Hackergame 2024 题解

打了一年了。。。

从去年 hackergame 的时候什么都不会到现在甚至成了负责人（？

一年真短啊

签到

http://202.38.93.141:12024/?pass=false=>http://202.38.93.141:12024/?pass=true

喜欢做签到的 CTFer 你们好呀

https://www.nebuu.la/

 ls -la
 cat .flag
 env

猫咪问答（Hackergame 十周年纪念版）

 1. https://lug.ustc.edu.cn/wiki/sec/contest.html
 2. https://lug.ustc.edu.cn/news/2019/12/hackergame-2019/
 3. https://github.com/ustclug/hackergame2018-writeups/blob/master/misc/others.md
 4. https://www.usenix.org/system/files/usenixsecurity24-ma-jinrui.pdf
 5. https://github.com/torvalds/linux/commit/6e90b675cf942e50c70e8394dfb5862975c3b3b2
 6.找个 tokenizer 就好

打不开的盒

找个 3D 建模软件把视角放进去就好

每日论文太多了！

用 word/ps 打开，搜索 flag，移除上面的图片。

比大小王

 import requests as r
 from urllib.parse import quote
 from json import dumps
 from time import sleep
 s = r.Session()
 host = "202.38.93.141:12122"
 token = ""
 headers = {
     "Host": host,
     "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299",
 }
 assert s.get(f"http://{host}/?token={quote(token)}",headers=headers,allow_redirects=False).status_code == 302
 response = s.post(f"http://{host}/game",headers={
     "Host": host,
     "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299",
     "Content-Type": "application/json",
 },data="{}").json()["values"]
 
 request = {"inputs":["<>"[int(i[0]>i[1])] for i in response]}
 sleep(6)
 print(s.post(f"http://{host}/submit",headers={
     "Host": host,
     "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299",
     "Content-Type": "application/json",
 },data=dumps(request)).json())