
我感觉这次春秋杯难度不小,只出了三道题,第163名,呜呜呜~~~QAQ
只出了一道Misc和可信计算部分
目录
可信计算
基于挑战码的双向认证1
题目内容:完整题目背景及描述请见附件。
nc 8.147.135.190 18633
本题容器下发后的端口是ssh端口,ssh的账号为player,密码为player,ssh登录上去可自行修改密码。登录后请根据题目要求解题,本场景有2个flag,此处提交flag1
附件下载
https://pan.baidu.com/s/1lTZemPFORLP45PuW5rb-4w 提取码(GAME)备用下载
https://share.weiyun.com/7U8HCz2B
参考CISCN2022全国初赛题解WriteUp-MapleLeaves_ciscn初赛-优快云博客
ssh连接服务器
ssh player@8.147.135.190 -p 18633
使用find命令 find / -name "*flag*"
找到 /root/cube-shell/instance/flag_server/flag.list
使用cat命令查看 cat /root/cube-shell/instance/flag_server/flag.list

"flag1:flag{59865080-ea07-430f}"
基于挑战码的双向认证2
题目内容:
见“基于挑战码的双向认证1”,本场景有2个flag,此处提交flag2
同“基于挑战码的双向认证1”,可知:
"flag2:flag{80ba3807-b659-4c2c}"
MISC
谁偷吃了我的外卖
题目内容:
小凯最近入职了大厂,但是在工作途中出现了一些麻烦事,怎么办呢
题目给了一张图片小凯.jpg

放入010里面在尾部可以发现PK字样

ctrl+f 搜索 jpg文件尾16进制字节FF D9 ,将其后面的16进制导出来另存为zip文件

补上文件头

解压得到外卖箱.zip

发现提示:I can give you a hint: - = /
But there was a takeaway that was partially eaten. 仔细观察发现有很多外卖,通过外卖可以看出base64编码的形式, 把文件名都提取出来,组成base64密文,并根据提示将“-”换成“/”,得到新的base64密文如下:
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

博主分享春秋杯比赛中可信计算和MISC题目的解题过程。可信计算部分包括基于挑战码的双向认证1和2,给出解题步骤与flag;MISC题“谁偷吃了我的外卖”,通过对图片处理、文件解压、编码转换等操作,最终得到完整flag,博主表示收获颇丰。

最低0.47元/天 解锁文章
448

被折叠的 条评论
为什么被折叠?



