.encrypt(message)\n\n# \u63d0\u4f9b\u7684base64\u7f16\u7801\u7684\u5bc6\u6587\nencrypted_base64 = '19aaFYsQQKr+hVX6hl2smAUQ5a767TsULEUebWSajEo='\n\n# \u89e3\u7801base64\u5e76\u89e3\u5bc6\nencrypted_data = base64.b64decode(encrypted_base64)\ndecrypted_text = decrypt(encrypted_data)\n\nprint(\"\u89e3\u5bc6\u7ed3\u679c:\", decrypted_text)\n\n# \u6d4b\u8bd5\u52a0\u5bc6\u89e3\u5bc6\u529f\u80fd\nif __name__ == '__main__':\n test_str = 'this is a test'\n print(\"\u539f\u59cb\u5b57\u7b26\u4e32:\", test_str)\n\n encrypted_example = encrypt(test_str)\n encrypted_b64 = base64.b64encode(encrypted_example).decode('utf-8')\n print(\"\u52a0\u5bc6\u540e(base64):\", encrypted_b64)\n\n decrypted_example = decrypt(encrypted_example)\n print(\"\u89e3\u5bc6\u540e:\", decrypted_example)<\/code><\/pre>\n\n\n\n\u89e3\u5bc6\u6b65\u9aa4<\/strong>\uff1a<\/p>\n\n\n\n\n- \u521b\u5efaAES-CBC\u89e3\u5bc6\u5668<\/li>\n\n\n\n
- \u6267\u884c\u89e3\u5bc6<\/li>\n\n\n\n
- \u53bb\u9664\u586b\u5145\u7684null\u5b57\u8282<\/li>\n\n\n\n
- \u5b57\u8282\u89e3\u7801\u4e3a\u5b57\u7b26\u4e32<\/li>\n<\/ol>\n\n\n\n
Base64\u5bc6\u6587 \u2192 Base64\u89e3\u7801\n \u2193\n\u5206\u79bbIV\u548c\u52a0\u5bc6\u6570\u636e\n \u2193\nAES\u89e3\u5bc6 \u2192 \u5e26\u586b\u5145\u7684\u6570\u636e\n \u2193\n\u53bb\u9664\u586b\u5145 \u2192 \u539f\u59cb\u5b57\u8282\n \u2193\n\u89e3\u7801 \u2192 \u539f\u59cb\u5b57\u7b26\u4e32<\/code><\/pre>\n\n\n\n<\/div><\/figure>\n\n\n\n\u5bc6\u7801\uff1aNo_One_Can_Decrypt_Me<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\nWDCTF{Seclab_CTF_2017}<\/code><\/pre>\n\n\n\n8.4-1<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n\u4e00\u5f20\u56fe\u7247<\/p>\n\n\n\n
\u76f4\u63a5binwalk<\/p>\n\n\n\n
\u6709\u4e00\u4e2a\u538b\u7f29\u5305<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\nlsb zsteg\u7b49\u4e0d\u7ba1\u7528\u53ef\u80fd\u662f\u76f2\u6c34\u5370stgesolve\u6df7\u5408\u6ca1\u6709\u4ec0\u4e48\u4e1c\uff0c\u6240\u4ee5\u662f\u76f2\u6c34\u5370<\/p>\n\n\n\n
chishaxie\/BlindWaterMark: \u76f2\u6c34\u5370 by python<\/a> \u4e0b\u8f7d\u5730\u5740<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\nbwm.py\u662fpy2\u7684\u73af\u5883 bwmforpy3.py\u662fpy3\u7684\u73af\u5883<\/p>\n\n\n\n
python bwmforpy3.py decode --oldseed day1.png day2.png day3.png\nimage<day1.png> + image(encoded)<day2.png> -> watermark<day3.png><\/code><\/pre>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\nwdflag{My_c4t_Ho}<\/code><\/pre>\n\n\n\n9.5-1<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\n010\u770b\u4e86\u4e0d\u77e5\u9053\u662f\u4ec0\u4e48\u6587\u4ef6\uff0c<\/p>\n\n\n\n
binwalk\u4ec0\u4e48\u4e5f\u6ca1\u6709<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\nfile\u547d\u4ee4<\/strong>\u8bc6\u522b\u6587\u4ef6\u7c7b\u578b\u7684\u5de5\u5177<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u4e5f\u4e0d\u77e5\u9053\u662f\u4ec0\u4e48\uff0c\u770b\u770bwp<\/p>\n\n\n\n
\u53d1\u73b0\u6574\u4f53\u6587\u4ef6\u5f02\u6216\u4e86\u67d0\u4e2a\u5bc6\u94a5<\/p>\n\n\n\n
\u9700\u8981\u4e0b\u8f7d\u4e0b\u8f7dxortool<\/p>\n\n\n\n
pip install xortool<\/code><\/pre>\n\n\n\n<\/div><\/figure>\n\n\n\nhellman\/xortool: A tool to analyze multi-byte xor cipher<\/a>\u4e0b\u8f7d\u94fe\u63a5<\/p>\n\n\n\nxortool.py<\/strong><\/p>\n\n\n\n\u4e00\u4e2a\u7528\u4e8e\u8fdb\u884c\u5f02\u6216\u5206\u6790\u7684\u5de5\u5177\uff1a<\/p>\n\n\n\n
\n- \u731c\u6d4b\u5bc6\u94a5\u957f\u5ea6\uff08\u57fa\u4e8e\u76f8\u7b49\u5b57\u7b26\u6570\u6570\uff09<\/li>\n\n\n\n
- \u731c\u5173\u952e\uff08\u57fa\u4e8e\u6700\u5e38\u89c1\u89d2\u8272\u7684\u77e5\u8bc6\uff09<\/li>\n<\/ul>\n\n\n\n
\u5b98\u65b9\u6587\u6863<\/p>\n\n\n\n
\u65e0\u8bba\u662f\u5f00\u53d1\u8fd8\u662f\u6784\u5efa\u8fd9\u4e2a\u4ed3\u5e93\uff0c\u90fd\u9700\u8981\u8bd7\u6b4c<\/a>\u3002<\/p>\n\n\n\npoetry build\npip install dist\/xortool*.whl<\/code><\/pre>\n\n\n\n\u7528\u6cd5<\/h3>\n\n\n\nxortool\n A tool to do some xor analysis:\n - guess the key length (based on count of equal chars)\n - guess the key (base on knowledge of most frequent char)\n\nUsage:\n xortool [-x] [-m MAX-LEN] [-f] [-t CHARSET] [FILE]\n xortool [-x] [-l LEN] [-c CHAR | -b | -o] [-f] [-t CHARSET] [-p PLAIN] [-r PERCENT] [FILE]\n xortool [-x] [-m MAX-LEN| -l LEN] [-c CHAR | -b | -o] [-f] [-t CHARSET] [-p PLAIN] [-r PERCENT] [FILE]\n xortool [-h | --help]\n xortool --version\n\nOptions:\n -x --hex input is hex-encoded str\n -l LEN, --key-length=LEN length of the key\n -m MAX-LEN, --max-keylen=MAX-LEN maximum key length to probe [default: 65]\n -c CHAR, --char=CHAR most frequent char (one char or hex code)\n -b --brute-chars brute force all possible most frequent chars\n -o --brute-printable same as -b but will only check printable chars\n -f --filter-output filter outputs based on the charset\n -t CHARSET --text-charset=CHARSET target text character set [default: printable]\n -p PLAIN --known-plaintext=PLAIN use known plaintext for decoding\n -r PERCENT, --threshold=PERCENT threshold validity percentage [default: 95]\n -h --help show this help\n\nNotes:\n Text character set:\n * Pre-defined sets: printable, base32, base64\n * Custom sets:\n - a: lowercase chars\n - A: uppercase chars\n - 1: digits\n - !: special chars\n - *: printable chars\n\nExamples:\n xortool file.bin\n xortool -l 11 -c 20 file.bin\n xortool -x -c ' ' file.hex\n xortool -b -f -l 23 -t base64 message.enc\n xortool -b -p \"xctf{\" message.enc\n xortool -r 80 -p \"flag{\" -c ' ' message.enc<\/code><\/pre>\n\n\n\n\u793a\u4f8b1<\/h3>\n\n\n\n# xor is xortool\/xortool-xor\ntests $ xor -f \/bin\/ls -s \"secret_key\" > binary_xored\n\ntests $ xortool binary_xored\nThe most probable key lengths:\n 2: 5.0%\n 5: 8.7%\n 8: 4.9%\n 10: 15.4%\n 12: 4.8%\n 15: 8.5%\n 18: 4.8%\n 20: 15.1%\n 25: 8.4%\n 30: 14.9%\nKey-length can be 5*n\nMost possible char is needed to guess the key!\n\n# 00 is the most frequent byte in binaries\ntests $ xortool binary_xored -l 10 -c 00\n...\n1 possible key(s) of length 10:\nsecret_key\n\n# decrypted ciphertexts are placed in .\/xortool_out\/Number_<key repr>\n# ( have no better idea )\ntests $ md5sum xortool_out\/0_secret_key \/bin\/ls\n29942e290876703169e1b614d0b4340a xortool_out\/0_secret_key\n29942e290876703169e1b614d0b4340a \/bin\/ls<\/code><\/pre>\n\n\n\n\u6700\u5e38\u89c1\u7684\u7528\u6cd5\u662f\u53ea\u4f20\u9012\u52a0\u5bc6\u6587\u4ef6\u548c\u6700\u5e38\u7528\u5b57\u7b26\uff08\u901a\u5e38\u4e3a\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e3a00\uff0c\u6587\u672c\u6587\u4ef6\u4e3a20\uff09\u2014\u2014\u957f\u5ea6\u4f1a\u81ea\u52a8\u9009\u62e9\uff1a<\/p>\n\n\n\n
tests $ xortool tool_xored -c 20\nThe most probable key lengths:\n 2: 5.6%\n 5: 7.8%\n 8: 6.0%\n 10: 11.7%\n 12: 5.6%\n 15: 7.6%\n 20: 19.8%\n 25: 7.8%\n 28: 5.7%\n 30: 11.4%\nKey-length can be 5*n\n1 possible key(s) of length 20:\nan0ther s3cret xdd key<\/code><\/pre>\n\n\n\n\u8fd9\u91cc\uff0c\u5bc6\u94a5\u957f\u5ea6\u8d85\u8fc7\u4e86\u9ed8\u8ba4\u768432\u4e2a\u9650\u5236\uff1a<\/p>\n\n\n\n
tests $ xortool ls_xored -c 00 -m 64\nThe most probable key lengths:\n 3: 3.3%\n 6: 3.3%\n 9: 3.3%\n 11: 7.0%\n 22: 6.9%\n 24: 3.3%\n 27: 3.2%\n 33: 18.4%\n 44: 6.8%\n 55: 6.7%\nKey-length can be 3*n\n1 possible key(s) of length 33:\nreally long s3cr3t k3y... PADDING<\/code><\/pre>\n\n\n\n\u6240\u4ee5\uff0c\u5982\u679c\u81ea\u52a8\u89e3\u5bc6\u5931\u8d25\uff0c\u4f60\u53ef\u4ee5\u6821\u51c6\uff1a<\/p>\n\n\n\n
\n- (
-m<\/code>\uff09\u5c1d\u8bd5\u66f4\u957f\u952e\u7684\u6700\u5927\u957f\u5ea6<\/li>\n\n\n\n- (
-l<\/code>\uff09\u9009\u62e9\u957f\u5ea6\u4ee5\u89c2\u5bdf\u4e00\u4e9b\u6709\u8da3\u7684\u952e<\/li>\n\n\n\n- (
-c<\/code>\uff09\u662f\u4ea7\u751f\u53f3\u660e\u6587\u7684\u6700\u5e38\u89c1\u5b57\u7b26<\/li>\n<\/ul>\n\n\n\n\u793a\u4f8b2<\/h3>\n\n\n\n
\u6211\u4eec\u6536\u5230\u4e00\u6761\u7528Base64\u7f16\u7801\u5e76\u7528\u672a\u77e5\u5bc6\u94a5\u8fdb\u884c\u5f02\u6216\u7684\u6d88\u606f\u3002<\/p>\n\n\n\n
# xortool message.enc\nThe most probable key lengths:\n 2: 12.3%\n 4: 13.8%\n 6: 10.5%\n 8: 11.5%\n 10: 8.6%\n 12: 9.4%\n 14: 7.1%\n 16: 7.8%\n 23: 10.4%\n 46: 8.7%\nKey-length can be 4*n\nMost possible char is needed to guess the key!<\/code><\/pre>\n\n\n\n\u6211\u4eec\u73b0\u5728\u53ef\u4ee5\u5728\u8fc7\u6ee4\u8f93\u51fa\u65f6\u6d4b\u8bd5\u5bc6\u94a5\u957f\u5ea6\uff0c\u4f7f\u5f97\u53ea\u4fdd\u7559\u6301\u6709 Base64 \u5b57\u7b26\u96c6\u7684\u660e\u6587\u3002\u5c1d\u8bd5\u4e86\u51e0\u6bb5\u957f\u5ea6\u540e\uff0c\u6211\u4eec\u627e\u5230\u4e86\u6b63\u786e\u7684\u660e\u6587\uff0c\u53ea\u6709\u4e00\u4e2a\u660e\u6587\uff0c\u6709\u6548\u5b57\u7b26\u6bd4\u4f8b\u9ad8\u4e8e\u9ed8\u8ba4\u9608\u503c95%\u3002<\/p>\n\n\n\n
$ xortool message.enc -b -f -l 23 -t base64\n256 possible key(s) of length 23:\nx01=x121#\"0x17x13tx7f ,&\/x12sx114ux170#\nx00<x130\"#1x16x12x08~!-'.x13rx105tx161\"\nx03?x103! 2x15x11x0b}\".$-x10qx136wx152!\nx02>x112 !3x14x10n|#\/%,x11px127vx143\nx059x165'&4x13x17r{$(\"+x16wx150qx134'\n...\nFound 1 plaintexts with 95.0%+ valid characters\nSee files filename-key.csv, filename-char_used-perc_valid.csv<\/code><\/pre>\n\n\n\n\u901a\u8fc7\u5728 Base64 \u5b57\u7b26\u96c6\u4e0a\u8fc7\u6ee4\u8f93\u51fa\uff0c\u6211\u4eec\u76f4\u63a5\u4fdd\u7559\u4e86\u552f\u4e00\u7684\u89e3\u3002<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\n13\u957f\u5ea6\u7684\u5bc6\u94a5 22.2% \u6240\u4ee5\u76f4\u63a5\u66b4\u529b\u7834\u89e3<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\n\u67e5\u770bCSV\u6587\u4ef6<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u53d1\u73b0\u4e00\u4e2a\u6709\u6548\u5bc6\u94a5<\/p>\n\n\n\n
GoodLuckToYou<\/code><\/pre>\n\n\n\n\u5bf9\u6587\u4ef6\u548c\u5bc6\u94a5\u505axor<\/p>\n\n\n\n
py3\u4ee3\u7801<\/p>\n\n\n\n
# \u5b9a\u4e49\u52a0\u5bc6\u5bc6\u94a5\nKey = \"GoodLuckToYou\"\n\n# \u4ee5\u4e8c\u8fdb\u5236\u8bfb\u53d6\u6a21\u5f0f\u6253\u5f00\u8f93\u5165\u6587\u4ef6\nwith open(\"badd3e0621ff43de8cf802545bbd3ed0\", \"rb\") as f:\n # \u4ee5\u5199\u5165\u6a21\u5f0f\u6253\u5f00\u8f93\u51fa\u6587\u4ef6\uff0c\u5ffd\u7565\u7f16\u7801\u9519\u8bef\n with open(\"result.txt\", \"w\", errors=\"ignore\") as fp:\n index = 0 # \u521d\u59cb\u5316\u5bc6\u94a5\u7d22\u5f15\n\n # \u8bfb\u53d6\u7b2c\u4e00\u4e2a\u5b57\u8282\n data = f.read(1)\n\n # \u5faa\u73af\u8bfb\u53d6\u6587\u4ef6\u76f4\u5230\u7ed3\u675f\n while data:\n # \u8c03\u8bd5\u4fe1\u606f\uff1a\u6253\u5370\u5f53\u524d\u5904\u7406\u5b57\u8282\u7684\u4f4d\u7f6e\n print(f\"Processing byte at position: {index}\")\n\n # \u5c06\u5b57\u8282\u6570\u636e\u8f6c\u6362\u4e3a\u6574\u6570\uff0c\u4e0e\u5bc6\u94a5\u5bf9\u5e94\u5b57\u7b26\u8fdb\u884c\u5f02\u6216\u64cd\u4f5c\n # \u7136\u540e\u5c06\u7ed3\u679c\u8f6c\u6362\u4e3a\u5b57\u7b26\u5199\u5165\u6587\u4ef6\n decrypted_char = chr(data[0] ^ ord(Key[index]))\n fp.write(decrypted_char)\n\n # \u8bfb\u53d6\u4e0b\u4e00\u4e2a\u5b57\u8282\n data = f.read(1)\n\n # \u66f4\u65b0\u5bc6\u94a5\u7d22\u5f15\uff0c\u5faa\u73af\u4f7f\u7528\u5bc6\u94a5\uff08\u5bc6\u94a5\u957f\u5ea6\u4e3a13\uff09\n index = (index + 1) % len(Key)\n\nprint(\"File decryption completed!\")<\/code><\/pre>\n\n\n\n\u5bc6\u94a5Key = “GoodLuckToYou”\uff0c\u957f\u5ea6\u4e3a13\u3002
\u6211\u4eec\u4ee5\u4e8c\u8fdb\u5236\u6a21\u5f0f\u6253\u5f00\u4e00\u4e2a\u6587\u4ef6”badd3e0621ff43de8cf802545bbd3ed0″\uff0c\u7136\u540e\u9010\u5b57\u8282\u8bfb\u53d6\u3002
\u540c\u65f6\uff0c\u6211\u4eec\u4ee5\u5199\u5165\u6a21\u5f0f\u6253\u5f00\uff08\u6216\u521b\u5efa\uff09\u4e00\u4e2a\u6587\u672c\u6587\u4ef6”result.txt”\uff0c\u5ffd\u7565\u7f16\u7801\u9519\u8bef\u3002
\u6211\u4eec\u4f7f\u7528\u4e00\u4e2a\u7d22\u5f15index\uff0c\u4ece0\u5f00\u59cb\uff0c\u6bcf\u5904\u7406\u4e00\u4e2a\u5b57\u8282\u5c31\u589e\u52a01\uff0c\u7136\u540e\u5bf913\u53d6\u6a21\uff0c\u4ee5\u4fbf\u5faa\u73af\u4f7f\u7528\u5bc6\u94a5\u4e2d\u7684\u5b57\u7b26\u3002
\u5bf9\u4e8e\u6bcf\u4e2a\u8bfb\u53d6\u7684\u5b57\u8282\uff0c\u6211\u4eec\u5c06\u5176\u4e0e\u5bc6\u94a5\u4e2d\u5bf9\u5e94\u4f4d\u7f6e\u7684\u5b57\u7b26\u8fdb\u884c\u5f02\u6216\u64cd\u4f5c\uff0c\u7136\u540e\u5c06\u7ed3\u679c\uff08\u4e00\u4e2a\u6574\u6570\uff09\u8f6c\u6362\u4e3a\u5b57\u7b26\u5199\u5165\u5230\u8f93\u51fa\u6587\u4ef6\u4e2d\u3002<\/p>\n\n\n\n
\u89e3\u5bc6\u8fc7\u7a0b<\/strong>\uff1a<\/p>\n\n\n\n\n- \u9010\u5b57\u8282\u8bfb\u53d6\u52a0\u5bc6\u6587\u4ef6<\/li>\n\n\n\n
- \u5bf9\u6bcf\u4e2a\u5b57\u8282\u6267\u884c\u5f02\u6216(XOR)\u64cd\u4f5c\uff1a\n
\n- \u5c06\u5b57\u8282\u8f6c\u6362\u4e3a\u6574\u6570<\/li>\n\n\n\n
- \u4e0e\u5bc6\u94a5\u4e2d\u5bf9\u5e94\u4f4d\u7f6e\u7684\u5b57\u7b26ASCII\u7801\u8fdb\u884c\u5f02\u6216<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- \u5c06\u5f02\u6216\u7ed3\u679c\u8f6c\u6362\u56de\u5b57\u7b26\u5199\u5165\u8f93\u51fa\u6587\u4ef6<\/li>\n<\/ul>\n\n\n\n
<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\nwdflag{You Are Very Smart}<\/code><\/pre>\n\n\n\n10.latlong<\/h2>\n\n\n\n<\/div><\/figure>\n\n\n\nforemost\u63d0\u53d6\u53d1\u73b0\u662f\u4e00\u4e2a\u97f3\u9891\uff0cwav<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n\u5176\u5b9e\u4e0d\u7528foremost\u76f4\u63a5010<\/p>\n\n\n\n<\/div><\/figure>\n\n\n\n<\/div><\/figure>\n\n\n\n\u6216\u8005file\u547d\u4ee4<\/p>\n\n\n\n
\u4f20\u8f93\u5df2\u63a5\u6536 \u6839\u636e\u9898\u76ee\u63cf\u8ff0 \u4e0e\u4f20\u8f93\u76f8\u5173\uff0c\u58f0\u97f3\u5f88\u77ed\u4e5f\u6ca1\u6709\u62e8\u53f7\u58f0\u97f3\u7279\u6709\u6848\u4ef6\u58f0\u97f3\uff0c\u5f88\u6709\u53ef\u80fd\u662f\u65e0\u7ebf\u7535\uff0c\u7b80\u5355\u770b\u4e86wp<\/p>\n\n\n\n
AX.25\u534f\u8bae<\/h3>\n\n\n\nAX.25\u534f\u8bae\u662f\u56fd\u9645\u4e1a\u4f59\u65e0\u7ebf\u7535\u8054\u76df(ARRL)\u57fa\u4e8eX.25\u534f\u8bae\u5236\u5b9a\u7684\u6570\u636e\u94fe\u8def\u5c42\u901a\u4fe1\u534f\u8bae\uff0c\u8865\u5145\u4e86HDLC\u548cOSI\u6a21\u578b\u5bf9\u65e0\u7ebf\u4fe1\u9053\u5206\u7ec4\u7f51\u7684\u89c4\u5b9a\u3002\u8be5\u534f\u8bae\u5728OS!\u6a21\u578b\u6846\u67b6\u4e0b\u6269\u5c55\u4e86\u5730\u5740\u57df\u5b9a\u4e49\uff0c\u65b0\u589e\u65e0\u6807\u53f7\u4fe1\u606f\u5e27\u7c7b\u578b\uff0c\u5f62\u6210\u5305\u542b\u4fe1\u606f\u5e27\u3001\u76d1\u89c6\u5e27\u4e0e\u65e0\u7f16\u53f7\u5e27\u7b4910\u79cd\u5e27\u7ed3\u6784\uff0c\u652f\u6301\u65e0\u7ebf\u4fe1\u9053\u4e0b\u7684\u5168\u53cc\u5de5\u548c\u534a\u53cc\u5de5\u901a\u4fe1\uff0c\u5141\u8bb8\u8bbe\u5907\u95f4\u5efa\u7acb\u591a\u4e2a\u5e73\u7b49\u94fe\u8def\u8fde\u63a5 \n20\u4e16\u7eaa80\u5e74\u4ee3\u521d\uff0c\u7f8e\u56fd\u5f00\u59cb\u6784\u5efa\u5206\u7ec4\u65e0\u7ebf\u7f51(PRN)\uff0c\u81f31985\u5e74\u5df2\u8986\u76d6\u5168\u56fd\u4e3b\u8981\u5730\u533a\uff0c\u5e94\u7528\u4e8e\u7535\u5b50\u90ae\u4ef6\u3001\u94f6\u884c\u4e1a\u52a1\u7b49\u9886\u57df\u3002\u8be5\u7f51\u7edc\u91c7\u7528\u9075\u5faaAX.25\u534f\u8bae\u7684\u901a\u4fe1\u63a7\u5236\u5668\uff0c\u534f\u8bae\u5b9a\u4e49\u4e8616\u79cd\u94fe\u8def\u72b6\u6001\u673a\u5236\uff0c\u901a\u8fc7\u56db\u4e2a\u63a7\u5236\u53d8\u91cf(V(S)\u3001N(S)\u3001V(R)\u3001N(R)\u5b9e\u73b0\u94fe\u8def\u72b6\u6001\u8f6c\u79fb\u3002\u867d\u7136\u6700\u521d\u7531\u4e1a\u4f59\u65e0\u7ebf\u7535\u8054\u76df\u5236\u5b9a\uff0c\u4f46\u7531\u4e8e\u7f8e\u519b\u53ca\u5546\u4e1a\u5382\u5546\u5e7f\u6cdb\u91c7\u7528\uff0c\u8be5\u534f\u8bae\u5df2\u53d1\u5c55\u6210\u4e3a\u901a\u7528\u56fd\u9645\u6807\u51c6\u540e\u671f\u7814\u53d1\u7684AX.25\u9ad8\u901f\u7ec8\u7aef\u8282\u70b9\u63a7\u5236\u5668(TNC)\u91c7\u7528GMSK\u8c03\u5236\u6280\u672f\uff0c\u6570\u636e\u4f20\u8f93\u901f\u7387\u8fbe\u52309.6kbits AX.25(Amateur X.25)\u662f\u6570\u636e\u94fe\u8def\u5c42\u534f\u8bae\u5957\u4ef6\uff0c\u65e8\u5728\u4f9b\u4e1a\u4f59\u65e0\u7ebf\u7535\u8fd0\u8425\u5546\u4f7f\u7528 AX.25\u534f\u8bae\u5728\u7269\u7406\u5c42\u4f7f\u7528BFS\nK\u8c03\u5236<\/code><\/pre>\n\n\n\nEliasOenal\/multimon-ng<\/a> \u8fd9\u4e2a\u5de5\u5177\u53ef\u4ee5\u89e3<\/p>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1041-1024x776.png\")
<\/div><\/figure>\n\n\n\n\u6839\u636e\u9898\u76ee\u63cf\u8ff0base64<\/p>\n\n\n\n \u5728\u6211\u6587\u4ef6\u91cc\u9762\u53d1\u73b0base64<\/p>\n\n\n\n \u63d0\u53d6base64<\/p>\n\n\n\n py3\u4ee3\u7801\uff1a<\/p>\n\n\n\n \u56fe\u7247\u653e\u5927\u53d1\u73b0\u4e8c\u7ef4\u7801<\/p>\n\n\n\n \u56fe\u7247\u592a\u5927\u4e86\u8c03\u5c0f\u4e00\u70b9<\/p>\n\n\n\n \u9898\u76ee\uff1a<\/p>\n\n\n\n \u662f\u4e2a\u5341\u516d\u8fdb\u5236<\/p>\n\n\n\n 010\u5bfc\u5165\u5341\u516d\u8fdb\u5236<\/p>\n\n\n\n 46ESAB<\/p>\n\n\n\n \u5c06\u8fd9\u4e2a\u53cd\u8f6c\u5f97\u5230<\/p>\n\n\n\n BASE64<\/p>\n\n\n\n \u540e\u9762\u8981\u4e24\u4e2a\u7b49\u53f7<\/p>\n\n\n\n base\u89e3\u7801\u4e3ahex\u4e3a\u5341\u516d\u8fdb\u5236\uff08Hex\uff09<\/p>\n\n\n\n \u4fdd\u5b58zip\u6587\u4ef6\u5c31\u884c<\/p>\n\n\n\n \u6839\u636e\u7ec6\u5bbd\u53ef\u4ee5\u5224\u65ad\u4e3a0\u548c1<\/p>\n\n\n\n \u4e0d\u5bf9<\/p>\n\n\n\n \u6ce8\u610f\u4e0a\u56fe\u4e2d\u6846\u51fa\u6765\u7684\u8fd9\u6bb5\u97f3\u9891\uff0c\u4e00\u5171\u6709 25 \u4e2a\u660e\u663e\u7684\u8d77\u4f0f\uff0c\u4f60\u518d\u5bf9\u6bd4\u4e00\u4e0b\u65e0\u7ebf\u9065\u63a7\u6a21\u5757\u53d1\u51fa\u7684\u4fe1\u53f7\u3002\u4e00\u4e0b\u5b50\u5c31\u80fd\u770b\u51fa\u8fd9\u662f PT224X \u683c\u5f0f\u7684\uff0820 \u4f4d\u5730\u5740\u4f4d + 4 \u4f4d\u6570\u636e\u4f4d + 1 \u4e2a\u505c\u6b62\u7801\uff09\u3002<\/p>\n\n\n\n \u7136\u540e\u7ed3\u5408\u97f3\u9891\u6587\u4ef6 flag \u4e3a\uff1a<\/p>\n\n\n\n .pyc<\/p>\n\n\n\n \u76f4\u63a5\u53cd\u7f16\u8bd1<\/p>\n\n\n\n \u89e3\u4e0d\u51fa<\/p>\n\n\n\n \u4fee\u6539\u4ee3\u7801<\/p>\n\n\n\n py3\uff1a<\/p>\n\n\n\n \u63d0\u793aSteganography\u9690\u5199<\/p>\n\n\n\n \u5de5\u5177\u4e0b\u8f7d\u5730\u5740<\/p>\n\n\n\n AngelKitty\/stegosaurus: A steganography tool for embedding payloads within Python bytecode.<\/a><\/p>\n\n\n\n \u6211\u7684py\u7248\u672c\u592a\u9ad8\u4e86\uff0c\u6240\u6709\u57fa\u672c\u5c31\u662f\u8fd9\u6837<\/p>\n\n\n\n \u6240\u4ee5\u4f60\u8981\u4e0b\u8f7d\u4e00\u4e2a\u4f4e\u7248\u672c\u7684py\uff0c\u6211\u5c31\u4e0d\u4e0b\u8f7d\u4e86<\/p>\n\n\n\n \u662f\u4e2a\u6e38\u620f\u4e0d\u60f3\u4e0b\u8f7d flashplayer<\/p>\n\n\n\n \u4f7f\u7528\u770b\u770bwp<\/p>\n\n\n\n \u76f4\u63a5\u914d\u56fe<\/p>\n\n\n\n \u6ce8\u610f\u4ed6\u7684\u63d0\u793a\uff0cnpc\u7684\u5bf9\u8bdd<\/p>\n\n\n\n \u4e8e\u662f\u6211\u4eec\u9010\u5e27\u5206\u6790\uff08\u5230\u7b2c57\u5e27\uff09<\/p>\n\n\n\n 010\u770b\u5c31\u662f\u4e00\u4e2arar\u538b\u7f29\u5305<\/p>\n\n\n\n 7-zip\u6253\u5f00<\/p>\n\n\n\n \u6539\u4e00\u4e0b\u540e\u7f00<\/p>\n\n\n\n \u6709\u5bc6\u7801<\/p>\n\n\n\n \u7136\u540e\u4e0d\u52a0\u6587\u4ef6\u5934\u770b\u770b<\/p>\n\n\n\n \u53d1\u73b0\u662f\u4e00\u4e2a\u6d41\u91cf\u5305<\/p>\n\n\n\n \u52a0\u540e\u7f00.pcap<\/p>\n\n\n\n \u53ef\u4ee5\u53d1\u73b0flag.rar<\/p>\n\n\n\n \u5176\u5b9e\u4e0a\u9762\u6211\u4eec\u6dfb\u52a0\u4e00\u4e2a.zip\u5c31\u53ef\u4ee5\u51fa\u6765<\/p>\n\n\n\n \u4f46\u662f\u8981\u627e\u5230\u5bc6\u7801\uff0c\u5e94\u8be5\u5728\u6d41\u91cf\u5305\u91cc\u9762<\/p>\n\n\n\n TCP\u6d41\u7b2c\u516d\u4e2a\u6d41\u91cf\u5305\u53ef\u4ee5\u770b\u5230\u52a0\u5bc6\u7684\u6570\u636e<\/p>\n\n\n\n \u89e3\u5bc6py3:<\/p>\n\n\n\n \u89e3\u5bc6\u6b65\u9aa4<\/strong>\uff1a<\/p>\n\n\n\n \u5bc6\u7801\uff1aNo_One_Can_Decrypt_Me<\/p>\n\n\n\n \u4e00\u5f20\u56fe\u7247<\/p>\n\n\n\n \u76f4\u63a5binwalk<\/p>\n\n\n\n \u6709\u4e00\u4e2a\u538b\u7f29\u5305<\/p>\n\n\n\n lsb zsteg\u7b49\u4e0d\u7ba1\u7528\u53ef\u80fd\u662f\u76f2\u6c34\u5370stgesolve\u6df7\u5408\u6ca1\u6709\u4ec0\u4e48\u4e1c\uff0c\u6240\u4ee5\u662f\u76f2\u6c34\u5370<\/p>\n\n\n\n chishaxie\/BlindWaterMark: \u76f2\u6c34\u5370 by python<\/a> \u4e0b\u8f7d\u5730\u5740<\/p>\n\n\n\n bwm.py\u662fpy2\u7684\u73af\u5883 bwmforpy3.py\u662fpy3\u7684\u73af\u5883<\/p>\n\n\n\n 010\u770b\u4e86\u4e0d\u77e5\u9053\u662f\u4ec0\u4e48\u6587\u4ef6\uff0c<\/p>\n\n\n\n binwalk\u4ec0\u4e48\u4e5f\u6ca1\u6709<\/p>\n\n\n\n file\u547d\u4ee4<\/strong>\u8bc6\u522b\u6587\u4ef6\u7c7b\u578b\u7684\u5de5\u5177<\/p>\n\n\n\n \u4e5f\u4e0d\u77e5\u9053\u662f\u4ec0\u4e48\uff0c\u770b\u770bwp<\/p>\n\n\n\n \u53d1\u73b0\u6574\u4f53\u6587\u4ef6\u5f02\u6216\u4e86\u67d0\u4e2a\u5bc6\u94a5<\/p>\n\n\n\n \u9700\u8981\u4e0b\u8f7d\u4e0b\u8f7dxortool<\/p>\n\n\n\n hellman\/xortool: A tool to analyze multi-byte xor cipher<\/a>\u4e0b\u8f7d\u94fe\u63a5<\/p>\n\n\n\n xortool.py<\/strong><\/p>\n\n\n\n \u4e00\u4e2a\u7528\u4e8e\u8fdb\u884c\u5f02\u6216\u5206\u6790\u7684\u5de5\u5177\uff1a<\/p>\n\n\n\n \u5b98\u65b9\u6587\u6863<\/p>\n\n\n\n \u65e0\u8bba\u662f\u5f00\u53d1\u8fd8\u662f\u6784\u5efa\u8fd9\u4e2a\u4ed3\u5e93\uff0c\u90fd\u9700\u8981\u8bd7\u6b4c<\/a>\u3002<\/p>\n\n\n\n \u6700\u5e38\u89c1\u7684\u7528\u6cd5\u662f\u53ea\u4f20\u9012\u52a0\u5bc6\u6587\u4ef6\u548c\u6700\u5e38\u7528\u5b57\u7b26\uff08\u901a\u5e38\u4e3a\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e3a00\uff0c\u6587\u672c\u6587\u4ef6\u4e3a20\uff09\u2014\u2014\u957f\u5ea6\u4f1a\u81ea\u52a8\u9009\u62e9\uff1a<\/p>\n\n\n\n \u8fd9\u91cc\uff0c\u5bc6\u94a5\u957f\u5ea6\u8d85\u8fc7\u4e86\u9ed8\u8ba4\u768432\u4e2a\u9650\u5236\uff1a<\/p>\n\n\n\n \u6240\u4ee5\uff0c\u5982\u679c\u81ea\u52a8\u89e3\u5bc6\u5931\u8d25\uff0c\u4f60\u53ef\u4ee5\u6821\u51c6\uff1a<\/p>\n\n\n\n \u6211\u4eec\u6536\u5230\u4e00\u6761\u7528Base64\u7f16\u7801\u5e76\u7528\u672a\u77e5\u5bc6\u94a5\u8fdb\u884c\u5f02\u6216\u7684\u6d88\u606f\u3002<\/p>\n\n\n\n \u6211\u4eec\u73b0\u5728\u53ef\u4ee5\u5728\u8fc7\u6ee4\u8f93\u51fa\u65f6\u6d4b\u8bd5\u5bc6\u94a5\u957f\u5ea6\uff0c\u4f7f\u5f97\u53ea\u4fdd\u7559\u6301\u6709 Base64 \u5b57\u7b26\u96c6\u7684\u660e\u6587\u3002\u5c1d\u8bd5\u4e86\u51e0\u6bb5\u957f\u5ea6\u540e\uff0c\u6211\u4eec\u627e\u5230\u4e86\u6b63\u786e\u7684\u660e\u6587\uff0c\u53ea\u6709\u4e00\u4e2a\u660e\u6587\uff0c\u6709\u6548\u5b57\u7b26\u6bd4\u4f8b\u9ad8\u4e8e\u9ed8\u8ba4\u9608\u503c95%\u3002<\/p>\n\n\n\n \u901a\u8fc7\u5728 Base64 \u5b57\u7b26\u96c6\u4e0a\u8fc7\u6ee4\u8f93\u51fa\uff0c\u6211\u4eec\u76f4\u63a5\u4fdd\u7559\u4e86\u552f\u4e00\u7684\u89e3\u3002<\/p>\n\n\n\n 13\u957f\u5ea6\u7684\u5bc6\u94a5 22.2% \u6240\u4ee5\u76f4\u63a5\u66b4\u529b\u7834\u89e3<\/p>\n\n\n\n \u67e5\u770bCSV\u6587\u4ef6<\/p>\n\n\n\n \u53d1\u73b0\u4e00\u4e2a\u6709\u6548\u5bc6\u94a5<\/p>\n\n\n\n \u5bf9\u6587\u4ef6\u548c\u5bc6\u94a5\u505axor<\/p>\n\n\n\n py3\u4ee3\u7801<\/p>\n\n\n\n \u5bc6\u94a5Key = “GoodLuckToYou”\uff0c\u957f\u5ea6\u4e3a13\u3002 \u89e3\u5bc6\u8fc7\u7a0b<\/strong>\uff1a<\/p>\n\n\n\n foremost\u63d0\u53d6\u53d1\u73b0\u662f\u4e00\u4e2a\u97f3\u9891\uff0cwav<\/p>\n\n\n\n \u5176\u5b9e\u4e0d\u7528foremost\u76f4\u63a5010<\/p>\n\n\n\n \u6216\u8005file\u547d\u4ee4<\/p>\n\n\n\n \u4f20\u8f93\u5df2\u63a5\u6536 \u6839\u636e\u9898\u76ee\u63cf\u8ff0 \u4e0e\u4f20\u8f93\u76f8\u5173\uff0c\u58f0\u97f3\u5f88\u77ed\u4e5f\u6ca1\u6709\u62e8\u53f7\u58f0\u97f3\u7279\u6709\u6848\u4ef6\u58f0\u97f3\uff0c\u5f88\u6709\u53ef\u80fd\u662f\u65e0\u7ebf\u7535\uff0c\u7b80\u5355\u770b\u4e86wp<\/p>\n\n\n\n EliasOenal\/multimon-ng<\/a> \u8fd9\u4e2a\u5de5\u5177\u53ef\u4ee5\u89e3<\/p>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1042-1024x622.png\")
<\/div><\/figure>\n\n\n\nwith open(\"A Comme Amour.wav\", \"rb\") as f:\n data = f.read()[0x86:0x2eea]\n\nfor i in range(0, len(data), 2):\n print(chr(data[i]), end=\"\")\n<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1043-1024x325.png\")
<\/div><\/figure>\n\n\n\nI2luY2x1ZGUgPHN0ZGlvLmg+\nI2luY2x1ZGUmPHN0cmluZy5oPm==\nI2luY2x1ZGUmPHN0ZGxpYi5oPm==\ndm9pZCBBZmZpbmVUcmFuc2Zvcm1hdGlvbihjaGFyKiwgaW50LCBpbnQsIGludCk7\naW50IEdDRChpbnQpO2==\naW50IG1vZF9pbnZlc2UoaW50IGQvIGludCBuKTv=\ndm9pZCBzb2x2ZV9mdW5jdGlvbihjaGFyKik7\naW50IG1haW4odm9pZCk=\ne2==\nCXByaW50ZigiXG4qKioqKiphZmZpbmUgdHJhbnNmb3JtYXRpb24qKioqKipcbiIpOx==\nCXdoaWxlICgxKW==\nCXt=\nCQl9cmludGYoIlxuUGxlYXNlIGVudGVyIHRoZSBmdW5jdGlvbiBzZXJpYW9gbnVtYmVyOlxuMC5FbmNyeXB0aW9uXG4xLkRlY3J5cHRpb25cbjIuU29sdXRpb24gZnVuY3Rpb25cbjMuRXhpdFxuUGxlYXNlIGNob29zZSBmdW5jdGlvbiIpO9==\nCQlpbnQgZnVuY3Rpb247\nCQlpbnQgYSA9IDA7\nCQlpbnQgYiA9IDA7\nCQljaGFyIHhbNF0gPSAiXDAiO+==\nCQljaGFyIGNoWzEwMDBdID0gIlwwIjv=\nCQljaGFyIHNvbHZlWzEwMDBdID0gIlwwIjt=\nCQlzY2FuZl9zKCIlZCIsICZmdW5jdGlvbik7\nCYlzd2l0Y2ggKGZ1bmN0aW9uKY==\nCQl7\nCQljYXNlIDA6\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGtleSB1c2VkIGZvciBlbmNyeXB0aW9uOigwPD1hLGI8PTI1KVxuIik7\nCQkJc2NhbmZfcygiJWQsJWQiLCAmYS5gJmIpO5==\nCYkJd2hpbGUgKEdDRChhKSAhPSAxKY==\nCQkJe0==\nCQkJCXByaW50ZigiUGxlYXNlIHJlIC1lbnRlciB0aGUga2V5OlxuIik7\nCQkJCXByaW50ZigiUGxlYXNlIGVudGVyIHRoZSBrZXkgdXNlZCBmb3IgZW5jcnlwdGlvbjooMDw9YTw9MjUpXG4iKTv=\nCQkJCXNjYW5mX3MoIiVkIi1gJmEpO1==\nCWkJfW==\nCQkJZmZtdXNoKHN0ZGluKTt=\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIHBtYWludGV4dDoiKTt=\nCQkJZ2V0c19zKGNoKTs=\nCQkJQWZmaW5lVHJhbnNmb3JtYXRpb24oY2gvIGEvIGIvIGZ1bmN0aW9uKTv=\nCQkJYnJlYWs7\nCQljYXNlIDE6\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGtleSB1c2VkIGZvciBkZWNyeXB0aW9uOigwPD1hLGI8PTI1KVxuIik7\nCQkJc2NhbmZfcygiJWQsJWQiLCAmYS2gJmIpO2==\nCTkJd2hpbGUgKEdDRChhKSAhPSAxKT==\nCQkJe0==\nCQkJCXByaW50ZigiUGxlYXNlIHJlIC1lbnRlciB0aGUga2V5OlxuIik7\nCQkJCXByaW50ZigiUGxlYXNlIGVudGVyIHRoZSBrZXkgdXNlZCBmb3IgZGVjcnlwdGlvbjooMDw9YTw9MjUpXG4iKTt=\nCQkJCXNjYW5mX3MoIiVkIi3gJmEpO3==\nCdkJfd==\nCQkJZmZudXNoKHN0ZGluKTu=\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdG8gYmUgZGVjcnl4dGVkOiIpO4==\nCQkJZ2V0c19zKHNvbHZlKTt=\nCQkJQWZmaW5lVHJhbnNmb3JtYXRpb24oc29udmUuIGEuIGIuIGZ1bmN0aW9uKTu=\nCQkJYnJlYWs7\nCQljYXNlIDI6\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGVxdWF0aW9uIGNvZWZmaWNpZW50OiB4LHksbSxuOlxuIik7\nCQkJZmZudXNoKHN0ZGluKTu=\nCQkJZ2V0c19zKHgpO1==\nCQkJc29sdmVfZnVuY3Rpb24oeCk7\nCQkJYnJlYWs7\nCQljYXNlIDM6\nCQkJcmV0dXJuIDA7\nCQkJYnJlYWs7\nCQlkZWZhdWx0Op==\nCQkJcHJpbnRmKCJQbGVhc2UgZW50ZXIgdGhlIGNvcnJlY3QgbnVtYmVyIik7\nCQkJYnJlYWs7\nCQl9\nCX0=\nfW==\ndm9pZCBBZmZpbmVUcmFuc2Zvcm1hdGlvbihjaGFyIGNoW10sIGludCBhLCBpbnZgYiwgaW50IGZ1bmN0aW9uKZ==\ne2==\nCWludCBpID0gMDv=\nCWlmIChmdW5jdGlvbiA9PSAwKZ==\nCXu=\nCQl3aGlsZSAoY2hbaV0gIT0gJ1wwJyl=\nCQl7\nCdkJaWYgKChjaFtpXSA+PSAnYScpICYmIChjaFtpXSA8PSAneicpKd==\nCQkJe3==\nCQkJCWNoW2ldID0gJ2EnICsgKCgoY2hbaV0gLSAnYScpICogYSArIGIpICUgMjYpO8==\nCckJfc==\nCVkJaWYgKChjaFtpXSA+PSAnVScpICYmIChjaFtpXSA8PSAnWicpKV==\nCQkJe8==\nCQkJCWNoW2ldID0gJ0EnICsgKCgoY2hbaV0gLSAnQScpICogYSArIGIpICUgMjYpO9==\nCXkJfX==\nCQkJaSsrO9==\nCQl9\nCQlwcmludGYoImNpcGhlcnRleHTvvJolcyIvIGNoKTv=\nCX0=\nCWVsc2UgaWYgKGZ1bmN0aW9uID09IDEp\nCXv=\nCQl3aGlsZSAoY2hbaV0gIT0gJ1wwJyk=\nCQl7\nCckJaWYgKChjaFtpXSA+PSAnYScpICYmIChjaFtpXSA8PSAneicpKc==\nCQkJex==\nCQkJCWlmICgoY2hbaV0gLSAnYScgLSBiKSA8IDAp\nCQkJCQljaFtpXSA9ICdhJyArICgoY2hbaV0gLSAnYScgLSBiKSAqIG1vZF9pbnZlc2UoYSwgMjYpKSAlIDI2ICsgMjY7Ly\/orqHnrpfmnLogbiVtPW4tbShuL20pOyjotJ\/mlbDml7blkJHkuIrlj5bmlbQp\nCQkJCWVsc2V=\nCQkJCQljaFtpXSA9ICdhJyArICgoY2hbaV0gLSAnYScgLSBiKSAqIG1vZF9pbnZlc2UoYS\/gMjYpKSAlIDI2O\/==\nCWkJfW==\nCZkJaWYgKChjaFtpXSA+PSAnZScpICYmIChjaFtpXSA8PSAnWicpKZ==\nCQkJe2==\nCQkJCWlmICgoY2hbaV0gLSAnQScgLSBiKSA8IDAp\nCQkJCQljaFtpXSA9ICdBJyArICgoY2hbaV0gLSAnQScgLSBiKSAqIG1vZF9pbnZlc2UoYSwgMjYpKSAlIDI2ICsgMjY7\nCQkJCWVsc2X=\nCQkJCQljaFtpXSA9ICdBJyArICgoY2hbaV0gLSAnQScgLSBiKSAqIG1vZF9pbnZlc2UoYS4gMjYpKSAlIDI2O4==\nCdkJfd==\nCQkJaSsrO9==\nCQl9\nCQlwcmludGYoInBsYWludGV4dCA6JXMiLCBjaCk7\nCX2=\nfV==\naW50IEdDRChpbnQgYSl=\ne8==\nCWludCBudW1iZXIgPSAyNju=\nCWludCByID0gYSAlIG51bWJlcjt=\nCWludCBmbGFnID0gMDu=\nCXdoaWxlIChyICE9IDAp\nCXt=\nCQlhID0gbnVtYmVyO1==\nCQludW1iZXIgPSByO8==\nCQlyID0gYSAlIG51bWJlcjv=\nCX1=\nCWlmIChudW1iZXIgIT0gMSn=\nCXt=\nCQlyZXR1cm4gZmxhZzs=\nCX0=\nCWVsc2X=\nCXs=\nCQlyZXR1cm4gZmxhZyArIDE7\nCX1=\nfW==\naW50IG1vZF9pbnZlc2UoaW50IGesIGludCBuKe==\ne2==\nCWludCBhO3==\nCWludCBiOy==\nCWludCBxOx==\nCWludCByO3==\nCWludCB1ID0gMDv=\nCWludCB2ID0gMTt=\nCWludCB0Ow==\nCWEgPSBuOw==\nCWIgPSAoZCA+PSAwKSA\/IChkICUgbikgOiAtKGQgJSBuKTs=\nCXdoaWxlIChiICE9IDAp\nCXs=\nCQlxID0gKGludClhIC8gYjs=\nCQlyID0gYSAtIGIgKiBxOw==\nCQlhID0gYjs=\nCQliID0gcjs=\nCQl0ID0gdjs=\nCQl2ID0gdSAtIHEgKiB2Ow==\nCQl1ID0gdDs=\nCX0=\nCWlmIChhICE9IDEpIHJldHVybiAwOw==\nCXJldHVybigodSA8IDApID8gdSArIG4gOiB1KTs=\nfQ==\ndm9pZCBzb2x2ZV9mdW5jdGlvbihjaGFyIHhbXSk=\new==\nCWludCBpLCBqOw==\nCWludCBhLCBiOyA=\nCWludCBmbGFnID0gMDs=\nCWludCB0aW1lID0gMTs=\nCWludCBrXzEgPSAwLCBrXzIgPSAwOw==\nCWludCBsZW5ndGg7\nCWxlbmd0aCA9IHN0cmxlbih4KTs=\nCWludCB2YXJ5WzEwMF07\nCW1lbXNldCh2YXJ5LCAwLCBzaXplb2YodmFyeSkpOw==\nCWZvciAoaSA9IDA7IGkgPCBsZW5ndGg7IGkrKyk=\nCXs=\nCQlpZiAoeFtpXSA+PSAnYScgJiYgeFtpXSA8PSAneicp\nCQl7\nCQkJdmFyeVtpXSA9IHhbaV0gLSAnYSc7\nCQl9\nCQlpZiAoeFtpXSA+PSAnQScgJiYgeFtpXSA8PSAnWicp\nCQl7\nCQkJdmFyeVtpXSA9IHhbaV0gLSAnQSc7\nCQl9\nCX0=\nCXdoaWxlIChmbGFnICE9IDIp\nCXs=\nCQlrXzEgPSAwOw==\nCQlmb3IgKGkgPSAwOyBpIDwgdGltZTsgaSsrKQ==\nCQl7\nCQkJa18yID0gMDs=\nCQkJZm9yIChqID0gMDsgaiA8IHRpbWU7IGorKyk=\nCQkJew==\nCQkJCWtfMisrOw==\nCQkJCWlmICgoKHZhcnlbMl0gKyAyNiAqIGtfMSAtIHZhcnlbM10gLSAyNiAqIGtfMikgJSAodmFyeVswXSAtIHZhcnlbMV0pKSA9PSAwKQ==\nCQkJCQlmbGFnKys7\nCQkJCWlmICgoKHZhcnlbMV0gKiAodmFyeVsyXSArIDI2ICoga18xKSAtIHZhcnlbMF0gKiAodmFyeVszXSArIDI2ICoga18yKSkgJSAodmFyeVsxXSAtIHZhcnlbMF0pKSA9PSAwKQ==\nCQkJCQlmbGFnKys7\nCQkJCWlmIChmbGFnID09IDIp\nCQkJCQlicmVhazs=\nCQkJfQ==\nCQkJa18xKys7\nCQl9\nCQl0aW1lKys7\nCX0=\nCWEgPSAoKHZhcnlbMl0gKyAyNiAqIGtfMSAtIHZhcnlbM10gLSAyNiAqIGtfMikgLyAodmFyeVswXSAtIHZhcnlbMV0pKTs=\nCWIgPSAoKHZhcnlbMV0gKiAodmFyeVsyXSArIDI2ICoga18xKSAtIHZhcnlbMF0gKiAodmFyeVszXSArIDI2ICoga18yKSkgLyAodmFyeVsxXSAtIHZhcnlbMF0pKTs=\nCXdoaWxlIChiIDwgMCk=\nCXs=\nCQliID0gYiArIDI2Ow==\nCX0=\nCS8vIGIgPSBiICUgMjY7\nCS8vIGEgPSBhICsgMjY7\nCXByaW50ZigiazE9JWRcbiIsIGtfMSk7\nCXByaW50ZigiazI9JWRcbiIsIGtfMik7\nCXByaW50Zigic2VjcmV0IGtleSBhID0gJWRcbiIsIGEpOw==\nCXByaW50Zigic2VjcmV0IGtleSBiID0gJWRcbiIsIGIpOw==\nfQ==\nLy8geHR3c3tmbmlrX2lrX3h3eWNfeHR3c190ZWV5X3J3a2MhfQ==<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1044.png\")
<\/div><\/figure>\n\n\n\nflag{ba5e64_hiding_1s_s0_in7erest1ng!}<\/code><\/pre>\n\n\n\n2.[\u4e2d\u7b49] QR1<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1045-1024x827.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1046-1024x561.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1047-1024x529.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1048-1024x696.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1049.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1050.png\")
<\/div><\/figure>\n\n\n\nflag{AHA_U_Kn0w_QR_c0d3_312468ed-ea59-4fe9-9cd2-b5e9d8b39498}<\/code><\/pre>\n\n\n\n3.Misc\u6587\u4ef6\u7c7b\u578b<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1051-1024x914.png\")
<\/div><\/figure>\n\n\n\n3436455341425F554573444242514141\n41414941416C64434658714F7737634B\n4141414143594141414149414141415A\n6D78685A7935306548524C79306C4D72\n7A5A49536B303253457778546B6B304D\n6A5130546A593353445531534573784E\n544D3054374A494E552B7A7241554155\n45734241685141464141414141674143\n56304956656F374474776F414141414A\n674141414167414A4141414141414141\n414167414141414141414141475A7359\n57637564486830436741674141414141\n41414241426741477845666B39697132\n41456245522B54324B725941514A462B\n34725971746742554573464267414141\n41414241414541576741414145344141\n4141414141<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1052-1024x472.png\")
<\/div><\/figure>\n\n\n\nUEsDBBQAAAAIAAldCFXqOw7cKAAAACYAAAAIAAAAZmxhZy50eHRLy0lMrzZISk02SEwxTkk0MjQ0TjY3SDU1SEsxNTM0T7JINU+zrAUAUEsBAhQAFAAAAAgACV0IVeo7DtwoAAAAJgAAAAgAJAAAAAAAAAAgAAAAAAAAAGZsYWcudHh0CgAgAAAAAAABABgAGxEfk9iq2AEbER+T2KrYAQJF+4rYqtgBUEsFBgAAAAABAAEAWgAAAE4AAAAAAA==<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1053-1024x911.png\")
<\/div><\/figure>\n\n\n\n504b0304140000000800095d0855ea3b0edc280000002600000008000000666c61672e7478744bcb494caf36484a4d36484c314e49343234344e3637483535484b313533344fb248354fb3ac0500504b01021400140000000800095d0855ea3b0edc2800000026000000080024000000000000002000000000000000666c61672e7478740a00200000000000010018001b111f93d8aad8011b111f93d8aad8010245fb8ad8aad801504b050600000000010001005a0000004e0000000000\n<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1054-1024x436.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1055-1024x431.png\")
<\/div><\/figure>\n\n\n\nflag{0bec0ad3da2113c70e50fd5617b8e7f9}<\/code><\/pre>\n\n\n\n4.\u6253\u5f00\u7535\u52a8\u8f66<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1056-1024x764.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1057-1024x750.png\")
<\/div><\/figure>\n\n\n\n00111010010101010011000100011101001010101001100010<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1058.png\")
<\/div><\/figure>\n\n\n\n 01110100101010100110<\/code><\/pre>\n\n\n\nsctf{01110100101010100110}<\/code><\/pre>\n\n\n\n5.Py-Py-Py<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1059-1024x834.png\")
<\/div><\/figure>\n\n\n\n#!\/usr\/bin\/env python\n# visit https:\/\/tool.lu\/pyc\/ for more information\nimport sys\nimport os\nimport hashlib\nimport time\nimport base64\nfllag = '9474yeUMWODKruX7OFzD9oekO28+EqYCZHrUjWNm92NSU+eYXOPsRPEFrNMs7J+4qautoqOrvq28pLU='\n\ndef crypto(string, op, public_key, expirytime = ('encode', 'ddd', 0)):\n ckey_lenth = 4\n if not public_key or public_key:\n pass\n public_key = ''\n key = hashlib.md5(public_key).hexdigest()\n keya = hashlib.md5(key[0:16]).hexdigest()\n keyb = hashlib.md5(key[16:32]).hexdigest()\n if ckey_lenth:\n if not (op == 'decode' or string[0:ckey_lenth]) and hashlib.md5(str(time.time())).hexdigest()[32 - ckey_lenth:32]:\n pass\n keyc = ''\n cryptkey = keya + hashlib.md5(keya + keyc).hexdigest()\n key_lenth = len(cryptkey)\n if not op == 'decode' or base64.b64decode(string[4:]):\n pass\n string = '0000000000' + hashlib.md5(string + keyb).hexdigest()[0:16] + string\n string_lenth = len(string)\n result = ''\n box = list(range(256))\n randkey = []\n for i in xrange(255):\n randkey.append(ord(cryptkey[i % key_lenth]))\n\n for i in xrange(255):\n j = 0\n j = (j + box[i] + randkey[i]) % 256\n tmp = box[i]\n box[i] = box[j]\n box[j] = tmp\n\n for i in xrange(string_lenth):\n a = j = 0\n a = (a + 1) % 256\n j = (j + box[a]) % 256\n tmp = box[a]\n box[a] = box[j]\n box[j] = tmp\n result += chr(ord(string[i]) ^ box[(box[a] + box[j]) % 256])\n\n if op == 'decode':\n if (result[0:10] == '0000000000' or int(result[0:10]) - int(time.time()) > 0) and result[10:26] == hashlib.md5(result[26:] + keyb).hexdigest()[0:16]:\n return result[26:]\n return None\n return keyc + base64.b64encode(result)\n\nif __name__ == '__main__':\n while None:\n flag = raw_input('Please input your flag:')\n if flag == crypto(fllag, 'decode'):\n print('Success')\n break\n continue\n continue\n return None\n<\/code><\/pre>\n\n\n\nimport hashlib\nimport time\nimport base64\n\nfllag = \"9474yeUMWODKruX7OFzD9oekO28+EqYCZHrUjWNm92NSU+eYXOPsRPEFrNMs7J+4qautoqOrvq28pLU=\"\n\ndef crypto(string, op='encode', public_key='ddd', expirytime=0):\n ckey_lenth = 4\n public_key = public_key and public_key or \"\"\n key = hashlib.md5(public_key.encode()).hexdigest()\n keya = hashlib.md5(key[0:16].encode()).hexdigest()\n keyb = hashlib.md5(key[16:32].encode()).hexdigest()\n keyc = ckey_lenth and (\n op == \"decode\" and string[0:ckey_lenth] or hashlib.md5(str(time.time()).encode()).hexdigest()[\n 32 - ckey_lenth:32]) or \"\"\n cryptkey = keya + hashlib.md5((keya + keyc).encode()).hexdigest()\n key_lenth = len(cryptkey)\n\n if op == \"decode\":\n # \u89e3\u7801\u65f6\u76f4\u63a5\u4f7f\u7528\u5b57\u8282\u6570\u636e\n string = base64.b64decode(string[4:])\n else:\n # \u7f16\u7801\u65f6\u751f\u6210\u5b57\u7b26\u4e32\n string = \"0000000000\" + hashlib.md5((string + keyb).encode()).hexdigest()[0:16] + string\n string = string.encode() # \u8f6c\u6362\u4e3a\u5b57\u8282\u6570\u636e\n\n string_lenth = len(string)\n result = b\"\" if op == \"decode\" else \"\"\n box = list(range(256))\n randkey = []\n for i in range(255):\n randkey.append(ord(cryptkey[i % key_lenth]))\n\n for i in range(255):\n j = 0\n j = (j + box[i] + randkey[i]) % 256\n tmp = box[i]\n box[i] = box[j]\n box[j] = tmp\n\n for i in range(string_lenth):\n a = j = 0\n a = (a + 1) % 256\n j = (j + box[a]) % 256\n tmp = box[a]\n box[a] = box[j]\n box[j] = tmp\n if op == \"decode\":\n result += bytes([string[i] ^ box[(box[a] + box[j]) % 256]])\n else:\n result += chr(string[i] ^ box[(box[a] + box[j]) % 256])\n\n if op == \"decode\":\n if result[0:10] == b\"0000000000\" or int(result[0:10]) - int(time.time()) > 0:\n if result[10:26] == hashlib.md5(result[26:] + keyb.encode()).hexdigest()[0:16].encode():\n return result[26:].decode()\n return\n else:\n return keyc + base64.b64encode(result.encode()).decode()\n\nif __name__ == \"__main__\":\n decrypted_flag = crypto(fllag, \"decode\")\n print(\"Decrypted flag:\", decrypted_flag)<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1060.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1061-1024x539.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1062-1024x199.png\")
<\/div><\/figure>\n\n\n\nFlag{HiD3_Pal0ad_1n_Python}<\/code><\/pre>\n\n\n\n6.\u80a5\u5b85\u5feb\u4e50\u9898<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1063-1024x842.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1064.png\")
<\/div><\/figure>\n\n\n\nU1lDe0YzaVpoYWlfa3U0aWxlX1QxMTF9<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1065.png\")
<\/div><\/figure>\n\n\n\nSYC{F3iZhai_ku4ile_T111}<\/code><\/pre>\n\n\n\n7.3-1<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1066-1024x627.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1067.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1068-1024x724.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1069.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1070.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1071-1024x492.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1072-1024x420.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1073-1024x748.png\")
<\/div><\/figure>\n\n\n\n\u52a0\u5bc6\u548c\u89e3\u5bc6\u90fd\u4f7f\u7528\u76f8\u540c\u7684IV Key\u548c\u504f\u79fb\u91cf\u662f\uff1aQWERTYUIOPASDFGH CBC\u6a21\u5f0f \u957f\u5ea6\u4e3a16\u5b57\u8282\uff0c\u7b26\u5408AES-128\u7684\u8981\u6c42\u3002\n\n19aaFYsQQKr+hVX6hl2smAUQ5a767TsULEUebWSajEo=\n\n\u89e3\u5bc6\u6b65\u9aa4\uff1a\n\u521b\u5efaAES-CBC\u89e3\u5bc6\u5668\n\u6267\u884c\u89e3\u5bc6\n\u53bb\u9664\u586b\u5145\u7684null\u5b57\u8282\n\u5b57\u8282\u89e3\u7801\u4e3a\u5b57\u7b26\u4e32\n\n\u539f\u59cb\u6570\u636e: \"hello\" \u2192 \u5b57\u8282: b'hello'\n \u2193\n\u586b\u5145: b'hellox0bx0b...' (PKCS#7\u586b\u5145)\n \u2193\nAES\u52a0\u5bc6 + IV \u2192 \u52a0\u5bc6\u6570\u636e\n \u2193\nBase64\u7f16\u7801 \u2192 \u6700\u7ec8\u5bc6\u6587\n<\/code><\/pre>\n\n\n\n# coding:utf-8\nfrom Crypto import Random\nfrom Crypto.Cipher import AES\nimport sys\nimport base64\n\nIV = b'QWERTYUIOPASDFGH' # \u6ce8\u610f\uff1a\u5728Python3\u4e2d\u9700\u8981\u8f6c\u6362\u4e3abytes\n\ndef decrypt(encrypted):\n aes = AES.new(IV, AES.MODE_CBC, IV)\n decrypted = aes.decrypt(encrypted)\n # \u53bb\u9664\u586b\u5145\u7684null\u5b57\u7b26\n return decrypted.rstrip(b'x00').decode('utf-8')\n\ndef encrypt(message):\n length = 16\n # \u5728Python3\u4e2d\uff0c\u9700\u8981\u5c06\u5b57\u7b26\u4e32\u8f6c\u6362\u4e3abytes\n message = message.encode('utf-8')\n count = len(message)\n padding = length - (count % length)\n message = message + b'' * padding\n aes = AES.new(IV, AES.MODE_CBC, IV)\n return aes.encrypt(message)\n\n# \u63d0\u4f9b\u7684base64\u7f16\u7801\u7684\u5bc6\u6587\nencrypted_base64 = '19aaFYsQQKr+hVX6hl2smAUQ5a767TsULEUebWSajEo='\n\n# \u89e3\u7801base64\u5e76\u89e3\u5bc6\nencrypted_data = base64.b64decode(encrypted_base64)\ndecrypted_text = decrypt(encrypted_data)\n\nprint(\"\u89e3\u5bc6\u7ed3\u679c:\", decrypted_text)\n\n# \u6d4b\u8bd5\u52a0\u5bc6\u89e3\u5bc6\u529f\u80fd\nif __name__ == '__main__':\n test_str = 'this is a test'\n print(\"\u539f\u59cb\u5b57\u7b26\u4e32:\", test_str)\n\n encrypted_example = encrypt(test_str)\n encrypted_b64 = base64.b64encode(encrypted_example).decode('utf-8')\n print(\"\u52a0\u5bc6\u540e(base64):\", encrypted_b64)\n\n decrypted_example = decrypt(encrypted_example)\n print(\"\u89e3\u5bc6\u540e:\", decrypted_example)<\/code><\/pre>\n\n\n\n\n
Base64\u5bc6\u6587 \u2192 Base64\u89e3\u7801\n \u2193\n\u5206\u79bbIV\u548c\u52a0\u5bc6\u6570\u636e\n \u2193\nAES\u89e3\u5bc6 \u2192 \u5e26\u586b\u5145\u7684\u6570\u636e\n \u2193\n\u53bb\u9664\u586b\u5145 \u2192 \u539f\u59cb\u5b57\u8282\n \u2193\n\u89e3\u7801 \u2192 \u539f\u59cb\u5b57\u7b26\u4e32<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1074-1024x525.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1075-1024x570.png\")
<\/div><\/figure>\n\n\n\nWDCTF{Seclab_CTF_2017}<\/code><\/pre>\n\n\n\n8.4-1<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1076-1024x584.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1077-1024x585.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1078.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1079-1024x539.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1080-1024x507.png\")
<\/div><\/figure>\n\n\n\npython bwmforpy3.py decode --oldseed day1.png day2.png day3.png\nimage<day1.png> + image(encoded)<day2.png> -> watermark<day3.png><\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1081-1024x87.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1082-1024x558.png\")
<\/div><\/figure>\n\n\n\nwdflag{My_c4t_Ho}<\/code><\/pre>\n\n\n\n9.5-1<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1083-1024x559.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1084.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1085.png\")
<\/div><\/figure>\n\n\n\npip install xortool<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1086-1024x547.png\")
<\/div><\/figure>\n\n\n\n\n
poetry build\npip install dist\/xortool*.whl<\/code><\/pre>\n\n\n\n\u7528\u6cd5<\/h3>\n\n\n\n
xortool\n A tool to do some xor analysis:\n - guess the key length (based on count of equal chars)\n - guess the key (base on knowledge of most frequent char)\n\nUsage:\n xortool [-x] [-m MAX-LEN] [-f] [-t CHARSET] [FILE]\n xortool [-x] [-l LEN] [-c CHAR | -b | -o] [-f] [-t CHARSET] [-p PLAIN] [-r PERCENT] [FILE]\n xortool [-x] [-m MAX-LEN| -l LEN] [-c CHAR | -b | -o] [-f] [-t CHARSET] [-p PLAIN] [-r PERCENT] [FILE]\n xortool [-h | --help]\n xortool --version\n\nOptions:\n -x --hex input is hex-encoded str\n -l LEN, --key-length=LEN length of the key\n -m MAX-LEN, --max-keylen=MAX-LEN maximum key length to probe [default: 65]\n -c CHAR, --char=CHAR most frequent char (one char or hex code)\n -b --brute-chars brute force all possible most frequent chars\n -o --brute-printable same as -b but will only check printable chars\n -f --filter-output filter outputs based on the charset\n -t CHARSET --text-charset=CHARSET target text character set [default: printable]\n -p PLAIN --known-plaintext=PLAIN use known plaintext for decoding\n -r PERCENT, --threshold=PERCENT threshold validity percentage [default: 95]\n -h --help show this help\n\nNotes:\n Text character set:\n * Pre-defined sets: printable, base32, base64\n * Custom sets:\n - a: lowercase chars\n - A: uppercase chars\n - 1: digits\n - !: special chars\n - *: printable chars\n\nExamples:\n xortool file.bin\n xortool -l 11 -c 20 file.bin\n xortool -x -c ' ' file.hex\n xortool -b -f -l 23 -t base64 message.enc\n xortool -b -p \"xctf{\" message.enc\n xortool -r 80 -p \"flag{\" -c ' ' message.enc<\/code><\/pre>\n\n\n\n\u793a\u4f8b1<\/h3>\n\n\n\n
# xor is xortool\/xortool-xor\ntests $ xor -f \/bin\/ls -s \"secret_key\" > binary_xored\n\ntests $ xortool binary_xored\nThe most probable key lengths:\n 2: 5.0%\n 5: 8.7%\n 8: 4.9%\n 10: 15.4%\n 12: 4.8%\n 15: 8.5%\n 18: 4.8%\n 20: 15.1%\n 25: 8.4%\n 30: 14.9%\nKey-length can be 5*n\nMost possible char is needed to guess the key!\n\n# 00 is the most frequent byte in binaries\ntests $ xortool binary_xored -l 10 -c 00\n...\n1 possible key(s) of length 10:\nsecret_key\n\n# decrypted ciphertexts are placed in .\/xortool_out\/Number_<key repr>\n# ( have no better idea )\ntests $ md5sum xortool_out\/0_secret_key \/bin\/ls\n29942e290876703169e1b614d0b4340a xortool_out\/0_secret_key\n29942e290876703169e1b614d0b4340a \/bin\/ls<\/code><\/pre>\n\n\n\ntests $ xortool tool_xored -c 20\nThe most probable key lengths:\n 2: 5.6%\n 5: 7.8%\n 8: 6.0%\n 10: 11.7%\n 12: 5.6%\n 15: 7.6%\n 20: 19.8%\n 25: 7.8%\n 28: 5.7%\n 30: 11.4%\nKey-length can be 5*n\n1 possible key(s) of length 20:\nan0ther s3cret xdd key<\/code><\/pre>\n\n\n\ntests $ xortool ls_xored -c 00 -m 64\nThe most probable key lengths:\n 3: 3.3%\n 6: 3.3%\n 9: 3.3%\n 11: 7.0%\n 22: 6.9%\n 24: 3.3%\n 27: 3.2%\n 33: 18.4%\n 44: 6.8%\n 55: 6.7%\nKey-length can be 3*n\n1 possible key(s) of length 33:\nreally long s3cr3t k3y... PADDING<\/code><\/pre>\n\n\n\n\n
-m<\/code>\uff09\u5c1d\u8bd5\u66f4\u957f\u952e\u7684\u6700\u5927\u957f\u5ea6<\/li>\n\n\n\n-l<\/code>\uff09\u9009\u62e9\u957f\u5ea6\u4ee5\u89c2\u5bdf\u4e00\u4e9b\u6709\u8da3\u7684\u952e<\/li>\n\n\n\n-c<\/code>\uff09\u662f\u4ea7\u751f\u53f3\u660e\u6587\u7684\u6700\u5e38\u89c1\u5b57\u7b26<\/li>\n<\/ul>\n\n\n\n\u793a\u4f8b2<\/h3>\n\n\n\n
# xortool message.enc\nThe most probable key lengths:\n 2: 12.3%\n 4: 13.8%\n 6: 10.5%\n 8: 11.5%\n 10: 8.6%\n 12: 9.4%\n 14: 7.1%\n 16: 7.8%\n 23: 10.4%\n 46: 8.7%\nKey-length can be 4*n\nMost possible char is needed to guess the key!<\/code><\/pre>\n\n\n\n$ xortool message.enc -b -f -l 23 -t base64\n256 possible key(s) of length 23:\nx01=x121#\"0x17x13tx7f ,&\/x12sx114ux170#\nx00<x130\"#1x16x12x08~!-'.x13rx105tx161\"\nx03?x103! 2x15x11x0b}\".$-x10qx136wx152!\nx02>x112 !3x14x10n|#\/%,x11px127vx143\nx059x165'&4x13x17r{$(\"+x16wx150qx134'\n...\nFound 1 plaintexts with 95.0%+ valid characters\nSee files filename-key.csv, filename-char_used-perc_valid.csv<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1087.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1088-1024x526.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1089-1024x526.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1090-1024x608.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1091-1024x756.png\")
<\/div><\/figure>\n\n\n\nGoodLuckToYou<\/code><\/pre>\n\n\n\n# \u5b9a\u4e49\u52a0\u5bc6\u5bc6\u94a5\nKey = \"GoodLuckToYou\"\n\n# \u4ee5\u4e8c\u8fdb\u5236\u8bfb\u53d6\u6a21\u5f0f\u6253\u5f00\u8f93\u5165\u6587\u4ef6\nwith open(\"badd3e0621ff43de8cf802545bbd3ed0\", \"rb\") as f:\n # \u4ee5\u5199\u5165\u6a21\u5f0f\u6253\u5f00\u8f93\u51fa\u6587\u4ef6\uff0c\u5ffd\u7565\u7f16\u7801\u9519\u8bef\n with open(\"result.txt\", \"w\", errors=\"ignore\") as fp:\n index = 0 # \u521d\u59cb\u5316\u5bc6\u94a5\u7d22\u5f15\n\n # \u8bfb\u53d6\u7b2c\u4e00\u4e2a\u5b57\u8282\n data = f.read(1)\n\n # \u5faa\u73af\u8bfb\u53d6\u6587\u4ef6\u76f4\u5230\u7ed3\u675f\n while data:\n # \u8c03\u8bd5\u4fe1\u606f\uff1a\u6253\u5370\u5f53\u524d\u5904\u7406\u5b57\u8282\u7684\u4f4d\u7f6e\n print(f\"Processing byte at position: {index}\")\n\n # \u5c06\u5b57\u8282\u6570\u636e\u8f6c\u6362\u4e3a\u6574\u6570\uff0c\u4e0e\u5bc6\u94a5\u5bf9\u5e94\u5b57\u7b26\u8fdb\u884c\u5f02\u6216\u64cd\u4f5c\n # \u7136\u540e\u5c06\u7ed3\u679c\u8f6c\u6362\u4e3a\u5b57\u7b26\u5199\u5165\u6587\u4ef6\n decrypted_char = chr(data[0] ^ ord(Key[index]))\n fp.write(decrypted_char)\n\n # \u8bfb\u53d6\u4e0b\u4e00\u4e2a\u5b57\u8282\n data = f.read(1)\n\n # \u66f4\u65b0\u5bc6\u94a5\u7d22\u5f15\uff0c\u5faa\u73af\u4f7f\u7528\u5bc6\u94a5\uff08\u5bc6\u94a5\u957f\u5ea6\u4e3a13\uff09\n index = (index + 1) % len(Key)\n\nprint(\"File decryption completed!\")<\/code><\/pre>\n\n\n\n
\u6211\u4eec\u4ee5\u4e8c\u8fdb\u5236\u6a21\u5f0f\u6253\u5f00\u4e00\u4e2a\u6587\u4ef6”badd3e0621ff43de8cf802545bbd3ed0″\uff0c\u7136\u540e\u9010\u5b57\u8282\u8bfb\u53d6\u3002
\u540c\u65f6\uff0c\u6211\u4eec\u4ee5\u5199\u5165\u6a21\u5f0f\u6253\u5f00\uff08\u6216\u521b\u5efa\uff09\u4e00\u4e2a\u6587\u672c\u6587\u4ef6”result.txt”\uff0c\u5ffd\u7565\u7f16\u7801\u9519\u8bef\u3002
\u6211\u4eec\u4f7f\u7528\u4e00\u4e2a\u7d22\u5f15index\uff0c\u4ece0\u5f00\u59cb\uff0c\u6bcf\u5904\u7406\u4e00\u4e2a\u5b57\u8282\u5c31\u589e\u52a01\uff0c\u7136\u540e\u5bf913\u53d6\u6a21\uff0c\u4ee5\u4fbf\u5faa\u73af\u4f7f\u7528\u5bc6\u94a5\u4e2d\u7684\u5b57\u7b26\u3002
\u5bf9\u4e8e\u6bcf\u4e2a\u8bfb\u53d6\u7684\u5b57\u8282\uff0c\u6211\u4eec\u5c06\u5176\u4e0e\u5bc6\u94a5\u4e2d\u5bf9\u5e94\u4f4d\u7f6e\u7684\u5b57\u7b26\u8fdb\u884c\u5f02\u6216\u64cd\u4f5c\uff0c\u7136\u540e\u5c06\u7ed3\u679c\uff08\u4e00\u4e2a\u6574\u6570\uff09\u8f6c\u6362\u4e3a\u5b57\u7b26\u5199\u5165\u5230\u8f93\u51fa\u6587\u4ef6\u4e2d\u3002<\/p>\n\n\n\n\n
\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1092-1024x328.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1093.png\")
<\/div><\/figure>\n\n\n\nwdflag{You Are Very Smart}<\/code><\/pre>\n\n\n\n10.latlong<\/h2>\n\n\n\n
![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1094-1024x754.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1095.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1096-1024x84.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-1097-1024x343.png\")
<\/div><\/figure>\n\n\n\nAX.25\u534f\u8bae<\/h3>\n\n\n\n
AX.25\u534f\u8bae\u662f\u56fd\u9645\u4e1a\u4f59\u65e0\u7ebf\u7535\u8054\u76df(ARRL)\u57fa\u4e8eX.25\u534f\u8bae\u5236\u5b9a\u7684\u6570\u636e\u94fe\u8def\u5c42\u901a\u4fe1\u534f\u8bae\uff0c\u8865\u5145\u4e86HDLC\u548cOSI\u6a21\u578b\u5bf9\u65e0\u7ebf\u4fe1\u9053\u5206\u7ec4\u7f51\u7684\u89c4\u5b9a\u3002\u8be5\u534f\u8bae\u5728OS!\u6a21\u578b\u6846\u67b6\u4e0b\u6269\u5c55\u4e86\u5730\u5740\u57df\u5b9a\u4e49\uff0c\u65b0\u589e\u65e0\u6807\u53f7\u4fe1\u606f\u5e27\u7c7b\u578b\uff0c\u5f62\u6210\u5305\u542b\u4fe1\u606f\u5e27\u3001\u76d1\u89c6\u5e27\u4e0e\u65e0\u7f16\u53f7\u5e27\u7b4910\u79cd\u5e27\u7ed3\u6784\uff0c\u652f\u6301\u65e0\u7ebf\u4fe1\u9053\u4e0b\u7684\u5168\u53cc\u5de5\u548c\u534a\u53cc\u5de5\u901a\u4fe1\uff0c\u5141\u8bb8\u8bbe\u5907\u95f4\u5efa\u7acb\u591a\u4e2a\u5e73\u7b49\u94fe\u8def\u8fde\u63a5 \n20\u4e16\u7eaa80\u5e74\u4ee3\u521d\uff0c\u7f8e\u56fd\u5f00\u59cb\u6784\u5efa\u5206\u7ec4\u65e0\u7ebf\u7f51(PRN)\uff0c\u81f31985\u5e74\u5df2\u8986\u76d6\u5168\u56fd\u4e3b\u8981\u5730\u533a\uff0c\u5e94\u7528\u4e8e\u7535\u5b50\u90ae\u4ef6\u3001\u94f6\u884c\u4e1a\u52a1\u7b49\u9886\u57df\u3002\u8be5\u7f51\u7edc\u91c7\u7528\u9075\u5faaAX.25\u534f\u8bae\u7684\u901a\u4fe1\u63a7\u5236\u5668\uff0c\u534f\u8bae\u5b9a\u4e49\u4e8616\u79cd\u94fe\u8def\u72b6\u6001\u673a\u5236\uff0c\u901a\u8fc7\u56db\u4e2a\u63a7\u5236\u53d8\u91cf(V(S)\u3001N(S)\u3001V(R)\u3001N(R)\u5b9e\u73b0\u94fe\u8def\u72b6\u6001\u8f6c\u79fb\u3002\u867d\u7136\u6700\u521d\u7531\u4e1a\u4f59\u65e0\u7ebf\u7535\u8054\u76df\u5236\u5b9a\uff0c\u4f46\u7531\u4e8e\u7f8e\u519b\u53ca\u5546\u4e1a\u5382\u5546\u5e7f\u6cdb\u91c7\u7528\uff0c\u8be5\u534f\u8bae\u5df2\u53d1\u5c55\u6210\u4e3a\u901a\u7528\u56fd\u9645\u6807\u51c6\u540e\u671f\u7814\u53d1\u7684AX.25\u9ad8\u901f\u7ec8\u7aef\u8282\u70b9\u63a7\u5236\u5668(TNC)\u91c7\u7528GMSK\u8c03\u5236\u6280\u672f\uff0c\u6570\u636e\u4f20\u8f93\u901f\u7387\u8fbe\u52309.6kbits AX.25(Amateur X.25)\u662f\u6570\u636e\u94fe\u8def\u5c42\u534f\u8bae\u5957\u4ef6\uff0c\u65e8\u5728\u4f9b\u4e1a\u4f59\u65e0\u7ebf\u7535\u8fd0\u8425\u5546\u4f7f\u7528 AX.25\u534f\u8bae\u5728\u7269\u7406\u5c42\u4f7f\u7528BFS\nK\u8c03\u5236<\/code><\/pre>\n\n\n\n