{"id":697,"date":"2025-10-24T09:59:06","date_gmt":"2025-10-24T01:59:06","guid":{"rendered":"https:\/\/www.youvii.site\/?p=697"},"modified":"2025-10-24T09:59:06","modified_gmt":"2025-10-24T01:59:06","slug":"yishiduli","status":"publish","type":"post","link":"https:\/\/www.youvii.site\/index.php\/archives\/yishiduli","title":{"rendered":"\u9057\u4e16\u72ec\u7acb"},"content":{"rendered":"

\u9057\u4e16\u72ec\u7acb<\/h1>\n

\u9898\u76ee<\/h1>\n

\"1749458236871-b16b84b4-7f4f-4663-93c1-9cb474ae1de2.png\"<\/p>\n

$ .\/cryptooo SECCON{ } Encrypted(44): waUqjjDGnYxVyvUOLN8HquEO0J5Dqkh\/zr\/3KXJCEnw= what's the key?<\/code><\/pre>\n
\u4e0b\u8f7d\u9644\u4ef6\u5f97\u5230<\/p>\n
\"1749458252596-9b3cbc68-8ba5-48dd-821a-27881be2eacf.png\"<\/p>\n
\u7531\u6267\u884c\u9644\u4ef6\u5185\u7684\u6587\u4ef6 \u5229\u7528\u4fe1\u606f\u89e3\u5bc6<\/p>\n
\"1749458379398-84b6d7b5-dfd0-4e1c-9395-8e9c6bc922e1.png\"<\/p>\n
int __fastcall main(int a1, char **a2, char **a3)\n{\n  unsigned int v4; \/\/ [rsp+2Ch] [rbp-814h]\n  char v5[2056]; \/\/ [rsp+30h] [rbp-810h] BYREF\n  unsigned __int64 v6; \/\/ [rsp+838h] [rbp-8h]\n\n  v6 = __readfsqword(0x28u);\n  if ( a1 <= 1 )\n    return 1;\n  memset(v5, 0, 0x800uLL);\n  v4 = sub_401373(a2[1], (unsigned int)strlen(a2[1]), v5, 2048LL);\n  return printf(\"Encrypted(%d): %sn\", v4, v5);\n}<\/code><\/pre>\n
__int64 __fastcall sub_401373(__int64 a1, int a2, __int64 a3, int a4)\n{\n  int v5; \/\/ [rsp+2Ch] [rbp-4h]\n\n  if ( a2 <= 0 )\n    return 0xFFFFFFFFLL;\n  v5 = 4 * (a2 \/ 3 + (a2 % 3 != 0));\n  if ( v5 > a4 )\n    return 0xFFFFFFFFLL;\n  sub_400FCE(a1, (unsigned int)a2, a3);\n  return (unsigned int)v5;\n}<\/code><\/pre>\n
unsigned __int64 __fastcall sub_400FCE(__int64 a1, signed int a2, __int64 a3)\n{\n  unsigned __int64 result; \/\/ rax\n  unsigned __int64 v5; \/\/ [rsp+28h] [rbp-68h]\n  unsigned __int64 v6; \/\/ [rsp+28h] [rbp-68h]\n  unsigned __int64 v7; \/\/ [rsp+28h] [rbp-68h]\n  int v8; \/\/ [rsp+30h] [rbp-60h]\n  int i; \/\/ [rsp+34h] [rbp-5Ch]\n  int v10; \/\/ [rsp+3Ch] [rbp-54h]\n  int v11[18]; \/\/ [rsp+40h] [rbp-50h] BYREF\n  unsigned __int64 v12; \/\/ [rsp+88h] [rbp-8h]\n\n  v12 = __readfsqword(0x28u);\n  qmemcpy(v11, \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\/\", 64);\n  sub_400F3A(v11, 64LL, a1, a1, (unsigned int)a2);\n  v10 = a2 % 3;\n  v8 = 0;\n  for ( i = 0; ; ++i )\n  {\n    result = (unsigned int)v8;\n    if ( v8 >= a2 \/ 3 )\n      break;\n    v5 = *(unsigned __int8 *)(a1 + 3 * v8 + 2LL) | ((*(unsigned __int8 *)(a1 + 3 * v8 + 1LL) | ((unsigned __int64)*(unsigned __int8 *)(a1 + 3 * v8) << 8)) << 8);\n    *(_BYTE *)(a3 + 4 * i) = *((_BYTE *)v11 + ((v5 >> 18) & 0x3F));\n    *(_BYTE *)(a3 + 4 * i + 1LL) = *((_BYTE *)v11 + ((v5 >> 12) & 0x3F));\n    *(_BYTE *)(a3 + 4 * i + 2LL) = *((_BYTE *)v11 + ((v5 >> 6) & 0x3F));\n    *(_BYTE *)(a3 + 4 * i + 3LL) = *((_BYTE *)v11 + (v5 & 0x3F));\n    ++v8;\n  }\n  if ( v10 > 0 )\n  {\n    if ( v10 == 1 )\n    {\n      v6 = (unsigned __int64)*(unsigned __int8 *)(a1 + 3 * v8) << 16;\n      *(_BYTE *)(a3 + 4 * i) = *((_BYTE *)v11 + ((v6 >> 18) & 0x3F));\n      *(_BYTE *)(a3 + 4 * i + 1LL) = *((_BYTE *)v11 + ((v6 >> 12) & 0x3F));\n      *(_BYTE *)(a3 + 4 * i + 2LL) = 61;\n      result = a3 + 4 * i + 3LL;\n      *(_BYTE *)result = 61;\n    }\n    if ( v10 == 2 )\n    {\n      v7 = (*(unsigned __int8 *)(a1 + 3 * v8 + 1LL) | ((unsigned __int64)*(unsigned __int8 *)(a1 + 3 * v8) << 8)) << 8;\n      *(_BYTE *)(a3 + 4 * i) = *((_BYTE *)v11 + ((v7 >> 18) & 0x3F));\n      *(_BYTE *)(a3 + 4 * i + 1LL) = *((_BYTE *)v11 + ((v7 >> 12) & 0x3F));\n      *(_BYTE *)(a3 + 4 * i + 2LL) = *((_BYTE *)v11 + ((v7 >> 6) & 0x3F));\n      result = a3 + 4 * i + 3LL;\n      *(_BYTE *)result = 61;\n    }\n  }\n  return result;\n}<\/code><\/pre>\n
\u5012\u5165 kali \u4e2d\u786e\u8ba4\u5df2\u7ecf\u5b89\u88c5 python<\/p>\n
python3 --version<\/code><\/p>\n
\u8def\u5f84\u4e0b\u9700\u8981\u6709 python \u4ee3\u7801\u6587\u4ef6\u548c cryptooo \u53ef\u6267\u884c\u6587\u4ef6<\/p>\n
\"1749461144595-c0d7c304-5b3a-4d1a-936c-ef4ac88664fb.png\"<\/p>\n
\n
\u66f4\u65b0: 2025-06-09 17:25:59
\n\u539f\u6587: https:\/\/www.yuque.com\/yuhui.net\/network\/clgvqe5va6t6uapx<\/a><\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"
\u9057\u4e16\u72ec\u7acb \u9898\u76ee $ .\/cryptooo SECCON{ } Encrypted(44): waUqjjDGnYxVyvUOLN8HquEO0J5Dqkh\/zr\/3KXJCEnw= what’s the key? \u4e0b\u8f7d\u9644\u4ef6\u5f97\u5230 \u7531\u6267\u884c\u9644\u4ef6\u5185\u7684\u6587\u4ef6 \u5229\u7528\u4fe1\u606f\u89e3\u5bc6 int __fastcall main(int a1, char **a2, char **a3) { unsigned int v4;  […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[114,113,118],"tags":[28,57,112],"class_list":["post-697","post","type-post","status-publish","format-standard","hentry","category-crypto","category-ctf","category-kanxuectf","tag-kali","tag-python","tag-crypto"],"_links":{"self":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts\/697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/comments?post=697"}],"version-history":[{"count":0,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/posts\/697\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/media?parent=697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/categories?post=697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.youvii.site\/index.php\/wp-json\/wp\/v2\/tags?post=697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}