{"id":46314,"date":"2024-01-02T15:23:20","date_gmt":"2023-12-11T08:25:24","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/"},"modified":"2024-05-04T16:28:56","modified_gmt":"2024-05-04T08:28:56","slug":"46314-2","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/","title":{"rendered":""},"content":{"rendered":"

\u30cf\u30a4\u30ec\u30d9\u30eb\u306aCTF\u306b\u306f\u307e\u3063\u305f\u304f\u6b6f\u304c\u7acb\u305f\u306a\u3044\u304c\u3001\u3044\u3056\u3068\u3044\u3046\u3068\u304d\u306b\u4f7f\u3048\u308b\u3088\u3046\u30ea\u30b9\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u307f\u305f\u3002<\/p>\n

\u30b7\u30fc\u30b6\u30fc\u6697\u53f7<\/h1>\n

\u3088\u304f\u51fa\u3066\u304f\u308b\u30b7\u30fc\u30b6\u30fc\u6697\u53f7\u3002<\/p>\n

def<\/span> _rot13<\/span>(<\/span>c<\/span>):<\/span>\r\n    if<\/span> 'A'<\/span> <=<\/span> c<\/span> and<\/span> c<\/span> <=<\/span> 'Z'<\/span>:<\/span>\r\n        return<\/span> chr<\/span>((<\/span>ord<\/span>(<\/span>c<\/span>)<\/span> -<\/span> ord<\/span>(<\/span>'A'<\/span>)<\/span> +<\/span> 13<\/span>)<\/span> %<\/span> 26<\/span> +<\/span> ord<\/span>(<\/span>'A'<\/span>))<\/span>\r\n    if<\/span> 'a'<\/span> <=<\/span> c<\/span> and<\/span> c<\/span> <=<\/span> 'z'<\/span>:<\/span>\r\n        return<\/span> chr<\/span>((<\/span>ord<\/span>(<\/span>c<\/span>)<\/span> -<\/span> ord<\/span>(<\/span>'a'<\/span>)<\/span> +<\/span> 13<\/span>)<\/span> %<\/span> 26<\/span> +<\/span> ord<\/span>(<\/span>'a'<\/span>))<\/span>\r\n    return<\/span> c<\/span>\r\n\r\ndef<\/span> rot13<\/span>(<\/span>s<\/span>):<\/span>\r\n    g<\/span> =<\/span> (<\/span>_rot13<\/span>(<\/span>c<\/span>)<\/span> for<\/span> c<\/span> in<\/span> s<\/span>)<\/span>\r\n    return<\/span> ''<\/span>.<\/span>join<\/span>(<\/span>g<\/span>)<\/span>\r\n<\/code><\/pre>\n
pycurl<\/h1>\n
curl\u3092python\u304b\u3089\u4f7f\u3048\u308b\u3088\u3046\u306b\u306a\u308b\u3068\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30b9\u30c8\u653b\u6483\u306a\u3069\u3092\u52b9\u7387\u7684\u306b\u3057\u3084\u3059\u304f\u306a\u308b\u3002\uff08\u3042\u3001\u3082\u3061\u308d\u3093CTF\u3067\u306e\u8a71\u3067\u3059\u3088\u30fb\u30fb\u30fb\uff09<\/p>\n
import<\/span> pycurl<\/span>\r\nfrom<\/span> io<\/span> import<\/span> BytesIO<\/span>\r\n\r\nbuffer<\/span> =<\/span> BytesIO<\/span>()<\/span>\r\nc<\/span> =<\/span> pycurl<\/span>.<\/span>Curl<\/span>()<\/span>\r\nc<\/span>.<\/span>setopt<\/span>(<\/span>c<\/span>.<\/span>URL<\/span>,<\/span> 'http:\/\/ctfq.sweetduet.info:10080\/~q32\/auth.php'<\/span>)<\/span>\r\nc<\/span>.<\/span>setopt<\/span>(<\/span>c<\/span>.<\/span>WRITEDATA<\/span>,<\/span> buffer<\/span>)<\/span>\r\nc<\/span>.<\/span>setopt<\/span>(<\/span>pycurl<\/span>.<\/span>POST<\/span>,<\/span> 1<\/span>)<\/span>\r\nc<\/span>.<\/span>setopt<\/span>(<\/span>pycurl<\/span>.<\/span>HTTPPOST<\/span>,<\/span> [(<\/span>'password[1]'<\/span>,<\/span> 'dummy'<\/span>),(<\/span>'password[2]'<\/span>,<\/span> 'dummy'<\/span>)])<\/span>\r\n\r\nc<\/span>.<\/span>perform<\/span>()<\/span>\r\nc<\/span>.<\/span>close<\/span>()<\/span>\r\n\r\nbody<\/span> =<\/span> buffer<\/span>.<\/span>getvalue<\/span>()<\/span>\r\nprint<\/span>(<\/span>body<\/span>.<\/span>decode<\/span>(<\/span>'iso-8859-1'<\/span>))<\/span>\r\n<\/code><\/pre>\n
nc<\/h1>\n
import<\/span> socket<\/span>\r\nimport<\/span> time<\/span>\r\n\r\ndef<\/span> mysend<\/span>(<\/span>s<\/span>,<\/span> message<\/span>):<\/span>\r\n    time<\/span>.<\/span>sleep<\/span>(<\/span>0.1<\/span>)<\/span>\r\n    message<\/span> =<\/span> message<\/span> +<\/span> '<\/span>\\n<\/span>'<\/span>\r\n    s<\/span>.<\/span>send<\/span>(<\/span>message<\/span>.<\/span>encode<\/span>())<\/span>\r\n    time<\/span>.<\/span>sleep<\/span>(<\/span>0.1<\/span>)<\/span>\r\n    data<\/span> =<\/span> s<\/span>.<\/span>recv<\/span>(<\/span>1024<\/span>).<\/span>decode<\/span>(<\/span>'utf-8'<\/span>).<\/span>splitlines<\/span>()[<\/span>0<\/span>]<\/span>\r\n    print<\/span>(<\/span>data<\/span>)<\/span>\r\n\r\ns<\/span> =<\/span> socket<\/span>.<\/span>socket<\/span>(<\/span>socket<\/span>.<\/span>AF_INET<\/span>,<\/span> socket<\/span>.<\/span>SOCK_STREAM<\/span>)<\/span>\r\ns<\/span>.<\/span>connect<\/span>((<\/span>'example.com'<\/span>,<\/span> 1234<\/span>))<\/span>\r\n<\/code><\/pre>\n
numpy<\/h1>\n
numpy\u306f\u591a\u6b21\u5143\u914d\u5217\u306a\u3069\u3092\u6271\u3044\u3084\u3059\u304f\u3059\u308b\u30e2\u30b8\u30e5\u30fc\u30eb\u3060\u304c\u3001matplotlib\u3068\u7d44\u307f\u5408\u308f\u305b\u3066\u3001\u8a08\u7b97\u7d50\u679c\u3092\u3056\u3063\u3068\u78ba\u8a8d\u3059\u308b\u306e\u306b\u4fbf\u5229\u3002<\/p>\n
import<\/span> numpy<\/span> as<\/span> np<\/span>\r\nimport<\/span> matplotlib.pyplot<\/span> as<\/span> plt<\/span>\r\n\r\narr2d<\/span> =<\/span> []<\/span>\r\narr2d<\/span>.<\/span>append<\/span>([<\/span>1<\/span>,<\/span>0<\/span>])<\/span>\r\narr2d<\/span>.<\/span>append<\/span>([<\/span>0<\/span>,<\/span>1<\/span>])<\/span>\r\narr2dnp<\/span> =<\/span> np<\/span>.<\/span>asarray<\/span>(<\/span>arr2d<\/span>)<\/span>\r\nplt<\/span>.<\/span>imshow<\/span>(<\/span>arr2dnp<\/span>)<\/span>\r\n<\/code><\/pre>\n
\"np.png\"<\/div>\n
\u30d0\u30a4\u30ca\u30ea\u3001\u6587\u5b57\u5217<\/h1>\n
print<\/span>(<\/span>chr<\/span>(<\/span>int<\/span>(<\/span>'0b01110100'<\/span>,<\/span>0<\/span>)))<\/span> # t\r\n<\/span>\r\n<\/code><\/pre>\n
crypt<\/h1>\n
\u6700\u5f8c\u306bcrypt\u3002ksnctf\u306eJohn\u3068\u3044\u3046\u554f\u984c\u306fJohn the ripper\u3068\u3044\u3046\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u4f7f\u3063\u3066\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30b9\u30c8\u304b\u3089\u7dcf\u5f53\u305f\u308a\u3059\u308b\u306e\u304c\u738b\u9053\u304b\u3082\u3057\u308c\u306a\u3044\u304c\u3001Python\u306ecrypt\u3067\u89e3\u304f\u306e\u3082\u30b9\u30de\u30fc\u30c8\u306a\u611f\u3058\u3067\u6c17\u6301\u3061\u826f\u3044\u3002<\/p>\n
import<\/span> crypt<\/span>\r\n\r\ns<\/span> =<\/span> '''\r\nuser00:$6$Z4xEy\/1KTCW.rz$Yxkc8XkscDusGWKan621H4eaPRjHc1bkXDjyFtcTtgxzlxvuPiE1rnqdQVO1lYgNOzg72FU95RQut93JF6Deo\/:15491:0:99999:7:::\r\nuser01:$6$ffl1bXDBqKUiD$PoXP69PaxTTX.cgzYS6Tlj7UBvstr6JruGctoObFXCr4cYXjIbxBSMiQZiVkKvUxXUC23zP8PUyXjq6qEq63u1:15491:0:99999:7:::\r\nuser02:$6$ZsJXadT\/rv$T\/2gVzYwMBaAsZnHIjnUSmTozIF\/ebMvtHIJjikFehvB8pvy28DUIQYbTJLG6QAxhzJAKOROnZq0xV4hUGefM1:15491:0:99999:7:::\r\n'''<\/span>\r\n\r\nsalt<\/span> =<\/span> []<\/span>\r\nhash<\/span> =<\/span> []<\/span>\r\nfor<\/span> line<\/span> in<\/span> s<\/span>.<\/span>splitlines<\/span>():<\/span>\r\n    m<\/span> =<\/span> line<\/span>.<\/span>split<\/span>(<\/span>\":\"<\/span>)<\/span>\r\n    n<\/span> =<\/span> m<\/span>[<\/span>1<\/span>].<\/span>split<\/span>(<\/span>\"$\"<\/span>)<\/span>\r\n    hash<\/span>.<\/span>append<\/span>(<\/span>m<\/span>[<\/span>1<\/span>])<\/span>\r\n    salt<\/span>.<\/span>append<\/span>(<\/span>n<\/span>[<\/span>2<\/span>])<\/span>\r\n\r\npassword<\/span> =<\/span> []<\/span>\r\nfor<\/span> line<\/span> in<\/span> open<\/span>(<\/span>'password_list.txt'<\/span>,<\/span> 'r'<\/span>):<\/span>\r\n    password<\/span>.<\/span>append<\/span>(<\/span>line<\/span>.<\/span>strip<\/span>())<\/span>\r\n\r\nfor<\/span> s<\/span> in<\/span> salt<\/span>:<\/span>\r\n    for<\/span> p<\/span> in<\/span> password<\/span>:<\/span>\r\n        h<\/span> =<\/span> crypt<\/span>.<\/span>crypt<\/span>(<\/span>p<\/span>,<\/span> salt<\/span>=<\/span>'$6$'<\/span>+<\/span>s<\/span>+<\/span>'$'<\/span>)<\/span>\r\n        if<\/span> h<\/span> in<\/span> hash<\/span>:<\/span>\r\n            print<\/span>(<\/span>p<\/span>)<\/span>\r\n            break<\/span>\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
\u30cf\u30a4\u30ec\u30d9\u30eb\u306aCTF\u306b\u306f\u307e\u3063\u305f\u304f\u6b6f\u304c\u7acb\u305f\u306a\u3044\u304c\u3001\u3044\u3056\u3068\u3044\u3046\u3068\u304d\u306b\u4f7f\u3048\u308b\u3088\u3046\u30ea\u30b9\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u307f\u305f\u3002 \u30b7\u30fc\u30b6\u30fc\u6697\u53f7  […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-46314","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n- Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:description\" content=\"\u30cf\u30a4\u30ec\u30d9\u30eb\u306aCTF\u306b\u306f\u307e\u3063\u305f\u304f\u6b6f\u304c\u7acb\u305f\u306a\u3044\u304c\u3001\u3044\u3056\u3068\u3044\u3046\u3068\u304d\u306b\u4f7f\u3048\u308b\u3088\u3046\u30ea\u30b9\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u307f\u305f\u3002 \u30b7\u30fc\u30b6\u30fc\u6697\u53f7 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-11T08:25:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-04T08:28:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d642e37434c4406d03c57\/14-0.png\" \/>\n<meta name=\"author\" content=\"\u79d1, \u96c5\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u79d1, \u96c5\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/\",\"name\":\"- Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-12-11T08:25:24+00:00\",\"dateModified\":\"2024-05-04T08:28:56+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\",\"name\":\"\u79d1, \u96c5\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"caption\":\"\u79d1, \u96c5\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"- Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/","og_locale":"zh_CN","og_type":"article","og_description":"\u30cf\u30a4\u30ec\u30d9\u30eb\u306aCTF\u306b\u306f\u307e\u3063\u305f\u304f\u6b6f\u304c\u7acb\u305f\u306a\u3044\u304c\u3001\u3044\u3056\u3068\u3044\u3046\u3068\u304d\u306b\u4f7f\u3048\u308b\u3088\u3046\u30ea\u30b9\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u307f\u305f\u3002 \u30b7\u30fc\u30b6\u30fc\u6697\u53f7 […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-12-11T08:25:24+00:00","article_modified_time":"2024-05-04T08:28:56+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d642e37434c4406d03c57\/14-0.png"}],"author":"\u79d1, \u96c5","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u79d1, \u96c5","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"2 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/","name":"- Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-12-11T08:25:24+00:00","dateModified":"2024-05-04T08:28:56+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/"]}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a","name":"\u79d1, \u96c5","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","caption":"\u79d1, \u96c5"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/46314-2\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/46314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=46314"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/46314\/revisions"}],"predecessor-version":[{"id":99421,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/46314\/revisions\/99421"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=46314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=46314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=46314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}