<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Lsb隐写 on 知识带给我们自由</title>
    <link>https://yuexuan521.github.io/zh/tags/lsb%E9%9A%90%E5%86%99/</link>
    <description>Recent content in Lsb隐写 on 知识带给我们自由</description>
    <image>
      <title>知识带给我们自由</title>
      <url>https://yuexuan521.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E</url>
      <link>https://yuexuan521.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E</link>
    </image>
    <generator>Hugo -- 0.160.1</generator>
    <language>en-us</language>
    <copyright>See this site&amp;rsquo;s source code here, licensed under GPLv3 ·</copyright>
    <lastBuildDate>Sat, 21 Sep 2024 20:16:14 +0000</lastBuildDate>
    <atom:link href="https://yuexuan521.github.io/zh/tags/lsb%E9%9A%90%E5%86%99/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>BUUCTF 弱口令 1</title>
      <link>https://yuexuan521.github.io/zh/posts/buuctf-%E5%BC%B1%E5%8F%A3%E4%BB%A4-1/</link>
      <pubDate>Sat, 21 Sep 2024 20:16:14 +0000</pubDate>
      <guid>https://yuexuan521.github.io/zh/posts/buuctf-%E5%BC%B1%E5%8F%A3%E4%BB%A4-1/</guid>
      <description>&lt;p&gt;
&lt;div class=&#34;post-img-view&#34;&gt;
    &lt;a data-fancybox=&#34;gallery&#34; href=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192951217.png&#34;&gt;
        &lt;img src=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192951217.png&#34; 
             alt=&#34;&#34; 
              
             loading=&#34;lazy&#34;
        /&gt;
    &lt;/a&gt;
&lt;/div&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;BUUCTF: &lt;a href=&#34;https://buuoj.cn/challenges&#34;target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;https://buuoj.cn/challenges&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;hr&gt;
&lt;p&gt;相关阅读
&lt;a href=&#34;https://ctf-wiki.org/&#34;target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;CTF Wiki&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;
&lt;div class=&#34;post-img-view&#34;&gt;
    &lt;a data-fancybox=&#34;gallery&#34; href=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192953740.png&#34;&gt;
        &lt;img src=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192953740.png&#34; 
             alt=&#34;在这里插入图片描述&#34; 
              
             loading=&#34;lazy&#34;
        /&gt;
    &lt;/a&gt;
&lt;/div&gt;&lt;/p&gt;
&lt;h3 id=&#34;题目描述&#34;&gt;题目描述：&lt;/h3&gt;
&lt;p&gt;老菜鸡，伤了神，别灰心，莫放弃，试试弱口令注意：得到的 flag 请包上 flag{} 提交&lt;/p&gt;
&lt;h3 id=&#34;密文&#34;&gt;密文：&lt;/h3&gt;
&lt;hr&gt;
&lt;h3 id=&#34;解题思路&#34;&gt;解题思路：&lt;/h3&gt;
&lt;p&gt;得到一个zip压缩包，但是有密码。用Bandizip打开，得到一些空格和换行符组成的信息。如下

&lt;div class=&#34;post-img-view&#34;&gt;
    &lt;a data-fancybox=&#34;gallery&#34; href=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192955869.png&#34;&gt;
        &lt;img src=&#34;https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192955869.png&#34; 
             alt=&#34;在这里插入图片描述&#34; 
              
             loading=&#34;lazy&#34;
        /&gt;
    &lt;/a&gt;
&lt;/div&gt;&lt;/p&gt;</description>
      <content:encoded><![CDATA[<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192951217.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192951217.png" 
             alt="" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p><strong>BUUCTF: <a href="https://buuoj.cn/challenges"target="_blank" rel="noopener noreferrer">https://buuoj.cn/challenges</a></strong></p>
<hr>
<p>相关阅读
<a href="https://ctf-wiki.org/"target="_blank" rel="noopener noreferrer">CTF Wiki</a></p>
<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192953740.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192953740.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<h3 id="题目描述">题目描述：</h3>
<p>老菜鸡，伤了神，别灰心，莫放弃，试试弱口令注意：得到的 flag 请包上 flag{} 提交</p>
<h3 id="密文">密文：</h3>
<hr>
<h3 id="解题思路">解题思路：</h3>
<p>得到一个zip压缩包，但是有密码。用Bandizip打开，得到一些空格和换行符组成的信息。如下

<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192955869.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192955869.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<div class="highlight"><div class="chroma">
<table class="lntable"><tr><td class="lntd">
<pre tabindex="0" class="chroma"><code><span class="lnt"> 1
</span><span class="lnt"> 2
</span><span class="lnt"> 3
</span><span class="lnt"> 4
</span><span class="lnt"> 5
</span><span class="lnt"> 6
</span><span class="lnt"> 7
</span><span class="lnt"> 8
</span><span class="lnt"> 9
</span><span class="lnt">10
</span></code></pre></td>
<td class="lntd">
<pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">    
</span></span><span class="line"><span class="cl"> 
</span></span><span class="line"><span class="cl"> 	  
</span></span><span class="line"><span class="cl"> 	  
</span></span><span class="line"><span class="cl">					
</span></span><span class="line"><span class="cl">  	 
</span></span><span class="line"><span class="cl">			
</span></span><span class="line"><span class="cl"> 	 
</span></span><span class="line"><span class="cl">  	
</span></span><span class="line"><span class="cl">		
</span></span></code></pre></td></tr></table>
</div>
</div><p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192957671.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192957671.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>使用SublimeText打开，选中可以更清楚地看到，看着很像摩斯密码，实际上就是。</p>
<p>
<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192958859.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228192958859.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>用记事本手抄一下</p>
<div class="highlight"><div class="chroma">
<table class="lntable"><tr><td class="lntd">
<pre tabindex="0" class="chroma"><code><span class="lnt">1
</span></code></pre></td>
<td class="lntd">
<pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">.... . .-.. .-.. ----- ..-. --- .-. ..- --
</span></span></code></pre></td></tr></table>
</div>
</div><p>使用在线工具解码，得到zip压缩包的密码</p>
<p><a href="https://www.lddgo.net/encrypt/morse"target="_blank" rel="noopener noreferrer">在线摩斯密码翻译器</a>

<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228193000203.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228193000203.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>解压缩zip压缩包，得到一张名为“女神.png”的图片

<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228193001786.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228193001786.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>尝试了各种方法均无效，最后使用lsb隐写提取出flag，使用密钥123456，对应题目“弱口令”。（虽说是lsb隐写，但用Stegsolve没有发现）

<div class="post-img-view">
    <a data-fancybox="gallery" href="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228193004055.png">
        <img src="https://cdn.jsdelivr.net/gh/yuexuan521/image/20251228193004055.png" 
             alt="在这里插入图片描述" 
              
             loading="lazy"
        />
    </a>
</div></p>
<p>这里使用工具cloacked-pixel，python2环境配置比较麻烦。 <a href="https://github.com/livz/cloacked-pixel"target="_blank" rel="noopener noreferrer">https://github.com/livz/cloacked-pixel</a></p>
<h3 id="flag">flag：</h3>
<div class="highlight"><div class="chroma">
<table class="lntable"><tr><td class="lntd">
<pre tabindex="0" class="chroma"><code><span class="lnt">1
</span></code></pre></td>
<td class="lntd">
<pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">flag<span class="o">{</span>jsy09-wytg5-wius8<span class="o">}</span>
</span></span></code></pre></td></tr></table>
</div>
</div>]]></content:encoded>
    </item>
  </channel>
</rss>
