BugKu CTF(Crypto):[+-<>] & 把猪困在猪圈里 & 你喜欢下棋吗 & 小山丘的秘密

本文涉及的产品
密钥管理服务KMS,1000个密钥,100个凭据,1个月
简介: BugKu CTF(Crypto):[+-<>] & 把猪困在猪圈里 & 你喜欢下棋吗 & 小山丘的秘密

前言

BugKu是一个由乌云知识库(wooyun.org)推出的在线。乌云知识库是一个致力于收集、整理和分享互联网安全信息的社区平台。


BugKu旨在提供一个实践和学习网络安全的平台,供安全爱好者和测试人员进行挑战和练习。它包含了各种不同类型的场景,如Web、系统、密码学等,参与者需要通过解决这些来获取Flag。


BugKu的特点如下:


1. 丰富:BugKu提供了大量的场景供用户挑战,涵盖了常见的Web,如XSS、SQL注入、文件上传等,以及其他类型的,如逆向工程、密码学等。


2. 适合不同水平:BugKu的题目分为不同的难度级别,适合不同水平的参与者。从初学者到专业测试人员,都能在BugKu中找到适合自己的挑战。


3. 学习资源:BugKu提供了丰富的学习资源,包括解题思路、分析、修复建议等。参与者可以通过学习他人的解题思路和经验,提高自己的技术水平。


4. 排行榜竞赛:BugKu设置了排行榜,参与者可以通过解决题目获取积分,竞争排名。这种竞争激励机制可以激发参与者的学习兴趣和动力。


通过参与BugKu,参与者可以在实践中学习到真实的和技术,提高自己的技术水平。同时,BugKu也是一个交流和分享的平台,参与者可以与其他安全爱好者进行讨论和学习,共同成长。

CTF Crypto

密码学(Cryptography)一般可分为古典密码学和现代密码学。


其中,古典密码学,作为一种实用性艺术存在,其编码和破译通常依赖于设计者和敌手的创造力与技巧,并没有对密码学原件进行清晰的定义。古典密码学主要包含以下几个方面:


单表替换加密(Monoalphabetic Cipher)

多表替换加密(Polyalphabetic Cipher)

奇奇怪怪的加密方式

而现代密码学则起源于 20 世纪中后期出现的大量相关理论,1949 年香农(C. E. Shannon)发表了题为《保密系统的通信理论》的经典论文标志着现代密码学的开始。现代密码学主要包含以下几个方面:


对称加密(Symmetric Cryptography),以 DES,AES,RC4 为代表。

非对称加密(Asymmetric Cryptography),以 RSA,ElGamal,椭圆曲线加密为代表。

哈希函数(Hash Function),以 MD5,SHA-1,SHA-512 等为代表。

数字签名(Digital Signature),以 RSA 签名,ElGamal 签名,DSA 签名为代表。

其中,对称加密体制主要分为两种方式:


分组密码(Block Cipher),又称为块密码。

序列密码(Stream Cipher),又称为流密码。

一般来说,密码设计者的根本目标是保障信息及信息系统的


机密性(Confidentiality)

完整性(Integrity)

可用性(Availability)

认证性(Authentication)

不可否认性(Non-repudiation)

其中,前三者被称为信息安全的 CIA 三要素 。


而对于密码破解者来说,一般是要想办法识别出密码算法,然后进行,或者利用密码体制的进行破解。当然,也有可能通过构造虚假的哈希值或者数字签名来绕过相应的检测。


一般来说,我们都会假设已知待破解的密码体制,而攻击类型通常分为以下四种:

类型 说明
唯密文 只拥有密文
已知明文 拥有密文与对应的明文
选择明文 拥有加密权限,能够对明文加密后获得相应密文
选择密文 拥有解密权限,能够对密文解密后获得相应明文

一、[+-<>]

打开

看描述还是 brainfuck 加密,第三方网站解密

二、把猪困在猪圈里

打开

文件内容如下

/9j/4AAQSkZJRgABAQEAYABgAAD/4RDaRXhpZgAATU0AKgAAAAgABAE7AAIAAAAFAAAISodpAAQAAAABAAAIUJydAAEAAAAKAAAQyOocAAcAAAgMAAAAPgAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFIwMFQAAAAFkAMAAgAAABQAABCekAQAAgAAABQAABCykpEAAgAAAAM0MQAAkpIAAgAAAAM0MQAA6hwABwAACAwAAAiSAAAAABzqAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjAyMTowMToxMCAyMjo0MDo1OQAyMDIxOjAxOjEwIDIyOjQwOjU5AAAAUgAwADAAVAAAAP/hCxdodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvADw/eHBhY2tldCBiZWdpbj0n77u/JyBpZD0nVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkJz8+DQo8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIj48cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPjxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSJ1dWlkOmZhZjViZGQ1LWJhM2QtMTFkYS1hZDMxLWQzM2Q3NTE4MmYxYiIgeG1sbnM6ZGM9Imh0dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIi8+PHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9InV1aWQ6ZmFmNWJkZDUtYmEzZC0xMWRhLWFkMzEtZDMzZDc1MTgyZjFiIiB4bWxuczp4bXA9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8iPjx4bXA6Q3JlYXRlRGF0ZT4yMDIxLTAxLTEwVDIyOjQwOjU5LjQxMTwveG1wOkNyZWF0ZURhdGU+PC9yZGY6RGVzY3JpcHRpb24+PHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9InV1aWQ6ZmFmNWJkZDUtYmEzZC0xMWRhLWFkMzEtZDMzZDc1MTgyZjFiIiB4bWxuczpkYz0iaHR0cDovL3B1cmwub3JnL2RjL2VsZW1lbnRzLzEuMS8iPjxkYzpjcmVhdG9yPjxyZGY6U2VxIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+PHJkZjpsaT5SMDBUPC9yZGY6bGk+PC9yZGY6U2VxPg0KCQkJPC9kYzpjcmVhdG9yPjwvcmRmOkRlc2NyaXB0aW9uPjwvcmRmOlJERj48L3g6eG1wbWV0YT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgPD94cGFja2V0IGVuZD0ndyc/Pv/bAEMABwUFBgUEBwYFBggHBwgKEQsKCQkKFQ8QDBEYFRoZGBUYFxseJyEbHSUdFxgiLiIlKCkrLCsaIC8zLyoyJyorKv/bAEMBBwgICgkKFAsLFCocGBwqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKv/AABEIADMBcQMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/APov7Ha/8+0P/fsUfY7X/n2h/wC/YqaigCH7Ha/8+0P/AH7FH2O1/wCfaH/v2KmooAh+x2v/AD7Q/wDfsUfY7X/n2h/79ipqKAIfsdr/AM+0P/fsUfY7X/n2h/79ipqKAIfsdr/z7Q/9+xR9jtf+faH/AL9ipqKAIfsdr/z7Q/8AfsUfY7X/AJ9of+/YqaigCH7Ha/8APtD/AN+xR9jtf+faH/v2KmooAh+x2v8Az7Q/9+xR9jtf+faH/v2KmooAh+x2v/PtD/37FH2O1/59of8Av2KmooAh+x2v/PtD/wB+xR9jtf8An2h/79ipqKAIfsdr/wA+0P8A37FH2O1/59of+/YqaigCH7Ha/wDPtD/37FH2O1/59of+/YqaigCH7Ha/8+0P/fsUfY7X/n2h/wC/YqaigCH7Ha/8+0P/AH7FH2O1/wCfaH/v2KmooAh+x2v/AD7Q/wDfsUfY7X/n2h/79ipqKAIfsdr/AM+0P/fsUfY7X/n2h/79ipqKAIfsdr/z7Q/9+xR9jtf+faH/AL9ipqKAIfsdr/z7Q/8AfsUfY7X/AJ9of+/YqaigCH7Ha/8APtD/AN+xR9jtf+faH/v2KmooAh+x2v8Az7Q/9+xR9jtf+faH/v2KmooAh+x2v/PtD/37FH2O1/59of8Av2KmooAh+x2v/PtD/wB+xR9jtf8An2h/79ipqKAIfsdr/wA+0P8A37FH2O1/59of+/YqaigCH7Ha/wDPtD/37FFTUUAFMnR5Ld0hlMMjKQsgUHafXB4NPpk0qwQPK4dljUsQiF2IHooySfYc0nsCOY8P+JbxNYbw34rWODWEUvbzRjbFfxD+NPRh/EnbqOOkfxP8Rah4W8DXGqaQ0aXUcsaKZE3DDMAeKraNpN94m8W2/i/XLWTTorJHi0qwkXbKFYYaWUdmI6L2HXmmfGLT73VPhvdW2m2k95cNPCRFbxNI5AcEnAGae/Lfur/f/luONrvt/wAAy5rX4wQ2rztq/hoqiFyAkmcAZ/55103w316+8TeANP1bVWRrq48zeY12j5ZGUcfQCt69Rn0e4RVLMYGAUDknb0rlvhJY3em/C/SrXUbWa0uI/N3wzxlHXMrkZU8jgg019r5fqT9mLOem1v4g67478Q6V4WvtJt7bSZY1xextkh1yMFVOeh647Vu+H7P4lRa5bv4l1LQ59MG7zo7RXEh+U4xlAPvY79Ki8Gade2vxM8b3VzZ3ENvdTWxgmkiZUlARs7SRhse1d5QtEvRfkOXxNeYZorM8Q6Mdd0eSzju5rGbcskFzAcNFIpyre4z1HcZFcb/wk/jmeU+HB4ceDVseW+tkE2Sr3mXjk45CZ68Hpip8g8z0XOeleVza38Qdd8d+IdK8LX2k29tpMsa4vY2yQ65GCqnPQ9cdq9E0LSE0LRYNPS4mujHuZ5523PK7MWZifUsSa5PwZp17a/EzxvdXNncQ291NbGCaSJlSUBGztJGGx7U0lzP0/VA/hv5ol8P2fxKi1y3fxLqWhz6YN3nR2iuJD8pxjKAfex36V2+aKzPEOjHXdHks47uaxm3LJBcwHDRSKcq3uM9R3GRQ3oFjToznpXnX/CT+OZ5T4cHhx4NWx5b62QTZKveZeOTjkJnrwemK7XQtITQtFg09Lia6Me5nnnbc8rsxZmJ9SxJo8wOS8Q2/xKXVrufRdX8P2ulA5hF4HDouBncdhHXPesnStf8AHWnfEPQdG8T6hpF3aaqk0itp6E5VIyw+YqO+Oma9J1LTrXV9MuNP1GLzrW5Qxyx7iu5T1GQQR+FcNq2gy2nxT8EDS9PuP7M061uITIiM8cC+UVQM/OOwGTk04aSSf9aP/gBLWLZq/E/xFqHhbwNcappDRpdRyxopkTcMMwB4rDFh8YmUEax4Z5GfuSf/AButD4xafe6p8N7q2020nvLhp4SIreJpHIDgk4AzXcJxGufQUktG/P8ARDluvT9TP8PR6zFocCeJprWfUxu86S0BEZ+Y7cZAP3cdutcvrll8TpNauX8P6noMWmlv3CXKuZFGB97CEdc967qih6u4uljy7Ttc8e6T8R9D0PxZe6VcW+prM2LKM5ARCeSVGOcV3niSLXZtFkTwrPaQaluXY94CYwM/NnAJ6e1cx4k069n+MfhC9gs7iS0t4boTTpExjiJjIG5gMDPbNd5T3ivn+bB6S+48umX4swGVW17wsZYojK0Sh9+0d8eXXU/DfXr7xN4A0/VtVZGurjzN5jXaPlkZRx9AKv33h7Tv7QvdbitCdVlsWtTMHYlo+oXbnHUDnGaxfhJY3em/C/SrXUbWa0uI/N3wzxlHXMrkZU8jgg0R2fy/X/gBLpb+tDs65DXPEeoWHxO8NaHbtGLLUorhrhSmWJRCVwe3NVNc+ImpaRrVzYQeB9e1COBtq3Vtbs0cnAOVIX3xXOW2r6x4t+LnhnUZfCes6Ta2Edwkst5bOq/NG2Pm2gDnj8aI6yXbX8mD0iz13NFZniHRjrujyWcd3NYzblkguYDhopFOVb3Geo7jIrjf+En8czynw4PDjwatjy31sgmyVe8y8cnHITPXg9MVPkHmei5z0oznpWfoWkJoWiwaelxNdGPczzztueV2YszE+pYk1zOuLrnhHVrnXNEtbjW9NvGDXmlRktLFJgASw9cg4G5fx9cN2TDc7bNGa4zQINb8Taxb+I/EEM+k2lsD/Z+kMSHBKlTLN/tYJAXsD610HiHRjrujyWcd3NYzblkguYDhopFOVb3Geo7jIoeiDRl8XMBuTbiaMzhdxi3jcB6464qTOeleUpceJ5PFEkUfhN7fxQ9t9il8RFnNkIQQfMVfuk9CF654PGRXo2haQmhaLBp6XE10Y9zPPO255XZizMT6liTR0uHkec3fiDx7q3jbxHp3hzUtGs7LR5IwzaghXAdcj5gp9D1x2rd8N23xH/ti1n8QaroN1pJBMgsg+9wVO0qSgHXB69K469ub7RvHHjSG+8F61rem600SbrS3kCMqoQfmUd93UHtXWeEPGdzc3mn6DF4G1zR7JI/Kjnu4XEcKoh2gsw/2QOT1NOGyt2X5ahPdmh8T/EWoeFvA1xqmkNGl1HLGimRNwwzAHiufWH4tvceQuveFfO2bzFh9wX1x5ecVqfGLT73VPhvdW2m2k95cNPCRFbxNI5AcEnAGa6eHQNNj1868LbGpvbC2afzG5jyDt2529R1xmlFaNvv+i/Ucunp+ovh6PWYtDgTxNNaz6mN3nSWgIjPzHbjIB+7jt1rl9csvidJrVy/h/U9Bi00t+4S5VzIowPvYQjrnvXdVwuufETUtI1q5sIPA+vahHA21bq2t2aOTgHKkL74obuxdDI07XPHuk/EfQ9D8WXulXFvqazNiyjOQEQnklRjnFeo15FbavrHi34ueGdRl8J6zpNrYR3CSy3ls6r80bY+baAOePxr12q+yvn+bE/i08goooqRhRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBD9kj/vTf9/n/wAaPskf96b/AL/P/jRRQAfZI/703/f5/wDGj7JH/em/7/P/AI0UUAH2SP8AvTf9/n/xo+yR/wB6b/v8/wDjRRQAfZI/703/AH+f/Gj7JH/em/7/AD/40UUAH2SP+9N/3+f/ABo+yR/3pv8Av8/+NFFAB9kj/vTf9/n/AMaPskf96b/v8/8AjRRQAfZI/wC9N/3+f/Gj7JH/AHpv+/z/AONFFAB9kj/vTf8Af5/8aPskf96b/v8AP/jRRQAfZI/703/f5/8AGj7JH/em/wC/z/40UUAH2SP+9N/3+f8Axo+yR/3pv+/z/wCNFFAB9kj/AL03/f5/8aPskf8Aem/7/P8A40UUAH2SP+9N/wB/n/xo+yR/3pv+/wA/+NFFAB9kj/vTf9/n/wAaPskf96b/AL/P/jRRQAfZI/703/f5/wDGj7JH/em/7/P/AI0UUAH2SP8AvTf9/n/xo+yR/wB6b/v8/wDjRRQAfZI/703/AH+f/Gj7JH/em/7/AD/40UUAH2SP+9N/3+f/ABo+yR/3pv8Av8/+NFFAB9kj/vTf9/n/AMaPskf96b/v8/8AjRRQAfZI/wC9N/3+f/Gj7JH/AHpv+/z/AONFFAB9kj/vTf8Af5/8aPskf96b/v8AP/jRRQAfZI/703/f5/8AGj7JH/em/wC/z/40UUAH2SP+9N/3+f8Axo+yR/3pv+/z/wCNFFAB9kj/AL03/f5/8aPskf8Aem/7/P8A40UUAH2SP+9N/wB/n/xooooA/9k=

可以看到最后是 = 结尾,推测为 Base64 图片,因为内容有很多重复字段

拿到猪圈密码,去解密得到 flag(注意:提交时用 flag{} 包裹)

三、你喜欢下棋吗

打开

打开压缩文件中的解压密码

棋盘密码在线解密

拿到 flag 文件,但是还有一层加密

根据描述推测为博多密码,去第三方网站解密


链接

https://www.boxentriq.com/code-breaking/baudot-code

解出来注意转小写

四、小山丘的秘密

打开

描述里提示了 hill 即希尔加密,打开 flag.txt 文件

同时还有一张棋盘图

去第三方网站解密,先设置模式

再设置密钥矩阵为 3*3,同时数字为棋盘对应的黑棋数

这样就成功拿到了 flag(注意:转小写)


相关文章
|
5月前
BUUCTF 文件中的秘密 1
BUUCTF 文件中的秘密 1
123 0
|
2月前
|
SQL 安全 算法
BugKu CTF(Crypto):Caesar cipher & 抄错的字符 & /.- & 聪明的小羊 & ok
BugKu CTF(Crypto):Caesar cipher & 抄错的字符 & /.- & 聪明的小羊 & ok
|
10月前
|
Shell PHP 数据安全/隐私保护
Bugku CTF 矛盾 网站被黑
Bugku CTF 矛盾 网站被黑
51 0
|
算法 安全 网络安全
花无涯带你走进黑客世界18 加密算法
加密,是以某种特殊的算法改变原有的信息数据,入侵网站一般需要解MD5。 原来在线解MD5的网站还是免费的,越来越多人使用就开始收费了,自己一般没办法解。 国内也有,国外的当然更加强大,文中会贴出来,别着急。
|
安全 Linux 网络安全
花无涯带你走进黑客世界13 揭秘NSA秘密黑客组织方程式
不论你什么心态,我决定还是带着善意科普一下,什么是“方程式”黑客组织? 泄露的工具包并不是 方程式 黑客组织 他们自己发布的,理解源头很重要。 不懂就要学不是吗,上一篇文章我才说了提问了艺术,今天又有人来表演该艺术了…
|
供应链 物联网 数据安全/隐私保护
优衣库 UNIQLO,藏着多少秘密
优衣库 UNIQLO,藏着多少秘密
|
安全 数据安全/隐私保护
bugku ctf
bugku ctf练习平台
147 0
bugku ctf
|
机器学习/深度学习 算法 数据安全/隐私保护
BUGKU CTF (Crypto第一篇)
BUGKU CTF 练习平台
607 0
BUGKU CTF (Crypto第一篇)
|
安全 数据安全/隐私保护
密码学七夕特别篇
我画蓝江水悠悠,爱晚亭上枫叶愁。秋月溶溶照佛寺,香烟袅袅绕经楼。【唐伯虎】
密码学七夕特别篇
|
安全 算法 数据安全/隐私保护
以嫦娥后羿的故事,同大家聊聊加密解密
以嫦娥后羿的故事,同大家聊聊加密解密
以嫦娥后羿的故事,同大家聊聊加密解密