攻防世界--Time_losing

tzyyyyyy

已于 2023-01-17 15:00:26 修改

阅读量2.1k

点赞数 6

分类专栏：攻防世界文章标签：安全密码学 python ctf 攻防世界

于 2022-11-11 12:02:42 首次发布

本文链接：https://blog.youkuaiyun.com/qq_39291229/article/details/127803722

版权

攻防世界专栏收录该内容

13 篇文章

订阅专栏

Time_losing

下载文件后打开是一大堆 txt文件

一个一个看太麻烦了直接放kali里面一起查看一下

提示说这里面并没有flag 好吧另起思路

题目描述说

2033-05-18 11:33:20似乎是个好时间。

想到了时间戳的思路查看一下这个时间的时间戳

时间戳在线转换地址：时间戳(Unix timestamp)转换工具 - 在线工具

再查看一下那些txt文件的时间戳

直接去看文件属性中的时间修改时间是不对的都到2033年去了

转换成时间戳

看到这串时间戳比题目描述的时间戳多了88

多了88？这代表啥呢

看了一眼ASCII表

88对应了X 那会不会每个文件的时间戳都会和源时间戳有一个差值而且这差值都对应一个字符连起来就是flag

ok先按照这个思路试试看

写个脚本脚本代码如下

import os,time  #查找处理文件要调用os库 先用import 导入

oldtime=2000000000
a=""

for i in range(0,47): #有0~46个txt文件 就是循环47次
   file = r"C:\Users\12275\Desktop\stego\{0}.txt".format(i)  #文件路径
   newtime = int(os.path.getmtime(file))  #获取最近修改的时间
   s = newtime - oldtime
   a = a+chr(s)   #将差值转为ASCII码
print(a)

脚本详细编写过程可以参考文章： python小记--攻防世界Time_losing解题脚本编写_tzyyyyyy的博客-优快云博客

运行一下

flag出现

XMan{seems_to_be_related_to_the_special_guests}

确定要放弃本次机会？

福利倒计时

: :

立减 ¥

普通VIP年卡可用

立即使用

tzyyyyyy

关注关注

6
点赞
踩
2

收藏

觉得还不错? 一键收藏
0
评论
分享

复制链接

分享到 QQ

分享到新浪微博

扫一扫
打赏
打赏
打赏举报

举报

专栏目录

f16_Automated Trading strategy_Kelly Criterion投资比_Vectorized Backtest_drawndown_value-at-risk_socket

Linli522362242的专栏

06-14

1679

AutomatedTrading_the Kelly criterion长期-资本投资比例fraction-增长率最大化

ESP32-C3在MQTT访问时出现“transport_base: Poll timeout or error”问题的分析（3）

phmatthaus的专栏

08-18

540

ESP32-C3在MQTT访问时出现“transport_base: Poll timeout or error”问题的分析（3）

参与评论您还未登录，请先登录后发表或查看评论

python小记--攻防世界Time_losing解题脚本编写

tzyyyyyy的博客

11-11

533

python小记--攻防世界Time_losing解题脚本编写利用脚本调用文件的时间戳和源时间戳进行相减计算并转换为对应的ASCII码得到flag

攻防世界 time_formatter

10-25

647

1 题目 2 分析首先，找到漏洞点：通过构造command，我们可以执行系统命令。所以对于ptr，我们希望他是这样的:';/bin/sh;' 这样我们就能通过system方法执行/bin/sh。于是，接下来的工作就是如何让ptr等于我们需要的值。需要注意。ptr，也就是time format，他的输入时有字符检查的：可以看到，我们的“；”不在允许范围内，所以通过输入直接构建ptr是不可能的。这道题目的突破点其实就在退出函数这里：可以看到，退出函...

攻防世界-MISC-Time_losing

weixin_62938882的博客

09-03

709

得到XMan{seems_to_be_related_to_the_special_guests}由题可得，该题的大致思路应该和时间有关，下载解压附件后可以看到有40个左右txt文件。查看文件的修改日期再与题目中的11:33:20求差，可以发现正好是ascii码值。例:11:34:48-11:33:20=88为X。后面就可以编写脚本了。

攻防世界_MISC之Time_losing

金帛的博客

09-11

1433

攻防世界刷题日记

攻防世界MISC 时间刺客

Snow_224的博客

05-07

1951

参考链接：http://t.csdnimg.cn/X1dW9解压附件发现4张图片题目名称为时间刺客，且图片的修改时间容易引起注意思路即为对4张图片的时间戳进行提取处理。

时间刺客

qq_53229503的博客

01-31

2311

时间不站在你那边

APPLICATION-PROJECT-LIST-1.rar_Heart To Heart

09-19

risk of losing signal due to electrodes falling off, and unwanted incidents due to wires. These advantages are especially prominent when a patient has a seizure involving high-frequency motion and/or ...

Bias-neural-network-prediction-.rar_Again Again

09-24

(based on particle filter add color histogram of video target tracking, plus... When the target is shielding when a special treatment, when the target will continue to track the target again, losing with

PCI_Express_Base_r3_0_10Nov10

11-23

The specification allows system OEMs and peripheral developers adequate room for product versatility and market differentiation without the burden of carrying obsolete interfaces or losing ...

攻防世界 gametime

P_Bloomberg的博客

08-09

2317

准备工具：IDA、x32dbg、010Editor 环境：Windows10 开始附件是exe可执行文件，在cmd里执行后，发现是一个游戏玩了一会后，发现规律大概是它出现什么字母，你就要根据下面的规则按下相应的键 's'-->' ' 'x'-->'x' 'm'-->'m' 一开始可能还可以，后来速度快就没法玩，所以动态调试 IDA静态分析先拖进IDA中，分析main函数 int __cdecl main(int argc, const char **argv, con

攻防世界--TimeKeeper

qq_46263951的博客

01-10

1030

将price和id加上引号，触发debug 联想到扫描目录出现的/console Flask debug pin安全问题这种方法有点难，换种方法目录穿越可以成功读取任意文件，获得flag。

攻防世界_江苏工匠杯_MISC_看雪看雪看雪

qq_47875210的博客

11-10

1590

之前做过一次，没做出来，今天下载过来试试，看到rar，突然想到了，之前既然没有找到图片的隐写，是不是有ntfs，果然扫描就出现了4个文件，全部保存。其中一个文件有这么多空格和tab，再加上看雪，大概率是snow隐写了，其他的文件用sublimetext打开分别是。

攻防世界miss_01

qq_53105813的博客

07-27

1937

攻防世界题目思路

攻防世界Misc(适合作为桌面)WP

qq_54941823的博客

11-30

558

攻防世界MISC(适合当桌面)题目WP

[xctf] 江苏工匠杯easyphp【web系列】

shutTD的博客

10-07

2416

这里绕来绕去大部分还是弱相等问题，出现的知识点的要求就是自己编写哈希碰撞脚本的能力，intval的绕过，array_search的绕过还是值得记下来的。

NewStarCTF 2022 公开赛赛道-WEEK1|REVERSE

qq_61774705的博客

10-07

2671

合起来就是：.flag{h3llo_rvers1ng_w0rld}加密思路就是：先把输入先base64编码->再异或字符串。解密思路就是：异或字符串->base64解码。

Retrieval-Augmented Generation

最新发布

12-31

### Retrieval-Augmented Generation (RAG) in NLP #### Definition of RAG Retrieval-Augmented Generation combines the strengths of retrieval-based models with generative models to improve conversational systems' performance. Traditional retrieval methods excel at finding relevant information but lack flexibility when generating responses that require synthesis or creativity. Generative models can produce novel text but may suffer from hallucinations—generating content not grounded in factual knowledge. By integrating both approaches, RAG leverages external databases or corpora as a source of evidence during generation, ensuring outputs are more accurate and contextually appropriate while maintaining natural language fluency[^1]. #### Implementation Details The architecture typically consists of two main components: - **Retriever**: Responsible for fetching documents most pertinent to user queries using techniques like dense passage retrieval. ```python class Retriever: def __init__(self): pass def retrieve(self, query): # Implement document search logic here pass ``` - **Generator**: Utilizes retrieved contexts alongside input prompts to craft coherent replies via transformer architectures such as BART or T5. ```python from transformers import AutoModelForSeq2SeqLM, AutoTokenizer class Generator: def __init__(self): self.tokenizer = AutoTokenizer.from_pretrained("facebook/bart-large") self.model = AutoModelForSeq2SeqLM.from_pretrained("facebook/bart-large") def generate(self, prompt, context): inputs = self.tokenizer(prompt + " " + context, return_tensors="pt", max_length=512, truncation=True) output_ids = self.model.generate(inputs["input_ids"]) response = self.tokenizer.decode(output_ids[0], skip_special_tokens=True) return response ``` To enhance traditional RAG further, Graph RAG introduces graph structures into the mix, allowing better representation of relationships between entities within stored knowledge bases compared to vector representations alone[^3]. This approach facilitates richer contextual understanding across diverse domains including healthcare, finance, etc., where interconnected data points play crucial roles. #### Use Cases One prominent application area lies in customer service automation through virtual assistants capable of providing precise answers based on vast amounts of structured/unstructured textual resources without losing personal touch[^4]. Another potential field is legal research assistance; lawyers could benefit greatly by having access to case law summaries generated dynamically according to specific needs rather than manually sifting through countless precedents. --related questions-- 1. How does Cross-Attention mechanism contribute to improving RAG's effectiveness? 2. What challenges might one encounter when implementing custom retrievers tailored towards specialized industries? 3. Can you provide examples illustrating how Graph RAG outperforms conventional RAG implementations regarding entity relationship handling? 4. In what ways has pre-training large-scale language models impacted advancements made within this domain over recent years?