UNCTF-我小心海也绝非鳝类

码龄5年

关注

原创最新推荐文章于 2025-03-22 16:52:50 发布 1k 阅读

UNCTF-日常训练-reverse-反编译没有加壳 IDA打开，没看到啥有用的信息，用动调也没调出啥来。。。参考大佬的博客，知道了这是python项目打包成的exe文件，如何打包可以参考 python3项目打包成exe可执行程序然后又翻了下之前动调的截图，看到这有个调用了python的dll。（之前都忽略了）然后就是需要从这个exe中解包得到代码，可以参考Pyinstaller解包先从GitHub上下载pyinstxtractor 使用方法: cmd下进入该目录输入：python pyinstxtr.. 阅读详情

MISC我小心海也绝非鳝类wp

图片首先这样

010最后有东西RUFTWUxTQg==解码BASE64得到EASYLSB

图片文字输入解码得到flaginmd5

这样就好了lsb隐写上路，密码flaginmd5

得到一个一堆16进制的

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

然后把他们每32个分开，进行md5解密即可

写了小本本：

from hashlib import md5

s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

flag=''

for i in range(0,len(s),32):

print(s[i:i+32])

for j in range(44,128):

if md5(chr(j).encode()).hexdigest() == s[i:i+32].lower() :

flag+=chr(j)

print(flag)

得到