<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>ELF on 知识带给我们自由</title>
    <link>https://yuexuan521.github.io/zh/tags/elf/</link>
    <description>Recent content in ELF on 知识带给我们自由</description>
    <image>
      <title>知识带给我们自由</title>
      <url>https://yuexuan521.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E</url>
      <link>https://yuexuan521.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E</link>
    </image>
    <generator>Hugo -- 0.160.1</generator>
    <language>en-us</language>
    <copyright>See this site&amp;rsquo;s source code here, licensed under GPLv3 ·</copyright>
    <lastBuildDate>Mon, 23 Jun 2025 08:30:00 +0000</lastBuildDate>
    <atom:link href="https://yuexuan521.github.io/zh/tags/elf/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>BUUCTF [UTCTF2020]File Carving 1</title>
      <link>https://yuexuan521.github.io/zh/posts/buuctf-utctf2020file-carving-1/</link>
      <pubDate>Mon, 23 Jun 2025 08:30:00 +0000</pubDate>
      <guid>https://yuexuan521.github.io/zh/posts/buuctf-utctf2020file-carving-1/</guid>
      <description>&lt;p&gt;
&lt;div class=&#34;post-img-view&#34;&gt;
    &lt;a data-fancybox=&#34;gallery&#34; href=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192056488.png&#34;&gt;
        &lt;img src=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192056488.png&#34; 
             alt=&#34;&#34; 
              
             loading=&#34;lazy&#34;
        /&gt;
    &lt;/a&gt;
&lt;/div&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;BUUCTF: &lt;a href=&#34;https://buuoj.cn/challenges&#34;target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;https://buuoj.cn/challenges&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;hr&gt;
&lt;p&gt;相关阅读
&lt;a href=&#34;https://ctf-wiki.org/&#34;target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;CTF Wiki&lt;/a&gt;
&lt;a href=&#34;https://blog.csdn.net/mochu7777777/article/details/109855105&#34;target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;BUUCTF：[UTCTF2020]File Carving&lt;/a&gt;
&lt;a href=&#34;https://blog.csdn.net/m0_62107966/article/details/126806622&#34;target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;BUUCTF之misc [UTCTF2020]File Carving&lt;/a&gt;&lt;/p&gt;</description>
      <content:encoded><![CDATA[<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192056488.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192056488.png" 
             alt="" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p><strong>BUUCTF: <a href="https://buuoj.cn/challenges"target="_blank" rel="noopener noreferrer">https://buuoj.cn/challenges</a></strong></p>
<hr>
<p>相关阅读
<a href="https://ctf-wiki.org/"target="_blank" rel="noopener noreferrer">CTF Wiki</a>
<a href="https://blog.csdn.net/mochu7777777/article/details/109855105"target="_blank" rel="noopener noreferrer">BUUCTF：[UTCTF2020]File Carving</a>
<a href="https://blog.csdn.net/m0_62107966/article/details/126806622"target="_blank" rel="noopener noreferrer">BUUCTF之misc [UTCTF2020]File Carving</a></p>
<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192058540.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192058540.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<h3 id="题目描述">题目描述：</h3>
<p>得到的 flag 请包上 flag{} 提交。</p>
<h3 id="密文">密文：</h3>
<p>保存附件，一张attachment.png图片</p>
<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192059647.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192059647.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<hr>
<h3 id="解题思路">解题思路：</h3>
<p>1、根据题目，似乎和文件有关，先在010Editor看一下，然后发现ZIP压缩包。</p>
<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192101734.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192101734.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>另存为zip文件，解压得到hidden_binary文件。</p>
<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192104292.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192104292.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>2、用kali中的file命令确定hidden_binary的文件格式为ELF文件，在kali中执行得到flag： <code>utflag{2fbe9adc2ad89c71da48cabe90a121c0}</code> 。</p>
<blockquote>
<p><code>hidden_binary</code> 是一个 ELF（Executable and Linkable Format）格式的 64 位可执行文件。ELF 是 Linux 和 Unix 系统中常用的可执行文件格式。</p>
</blockquote>
<div class="highlight"><div class="chroma">
<table class="lntable"><tr><td class="lntd">
<pre tabindex="0" class="chroma"><code><span class="lnt">1
</span><span class="lnt">2
</span></code></pre></td>
<td class="lntd">
<pre tabindex="0" class="chroma"><code class="language-python" data-lang="python"><span class="line"><span class="cl"><span class="n">file</span> <span class="n">hidden_binary</span> 
</span></span><span class="line"><span class="cl"><span class="o">./</span><span class="n">hidden_binary</span>  
</span></span></code></pre></td></tr></table>
</div>
</div><p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192105460.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192105460.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192107291.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192107291.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>另一种方法：使用 <code>strings</code> 命令来查看文件中包含的所有可打印字符串。</p>
<div class="highlight"><div class="chroma">
<table class="lntable"><tr><td class="lntd">
<pre tabindex="0" class="chroma"><code><span class="lnt">1
</span><span class="lnt">2
</span></code></pre></td>
<td class="lntd">
<pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">strings hidden_binary <span class="p">|</span> grep <span class="s2">&#34;flag&#34;</span>
</span></span><span class="line"><span class="cl">strings hidden_binary 
</span></span></code></pre></td></tr></table>
</div>
</div><div class="highlight"><div class="chroma">
<table class="lntable"><tr><td class="lntd">
<pre tabindex="0" class="chroma"><code><span class="lnt">1
</span><span class="lnt">2
</span><span class="lnt">3
</span><span class="lnt">4
</span><span class="lnt">5
</span></code></pre></td>
<td class="lntd">
<pre tabindex="0" class="chroma"><code class="language-python" data-lang="python"><span class="line"><span class="cl"><span class="n">utflag</span><span class="p">{</span><span class="mi">2</span><span class="n">H</span>
</span></span><span class="line"><span class="cl"><span class="n">fbe9adc2H</span>
</span></span><span class="line"><span class="cl"><span class="n">ad89c71dH</span>
</span></span><span class="line"><span class="cl"><span class="n">a48cabe9H</span>
</span></span><span class="line"><span class="cl"><span class="mi">0</span><span class="n">a121c0</span><span class="p">}</span><span class="n">H</span>
</span></span></code></pre></td></tr></table>
</div>
</div><p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192108873.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192108873.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>另一种方法：直接在010 Editor中搜索flag，找到后再进行处理。

<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192110924.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192110924.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<h3 id="flag">flag：</h3>
<div class="highlight"><div class="chroma">
<table class="lntable"><tr><td class="lntd">
<pre tabindex="0" class="chroma"><code><span class="lnt">1
</span></code></pre></td>
<td class="lntd">
<pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">flag<span class="o">{</span>2fbe9adc2ad89c71da48cabe90a121c0<span class="o">}</span>
</span></span></code></pre></td></tr></table>
</div>
</div>]]></content:encoded>
    </item>
  </channel>
</rss>
