<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/wgf42421</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; wgf42421]]></copyright><item><title><![CDATA[内部赛-2025第五届网络安全攻防大赛团队赛-①初赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/151923844</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/151923844</guid><author>wgf42421</author><pubDate>Sun, 21 Sep 2025 10:28:57 +0800</pubDate><description><![CDATA[直接搜flag字符串。]]></description><category></category></item><item><title><![CDATA[内部赛-2025第五届网络安全攻防大赛个人赛-①初赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/151923820</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/151923820</guid><author>wgf42421</author><pubDate>Sun, 21 Sep 2025 10:28:16 +0800</pubDate><description><![CDATA[header 里直接有。]]></description><category></category></item><item><title><![CDATA[第九届工业信息安全技能大赛-典型工业场景锦标赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/151923798</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/151923798</guid><author>wgf42421</author><pubDate>Sun, 21 Sep 2025 10:27:40 +0800</pubDate><description><![CDATA[zip.png 扫出解压密码 解压得到 industrial_traffic_with_flag.pcap。根据提示 HINT::PASSWORD_ENCRYPTED_WITH_CAESAR_SHIFT_3。拼起来 Polis{W0w_Th1s_1s_f1agO1_Great_G0t_it!注: 6102包 长度56 插入3字符.查看是10ff. 经测试插入的是10f。插入数据长度为 X-53, 长度55即插入55-53 = 插入2字符。获得二维码 Polis{W0w_Th1s_1s_f1agO1_]]></description><category></category></item><item><title><![CDATA[第九届工业信息安全技能大赛-石油工业场景锦标赛①初赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/151923742</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/151923742</guid><author>wgf42421</author><pubDate>Sun, 21 Sep 2025 10:26:07 +0800</pubDate><description><![CDATA[lsb图片隐写。]]></description><category></category></item><item><title><![CDATA[第九届工业信息安全技能大赛-枫叶杯-密码应用安全②决赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/150123134</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/150123134</guid><author>wgf42421</author><pubDate>Sun, 10 Aug 2025 00:37:14 +0800</pubDate><description><![CDATA[void Encrypt(BYTE * pbData, //明文ULONG uIDataLen, //明文长度 BYTE * pbEncryptedData, //密文ULONG * pulEncryptedLen, //密文长度 DEVHANDLE hDev, //设备句柄HANDLE hKey //加密密钥句柄 )//加密参数EncryptParam//IV//IV长度//填充类型//反馈的比特长度。]]></description><category></category></item><item><title><![CDATA[第九届工业信息安全技能大赛-枫叶杯-密码应用安全①初赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/150123077</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/150123077</guid><author>wgf42421</author><pubDate>Sun, 10 Aug 2025 00:36:41 +0800</pubDate><description><![CDATA[分析可以发现UDP报文数据类似“send msg = {01234567890123456}”，请解密实际数据，填写解密后UDP报文数据中大括号内的字符串： (50/分）3).是通讯发起方设备还是响应方设备出现故障（填写"发起方"或“响应方”） (20/分）5).密钥种子SKEYSEED是（十六进制方式） (30/分）6).发起方的IKE加密密钥SK_ei是： (40/分）4).DH共享密钥值是（十六进制方式） (30/分）2).IKE的数据完整性校验算法是？1).密钥交换算法是？]]></description><category></category></item><item><title><![CDATA[2021年江西省工业互联网安全技术技能大赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/150123008</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/150123008</guid><author>wgf42421</author><pubDate>Sun, 10 Aug 2025 00:36:08 +0800</pubDate><description><![CDATA[附件下载 https://pan.baidu.com/s/17TagYh6oxZhePWeh36g9YA#ky47补全 WriteUp。]]></description><category></category></item><item><title><![CDATA[2025能源网络安全大赛-②决赛-团队赛B卷 Writeup]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/150122942</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/150122942</guid><author>wgf42421</author><pubDate>Sun, 10 Aug 2025 00:35:36 +0800</pubDate><description><![CDATA[大模型在软件设施和具体应用场景落地中的存在很多安全问题，请对该平台进行安全检查，获取主机权限后即可查看flag，flag提交格式：flag{xxx}]]></description><category></category></item><item><title><![CDATA[2025能源网络安全大赛-②决赛-个人赛B卷 WriteUp]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/150122904</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/150122904</guid><author>wgf42421</author><pubDate>Sun, 10 Aug 2025 00:35:02 +0800</pubDate><description><![CDATA[http://172.100.3.159/upload.php 上传木马蚁剑连接得到 根目录的flag.txt。]]></description><category></category></item><item><title><![CDATA[IDEA Spring MVC配置.]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/150113237</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/150113237</guid><author>wgf42421</author><pubDate>Sat, 09 Aug 2025 19:25:19 +0800</pubDate><description><![CDATA[参考1 https://blog.youkuaiyun.com/qq_74329022/article/details/138326488。]]></description><category></category></item><item><title><![CDATA[第六届中央企业网络安全大赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/150106508</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/150106508</guid><author>wgf42421</author><pubDate>Sat, 09 Aug 2025 12:24:40 +0800</pubDate><description><![CDATA[提取190的zip文件，爆破密码得2025/1/17 10:43:42 - ‘6827’ 是这个文件的一个有效口令。前面是一个tea, 后面是rc4.把rc4值输入进去跑一遍解码得到解密后的数据.然后 用ilspy开起来有两个decode，一个rc4一个算一下GF(256)下的逆矩阵然后运算。5.攻击者为了监控Windows事件日志，在WMI查询中使用的WMI类名是什么。wireshark设置 密码 解密流量. — 解不了?解密后是个2^8域内的矩阵运算，也可以用z3求解。清除ssh公钥，删除后门，即可。]]></description><category></category></item><item><title><![CDATA[第八届工业信息安全技能大赛-复赛-海口-day2]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/145359672</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/145359672</guid><author>wgf42421</author><pubDate>Sat, 25 Jan 2025 22:02:27 +0800</pubDate><description><![CDATA[day2。]]></description><category></category></item><item><title><![CDATA[第八届工业信息安全技能大赛-复赛-海口-day1]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/145359659</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/145359659</guid><author>wgf42421</author><pubDate>Sat, 25 Jan 2025 22:00:58 +0800</pubDate><description><![CDATA[运行candump抓取can总线数据，根据要求CAN ID 0x2F1，找到数据45 4E 3A 46 37 48 32 34。没有root权限，不能读取/flag.txt，find suid，python有root权限。设计-组件-素材，可以上传文件，修改文件名字，实现目录穿越。步骤3: 爆破8位数字，得到密码20011212。步骤2: youwant提示，base64解密。步骤1: 打开日志，直接搜索flag。解码得到flag EN:F7H24。步骤4: 解压缩得到flag。设计-高级，可以修改源码。]]></description><category></category></item><item><title><![CDATA[第八届工业信息安全技能大赛-工业密码安全锦标赛]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/144404570</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/144404570</guid><author>wgf42421</author><pubDate>Wed, 11 Dec 2024 16:40:39 +0800</pubDate><description><![CDATA[工程文件名为U2FsdGVkX1%2B9xdpoeLboPz3tm8bYPc1O2oo9vi4nHcE%3D_64，url转换得到U2FsdGVkX1+9xdpoeLboPz3tm8bYPc1O2oo9vi4nHcE=，使用AES在线解密，得到flag。在http文件中，有dat文件，发现context.dat文件，它是力控项目中存储密码的文件，由于之前恢复项目失败，所以将所有dat文件移动到可开发的正常项目的sys目录下，开发系统后，在配置中进行查看，发现加密的admin用户密码。]]></description><category></category></item><item><title><![CDATA[第四届“鹏城杯”联邦网络靶场协同攻防演练（初赛）WriteUp]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/143669558</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/143669558</guid><author>wgf42421</author><pubDate>Sun, 10 Nov 2024 23:56:25 +0800</pubDate><description><![CDATA[解压出来一个png修复宽高 出1半flag。hint.txt 用ntfs流导出一张png图片。从里面拆出一个jpg。arnold置乱解码一次得到flag另一半。]]></description><category></category></item><item><title><![CDATA[内部赛-2024第四届网络安全攻防大赛团队赛②-决赛-综合防御赛-WriteUp]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/142827986</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/142827986</guid><author>wgf42421</author><pubDate>Thu, 10 Oct 2024 17:43:23 +0800</pubDate><description><![CDATA[第四届网络安全攻防大赛团队赛决赛任务书。]]></description><category></category></item><item><title><![CDATA[内部赛-2024第四届网络安全攻防大赛个人赛②-决赛-综合渗透赛-WriteUp]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/142794714</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/142794714</guid><author>wgf42421</author><pubDate>Wed, 09 Oct 2024 19:38:36 +0800</pubDate><description><![CDATA[数据库提权利用  分数:  200进一步获取内网数据库服务服务器权限并提交flag6数据库信息获取  分数:  100登录数据库获取flag4并提交泄露信息漏洞利用  分数:  300请通过进一步信息收集，获取网站服务器权限，并提交服务器根目录的flag2渗透工资查询系统  分数:  450攻击内部应用系统(工资查询系统)获取flag9并提交渗透内网数据库  分数:  100进一步渗透内网独立数据库服务，并提交flag5信息收集  分数:  50。]]></description><category></category></item><item><title><![CDATA[内部培训测试 - 长亭科技平台]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/142534577</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/142534577</guid><author>wgf42421</author><pubDate>Wed, 25 Sep 2024 22:21:33 +0800</pubDate><description><![CDATA[0,1),1,1))=102 这些后面的数字。]]></description><category></category></item><item><title><![CDATA[MoeCTF2024 Writeup]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/142268996</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/142268996</guid><author>wgf42421</author><pubDate>Sun, 15 Sep 2024 06:09:12 +0800</pubDate><description><![CDATA[没出来flag moectf{MOECTF_63_31_43_31_41_52_31_51_71_101}不对。解压得到凯撒 zbrpgs{q751894o-rr0n-47qq-85q4-r92q0443921s}解密流程 byte_DD4058   ^ v9 -> decode tea -> ^kvcode。加密流程 Str ^ kvCode -> tea -> ^ v9 == byte_DD4058。010查看找到 key?UPX变形,010将 vmp替换为UPX. upx -d file.exe。]]></description><category></category></item><item><title><![CDATA[BaseCTF2024 Writeup]]></title><link>https://blog.youkuaiyun.com/wgf42421/article/details/142268983</link><guid>https://blog.youkuaiyun.com/wgf42421/article/details/142268983</guid><author>wgf42421</author><pubDate>Sun, 15 Sep 2024 06:06:06 +0800</pubDate><description><![CDATA[步骤1：BaseCTF{%print ()|attr(‘%c%ccl’‘ass%c%c’%(95,95,95,95))|attr(‘%c%cba’‘se%c%c’%(95,95,95,95))|attr(‘%c%csubcl’‘asses%c%c’%(95,95,95,95))()%}assert (c_trueX == pow(m_trueN, e, n_trueC)) 正确。代码审计，jwt密钥是假的，直接改base64，注意token取数[1]upx小改.010替换 upx为UPX…]]></description><category></category></item></channel></rss>