<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[更多知识欢迎访问我的博客园：https://www.cnblogs.com/2ha0yuk7on/]]></title><description><![CDATA[优快云以WP为主，更多安全知识总结欢迎访问我的博客园：https://www.cnblogs.com/2ha0yuk7on/]]></description><link>https://blog.youkuaiyun.com/sorryagain</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; sorryagain]]></copyright><item><title><![CDATA[GYCTF 2020 赛事复现（一）]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/131579687</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/131579687</guid><author>sorryagain</author><pubDate>Thu, 13 Jul 2023 15:30:27 +0800</pubDate><description><![CDATA[GYCTF 2020 赛事复现：Blacklist、FlaskApp、Ezsqli]]></description><category></category></item><item><title><![CDATA[VNCTF2023部分Web题目复现]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/130963085</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/130963085</guid><author>sorryagain</author><pubDate>Tue, 27 Jun 2023 12:34:55 +0800</pubDate><description><![CDATA[VNCTF2023部分Web题目复现]]></description><category></category></item><item><title><![CDATA[某信息安全攻防大赛周周练考核（二） Writeup By 2ha0yuk7on]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/128075602</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/128075602</guid><author>sorryagain</author><pubDate>Thu, 01 Dec 2022 09:08:37 +0800</pubDate><description><![CDATA[某信息安全攻防大赛周周练考核（二） Writeup By 2ha0yuk7on]]></description><category></category></item><item><title><![CDATA[某信息安全攻防大赛周周练考核（一） Writeup By 2ha0yuk7on]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/128004609</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/128004609</guid><author>sorryagain</author><pubDate>Thu, 24 Nov 2022 11:19:46 +0800</pubDate><description><![CDATA[某信息安全攻防大赛周周练考核（一） Writeup By 2ha0yuk7on]]></description><category></category></item><item><title><![CDATA[某网络安全人才能力评估实践赛 Writeup By 2ha0yuk7on]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/127993450</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/127993450</guid><author>sorryagain</author><pubDate>Wed, 23 Nov 2022 10:53:59 +0800</pubDate><description><![CDATA[某网络安全人才能力评估实践赛个人Writeup]]></description><category></category></item><item><title><![CDATA[2022网鼎杯网络安全大赛白虎组部分Writeup]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/126721407</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/126721407</guid><author>sorryagain</author><pubDate>Tue, 06 Sep 2022 17:12:52 +0800</pubDate><description><![CDATA[2022网鼎杯网络安全大赛白虎组部分Writeup]]></description><category></category></item><item><title><![CDATA[2022某省网络安全管理员职业技能大赛个人Writeup及日历密码原理]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/126644620</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/126644620</guid><author>sorryagain</author><pubDate>Thu, 01 Sep 2022 16:15:14 +0800</pubDate><description><![CDATA[2022年某省网络安全管理员职业技能大赛个人Writeup]]></description><category></category></item><item><title><![CDATA[【网鼎杯 2020 白虎组】PicDown]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/126522401</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/126522401</guid><author>sorryagain</author><pubDate>Thu, 25 Aug 2022 19:55:12 +0800</pubDate><description><![CDATA[【网鼎杯 2020 白虎组】PicDown复现Writeup]]></description><category></category></item><item><title><![CDATA[【网鼎杯 2018】Fakebook]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/126519182</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/126519182</guid><author>sorryagain</author><pubDate>Thu, 25 Aug 2022 12:51:23 +0800</pubDate><description><![CDATA[【网鼎杯 2018】Fakebook题目Writeup]]></description><category></category></item><item><title><![CDATA[NepCTF 2022 个人Writeup]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/125907793</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/125907793</guid><author>sorryagain</author><pubDate>Thu, 21 Jul 2022 11:28:17 +0800</pubDate><description><![CDATA[NepCTF2022"是由Nepnep联合站队主办的公益招新赛事，旨在以有代表性、有特色的题目培养新生网络安全能力。比赛形式个人解题赛。]]></description><category></category></item><item><title><![CDATA[文件上传漏洞之.htaccess文件解析漏洞]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/125080205</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/125080205</guid><author>sorryagain</author><pubDate>Wed, 01 Jun 2022 17:23:14 +0800</pubDate><description><![CDATA[  htaccess文件是Apache服务器中的一个配置文件，它负责相关目录下的网页配置。通过htaccess文件，可以帮我们实现：网页301重定向、自定义404错误页面、改变文件扩展名、允许/阻止特定的用户或者目录的访问、禁止目录列表、配置默认文档等功能。]]></description><category></category></item><item><title><![CDATA[密码学之背包加密系统（Merkle–Hellman公钥加密算法）原理]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/125067778</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/125067778</guid><author>sorryagain</author><pubDate>Tue, 31 May 2022 16:44:09 +0800</pubDate><description><![CDATA[背包加密系统
背包问题
假定一个背包可以承重 W，现在有 n 个物品，其重量分别为a1,a2,a3,...,ana_1,a_2,a_3,...,a_na1​,a2​,a3​,...,an​， 问装哪些物品可以恰好使得背包装满，并且每个物品只能被装一次。背包问题其实就是在解这样的一个问题：
x1a1+x2a2+x3a3+...+xnan=Wx_1a_1 + x_2a_2 + x_3a_3 + ... + x_na_n = Wx1​a1​+x2​a2​+x3​a3​+...+xn​an​=W
其中所有的 xix]]></description><category></category></item><item><title><![CDATA[【Dest0g3 520迎新赛】密码学部分Wp及LCG（线性同余生成器）攻击方法]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/125048556</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/125048556</guid><author>sorryagain</author><pubDate>Mon, 30 May 2022 17:30:52 +0800</pubDate><description><![CDATA[题目出自Dest0g3 520迎新赛，知识点包括RSA、AES、DLP、LCG等。
文章目录babyRSAbabyAESezDLPezStreamMr.Doctor
babyRSA
题目代码：
from Crypto.Util.number import bytes_to_long, getPrime
from gmpy2 import next_prime
p = getPrime(1024)
q = next_prime(p)
n = p*q
flag = open('flag.txt', 'rb').]]></description><category></category></item><item><title><![CDATA[2022DASCTF MAY 出题人挑战赛个人Writeup]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/124910129</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/124910129</guid><author>sorryagain</author><pubDate>Sun, 22 May 2022 14:50:13 +0800</pubDate><description><![CDATA[文章目录WEBPower Cookie魔法浏览器getmehackmefxxkgoMISC不懂PCB的厨师不是好黑客卡比神必流量
感觉这次难度还比较友好，一个人肝到第18，不过全是web和misc，密码再给点时间感觉也能出。
WEB
Power Cookie
以游客身份登录，发现服务器返回了set-cookie

将set-cookie返回的值上送，并修改成管理员即可
Cookie: admin=1; Path=/; Domain=127.0.0.1; Max-Age=3600


魔法浏览器
查看源代码，]]></description><category></category></item><item><title><![CDATA[2022DASCTF Apr X FATE 防疫挑战赛——【Web】warmup-php]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/124511280</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/124511280</guid><author>sorryagain</author><pubDate>Sat, 30 Apr 2022 12:41:36 +0800</pubDate><description><![CDATA[warmup-php
0. 题目信息
打开链接，网页源码如下：
 &lt;?php
spl_autoload_register(function($class){
    require("./class/".$class.".php");
});
highlight_file(__FILE__);
error_reporting(0);
$action = $_GET['action'];
$properties = $_POST['properties'];
class Action{

    pub]]></description><category></category></item><item><title><![CDATA[2022DASCTF Apr X FATE 防疫挑战赛——【Misc】熟悉的猫]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/124444052</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/124444052</guid><author>sorryagain</author><pubDate>Wed, 27 Apr 2022 10:42:47 +0800</pubDate><description><![CDATA[熟悉的猫
下载文件，补上zip后缀名，解压得到两个文件：

flag.zip有密码保护
len5.kdbx文件经过搜索，可以使用keepass打开。打开时发现需要密码。

根据文件名，猜测密码为5位字符，则开始爆破。
首先使用John The Ripper工具转换一下John支持的格式。

然后使用hashcat爆破hash值得到密码。
hashcat -m 13400 keepass.txt  -a 0 password.txt  --force
# m：破解的hash类型，hashcat -h 何查看类]]></description><category></category></item><item><title><![CDATA[2022DASCTF Apr X FATE 防疫挑战赛——【Misc】Bindundun]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/124385127</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/124385127</guid><author>sorryagain</author><pubDate>Sun, 24 Apr 2022 16:29:04 +0800</pubDate><description><![CDATA[冰墩墩
下载附件，解压发现是10万多个txt，找到一个start.txt，打开内容如下：
101000001001011 =&gt;The txt you should view is m9312r95cr.txt

其他文件也是这种格式，发现前部分得数据是15位，左边补零转16进制的话就是0x504B，看到这里应该能想到是压缩包了，写了个垃圾脚本逐个读取文件，将数据拼接并写入文件。
import re

path = 'D:\\BinDunDun\\'

regex_next = "is (.*?\\.t]]></description><category></category></item><item><title><![CDATA[2022DASCTF Apr X FATE 防疫挑战赛个人Writeup]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/124382077</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/124382077</guid><author>sorryagain</author><pubDate>Sun, 24 Apr 2022 16:01:27 +0800</pubDate><description><![CDATA[这次下午有事，上午做了两道就溜了，简单记录一下。
Crypto
easy_real
读题目代码：
import random
import hashlib

flag = 'xxxxxxxxxxxxxxxxxxxx'
key = random.randint(1,10)
for i in range(len(flag)):
	crypto += chr(ord(flag[i])^key)
m = crypto的ascii十六进制
e = random.randint(1,100)
print(hashlib]]></description><category></category></item><item><title><![CDATA[搭建Ubuntu16.04系统下Pwn环境的几个疑难问题]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/124078132</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/124078132</guid><author>sorryagain</author><pubDate>Sun, 10 Apr 2022 15:09:50 +0800</pubDate><description><![CDATA[  之前搭建了一下 Ubuntu 系统下的 Pwn 环境，但是搭建过程中遇到很多问题，有些顺手可以解决。还有一部分花费了很长时间，在此记录。
1. 使用通用exp执行不能getshell
  前情提要：
  我本来是有一套 Kali 的做题环境的，执行 exp 什么的都正常，后来重新搭了一套 Ubuntu20.04 的环境。工具什么的都可以正常安装，但是发现之前能用的 exp 都执行不了了，执行起来会报错并且不能getshell了。
  以攻防世界Pwn题目“level0”为例，EXP如下：
from pw]]></description><category></category></item><item><title><![CDATA[【网鼎杯 2020 朱雀组】Think Java]]></title><link>https://blog.youkuaiyun.com/sorryagain/article/details/124042393</link><guid>https://blog.youkuaiyun.com/sorryagain/article/details/124042393</guid><author>sorryagain</author><pubDate>Fri, 08 Apr 2022 16:04:27 +0800</pubDate><description><![CDATA[【网鼎杯 2020 朱雀组】Think Java
首先下载题目附件，是一些.class文件，反编译查看。

注意到引入的其中一个包：
import io.swagger.annotations.ApiOperation;


Swagger
Swagger 是一个规范和完整的框架，用于生成、描述、调用和可视化 RESTful 风格的 Web 服务。总体目标是使客户端和文件系统作为服务器以同样的速度来更新。文件的方法，参数和模型紧密集成到服务器端的代码，允许API来始终保持同步。
Swagger UI 提供了]]></description><category></category></item></channel></rss>