{"id":185,"date":"2023-04-19T18:00:27","date_gmt":"2023-04-19T10:00:27","guid":{"rendered":"https:\/\/zysgmzb.club\/?p=185"},"modified":"2023-04-19T16:56:21","modified_gmt":"2023-04-19T08:56:21","slug":"%e7%ba%a2%e6%98%8e%e8%b0%b72023-misc-wp","status":"publish","type":"post","link":"https:\/\/zysgmzb.club\/index.php\/archives\/185","title":{"rendered":"\u7ea2\u660e\u8c372023 Misc WP"},"content":{"rendered":"<h2>Misc<\/h2>\n<blockquote>\n<p>\u4e00\u4e2aflag\u4e0d\u662f\u6807\u51c6\u683c\u5f0f<\/p>\n<p>\u4e00\u4e2a\u5de5\u5177\u9898<\/p>\n<p>\u4e00\u4e2a\u8111\u6d1e\u9898<\/p>\n<p>\u5f88\u96be\u8bc4\u4ef7\u8fd9\u6b21Misc<\/p>\n<\/blockquote>\n<h3>hacker<\/h3>\n<p>\u770b\u770b\u6d41\u91cf\uff0c\u53d1\u73b0\u5c31\u662f\u5199\u4e86\u4e2a\u7b80\u5355\u7684\u52a0\u5bc6\u903b\u8f91\uff0c\u53ea\u8981\u8bfb\u61c2\u4e86\u4e4b\u540e\u89e3dns\u6570\u636e\u5c31\u53ef\u4ee5\u4e86<\/p>\n<p>\u51fa\u9898\u4eba\u4e0d\u77e5\u9053\u662f\u6545\u610f\u7684\u8fd8\u662f\u600e\u4e48\u7684\u8fd9\u4e2a\u52a0\u5bc6\u903b\u8f91\u4f1a\u5bfc\u81f4\u6ca162\u4f4d\u4e22\u5931\u4e00\u4f4d\uff0c\u8fd9\u76f4\u63a5\u5148\u8865\u4e2a1\u7136\u540e\u518d\u7206\u7834\u5c31\u53ef\u4ee5\u4e86<\/p>\n<p>password\u4e3aadmin\u5bc6\u7801\uff0c\u5728tcp.stream eq 2\u91cc\u53ef\u4ee5\u627e\u5230<\/p>\n<p>\u52a0\u5bc6\u903b\u8f91\u4e5f\u5728tcp.stream eq 2\u91cc\u53ef\u4ee5\u627e\u5230<\/p>\n<p>\u8f6c\u6362\u811a\u672c:<\/p>\n<pre class=\"prettyprint linenums\" ><code>password = &#039;3861336536383463393233623736336432353263663165383733346137613239&#039;\ncipher = &#039;79227024716c7522787370254c777230667673222570247b766773226326711d7b357226771575227a7372237677702573611f372570317b767277207620611479207024777b60247e6674231a626727666171372570317f766773207620167879226731756c60206d75703670754e&#039;\nres = &#039;&#039;\nfor i in range(len(cipher)):\n    res += hex(int(cipher[i], 16) ^ int(password[i % len(password)], 16))[2:]\n\nprint(bytes.fromhex(res).decode())\n\n#ACCAGTAAAACG{AATTCAACAACATGCTGC$CTACA-AACAAAAACAAT-TCATCAACAAAS-AACAACTGGTGA-TTCTTCTCATGATGAAA$AACTTCTTCTGCTGC}<\/code><\/pre>\n<p>\u8fd9\u91cc\u7684\u4e24\u4e2a$\u548c\u4e00\u4e2aS\u7684\u5c31\u662f\u4e22\u5931\u7684\u5b57\u8282<\/p>\n<p>\u89c2\u5bdf\u540e\u53d1\u73b0\u5927\u6982\u662f\u67d0\u79cd\u8fdb\u5236\uff0c\u5e76\u4e14\u662fACGT\u7684\u987a\u5e8f<\/p>\n<p>\u89e3\u5bc6\u811a\u672c\uff1a<\/p>\n<pre class=\"prettyprint linenums\" ><code>table = &#039;ACGT&#039;\ndic = {&#039;AAA&#039;: &#039;a&#039;, &#039;AAC&#039;: &#039;b&#039;, &#039;AAG&#039;: &#039;c&#039;,\n       &#039;AAT&#039;: &#039;d&#039;, &#039;ACA&#039;: &#039;e&#039;, &#039;ACC&#039;: &#039;f&#039;, &#039;ACG&#039;: &#039;g&#039;, &#039;ACT&#039;: &#039;h&#039;, &#039;AGA&#039;: &#039;i&#039;, &#039;AGC&#039;: &#039;j&#039;, &#039;AGG&#039;: &#039;k&#039;, &#039;AGT&#039;: &#039;l&#039;, &#039;ATA&#039;: &#039;m&#039;, &#039;ATC&#039;: &#039;n&#039;, &#039;ATG&#039;: &#039;o&#039;, &#039;ATT&#039;: &#039;p&#039;, &#039;CAA&#039;: &#039;q&#039;, &#039;CAC&#039;: &#039;r&#039;, &#039;CAG&#039;: &#039;s&#039;, &#039;CAT&#039;: &#039;t&#039;, &#039;CCA&#039;: &#039;u&#039;, &#039;CCC&#039;: &#039;v&#039;, &#039;CCG&#039;: &#039;w&#039;, &#039;CCT&#039;: &#039;x&#039;, &#039;CGA&#039;: &#039;y&#039;, &#039;CGC&#039;: &#039;z&#039;, &#039;CGG&#039;: &#039;A&#039;, &#039;CGT&#039;: &#039;B&#039;, &#039;CTA&#039;: &#039;C&#039;, &#039;CTC&#039;: &#039;D&#039;, &#039;CTG&#039;: &#039;E&#039;, &#039;CTT&#039;: &#039;F&#039;, &#039;GAA&#039;: &#039;G&#039;, &#039;GAC&#039;: &#039;H&#039;, &#039;GAG&#039;: &#039;I&#039;, &#039;GAT&#039;: &#039;J&#039;, &#039;GCA&#039;: &#039;K&#039;, &#039;GCC&#039;: &#039;L&#039;, &#039;GCG&#039;: &#039;M&#039;, &#039;GCT&#039;: &#039;N&#039;, &#039;GGA&#039;: &#039;O&#039;, &#039;GGC&#039;: &#039;P&#039;, &#039;GGG&#039;: &#039;Q&#039;, &#039;GGT&#039;: &#039;R&#039;, &#039;GTA&#039;: &#039;S&#039;, &#039;GTC&#039;: &#039;T&#039;, &#039;GTG&#039;: &#039;U&#039;, &#039;GTT&#039;: &#039;V&#039;, &#039;TAA&#039;: &#039;W&#039;, &#039;TAC&#039;: &#039;X&#039;, &#039;TAG&#039;: &#039;Y&#039;, &#039;TAT&#039;: &#039;Z&#039;, &#039;TCA&#039;: &#039;1&#039;, &#039;TCC&#039;: &#039;2&#039;, &#039;TCG&#039;: &#039;3&#039;, &#039;TCT&#039;: &#039;4&#039;, &#039;TGA&#039;: &#039;5&#039;, &#039;TGC&#039;: &#039;6&#039;, &#039;TGG&#039;: &#039;7&#039;, &#039;TGT&#039;: &#039;8&#039;, &#039;TTA&#039;: &#039;9&#039;, &#039;TTC&#039;: &#039;0&#039;, &#039;TTG&#039;: &#039; &#039;}\ncipher = &#039;TCATCAACAAAT&#039;\nplain = &#039;&#039;\nfor i in range(0, len(cipher), 3):\n    plain += dic[cipher[i:i+3]]\nprint(plain)\n<\/code><\/pre>\n<p>\u6700\u540e\u5bf9\u4f4d\u7f6e\u7684\u4e24\u4e2a\u4f4d\u8fdb\u884c\u7206\u7834\u5373\u53ef<\/p>\n<h3>\u963f\u5c3c\u4e9a<\/h3>\n<p>\u56fe\u7247\u5c3e\u7684\u5197\u4f59\u6570\u636e\u89e3hex\u4e4b\u540e\u53ef\u4ee5\u5bdf\u89c9\u662f\u6709\u79cd\u7f16\u7801\u7684\u611f\u89c9\uff0c\u4e8e\u662f\u7528cyberchef\u7206\u7834\u4e00\u4e0b\u53ef\u4ee5\u5f97\u5230\u5bc6\u7801<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic.imgdb.cn\/item\/643f947d0d2dde5777d9b9cc.png\" alt=\"\" \/><\/p>\n<p>\u7136\u540e\u6839\u636e\u6587\u4ef6\u540d\u63d0\u793a\u53bb\u4f7f\u7528\u5728\u7ebf\u5de5\u5177\u5f97\u5230\u538b\u7f29\u5305\u5bc6\u7801<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic.imgdb.cn\/item\/643f94c70d2dde5777da0cf7.jpg\" alt=\"\" \/><\/p>\n<p>\u7136\u540e\u89e3\u5f00\u538b\u7f29\u5305\uff0c\u91cc\u9762\u662fDecabit\u7f16\u7801\uff0c\u89e3\u4e00\u4e0b\u5c31\u53ef\u4ee5\u4e86<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/pic.imgdb.cn\/item\/643f950e0d2dde5777da56e5.jpg\" alt=\"\" \/><\/p>\n<h3>X\u5149\u7684\u79d8\u5bc6<\/h3>\n<p>\u7b80\u5355\u4e86\u89e3\u540e\u5199\u811a\u672c\u63d0\u53d6\u4e0b\u56fe\u7247\uff0c\u7136\u540e\u53d1\u73b017 18 19\u4e09\u5f20\u56fe\u662f\u51e0\u4e4e\u4e00\u6a21\u4e00\u6837\u7684\uff0c\u6839\u636e\u4f4d\u6df1\u5ea6\u4e3a8\uff0c\u8111\u6d1e\u4e00\u4e0b\u53ef\u80fd\u662f\u56fe\u7247\u5408\u6210\uff0c\u6240\u4ee5\u628a\u6700\u540e\u4e09\u5f20\u56fe\u5206\u522b\u4f5c\u4e3argb\u586b\u5145\u8fdb\u4e00\u5f20\u65b0\u56fe\uff0c\u518dlsb\u5c31\u53ef\u4ee5\u53d1\u73b0flag\u56fe\u7247<\/p>\n<p>exp:<\/p>\n<pre class=\"prettyprint linenums\" ><code>import SimpleITK as sitk\nfrom PIL import Image\nimport pydicom\nimport numpy as np\nimport cv2\n\ndef loadFile(filename):\n    ds = sitk.ReadImage(filename)\n    img_array = sitk.GetArrayFromImage(ds)\n    frame_num, width, height = img_array.shape\n    return img_array, frame_num, width, height\n\ndef showImage(img_array, frame_num):\n    img_bitmap = Image.fromarray(img_array[frame_num])\n    return img_bitmap\n\nfilename = &#039;task.dcm&#039;\nfile = loadFile(filename)\nfor i in range(20):\n    img = showImage(file[0], i)\n    img.save(&#039;.\/file\/&#039;+str(i)+&#039;.png&#039;)\n\nimg1 = Image.open(&quot;.\/file\/17.png&quot;)\nimg2 = Image.open(&quot;.\/file\/18.png&quot;)\nimg3 = Image.open(&quot;.\/file\/19.png&quot;)\n\nimg = Image.new(&#039;RGB&#039;, (512, 512))\nfor i in range(512):\n    for j in range(512):\n        p1 = img1.getpixel((j, i))\n        p2 = img2.getpixel((j, i))\n        p3 = img3.getpixel((j, i))\n        img.putpixel((j, i), (p1, p2, p3))\nimg.save(&quot;.\/file\/flag.png&quot;)<\/code><\/pre>\n<p><img decoding=\"async\" src=\"https:\/\/pic.imgdb.cn\/item\/643f95cc0d2dde5777db1d2b.jpg\" alt=\"\" \/><\/p>\n<p>\u63d0\u53d6\u51fa\u6765\u5c31\u662fflag\u56fe\u7247<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Misc \u4e00\u4e2aflag\u4e0d\u662f\u6807\u51c6\u683c\u5f0f \u4e00\u4e2a\u5de5\u5177\u9898 \u4e00\u4e2a\u8111\u6d1e\u9898 \u5f88\u96be\u8bc4\u4ef7\u8fd9\u6b21Misc hacker \u770b\u770b\u6d41\u91cf\uff0c\u53d1\u73b0\u5c31\u662f\u5199\u4e86\u4e2a\u7b80\u5355\u7684\u52a0\u5bc6\u903b\u8f91\uff0c\u53ea\u8981\u8bfb\u61c2\u4e86\u4e4b\u540e\u89e3dns\u6570\u636e\u5c31\u53ef\u4ee5\u4e86 \u51fa\u9898\u4eba\u4e0d\u77e5\u9053\u662f\u6545\u610f\u7684\u8fd8\u662f\u600e\u4e48\u7684\u8fd9\u4e2a\u52a0\u5bc6\u903b\u8f91\u4f1a\u5bfc\u81f4\u6ca162\u4f4d\u4e22\u5931\u4e00\u4f4d\uff0c\u8fd9\u76f4\u63a5\u5148\u8865\u4e2a1\u7136\u540e\u518d\u7206\u7834\u5c31\u53ef\u4ee5\u4e86 password\u4e3aadmin\u5bc6\u7801\uff0c\u5728tcp.stream eq 2\u91cc\u53ef\u4ee5\u627e\u5230 \u52a0\u5bc6\u903b\u8f91\u4e5f\u5728tcp.stream eq 2\u91cc\u53ef\u4ee5\u627e [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-185","post","type-post","status-publish","format-standard","hentry","category-wp"],"_links":{"self":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts\/185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/comments?post=185"}],"version-history":[{"count":1,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts\/185\/revisions"}],"predecessor-version":[{"id":186,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/posts\/185\/revisions\/186"}],"wp:attachment":[{"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/media?parent=185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/categories?post=185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zysgmzb.club\/index.php\/wp-json\/wp\/v2\/tags?post=185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}