{"id":590,"date":"2016-05-09T16:26:54","date_gmt":"2016-05-09T08:26:54","guid":{"rendered":"https:\/\/laszlo.cs.thu.edu.tw\/?p=590"},"modified":"2021-05-04T04:32:52","modified_gmt":"2021-05-04T04:32:52","slug":"asis-ctf2016-odrrere","status":"publish","type":"post","link":"https:\/\/blog.laszlo.tw\/?p=590","title":{"rendered":"ASIS CTF 2016 Odrrere"},"content":{"rendered":"<p>Odrrere\u9019\u984c\u62ff\u5230\u7684\u539f\u5716\u5982\u4e0b<\/p>\n<p><!--more--><\/p>\n<p><a href=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/odrrere-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-633\" src=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/odrrere-2.png\" alt=\"odrrere\" width=\"665\" height=\"665\"><\/a><\/p>\n<hr>\n<p>\u53c3\u8003\u5148\u524dCTF <a href=\"https:\/\/github.com\/ctfs\/write-ups-2015\/tree\/master\/plaidctf-2015\/forensics\/png-uncorrupt\">png-uncorrupt<\/a> writeup\u4f86\u4e86\u89e3png\u7684\u7d50\u69cb<\/p>\n<p>PNG\u6703\u7531\u4e0b\u5716\u7684\u683c\u5f0f\u7d44\u6210<\/p>\n<p><a href=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-608\" src=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz.jpg\" alt=\"zzz\" width=\"513\" height=\"181\"><\/a><\/p>\n<p>\u5206\u70ba\u56db\u500b\u90e8\u5206DATA\u9577\u5ea6(4Bytes)\u3001\u8cc7\u6599\u985e\u578b(4Bytes)\u3001DATA\u3001Checksum(4Bytes)<\/p>\n<p>\u6216\u662fIEND\u7684\u5f62\u5f0f\u53ea\u6709\u4e09\u500b\u90e8\u5206<\/p>\n<p>\u4f8b\u5982\u958b\u982d0000 00b8\u70ba\u8cc7\u6599\u9577\u5ea6184 Bytes<\/p>\n<p>4944 4154 \u662fIDAT &#8211; Chunk Type<\/p>\n<p>\u5f8c\u9762\u4e00\u5927\u4e32\u5247\u662fDATA<\/p>\n<p>\u6700\u5f8c4 Bytes 810e 463b\u70baChecksum<\/p>\n<p><a href=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-620\" src=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-1.jpg\" alt=\"zzz\" width=\"474\" height=\"210\"><\/a><\/p>\n<h2>\u89e3\u984c\u904e\u7a0b<\/h2>\n<p>\u525b\u62ff\u5230\u5716\u7247\u7b2c\u4e00\u773c\u660e\u986f\u6b64\u984c\u662f\u8981\u4fee\u5fa9PNG<\/p>\n<p>\u57fa\u65bc\u5148\u524d\u7684writeup \u5148\u6aa2\u67e5CRC\u662f\u5426\u6709\u932f\u8aa4<\/p>\n<p>\u6b64\u90e8\u5206\u53ef\u4ee5\u7528<a href=\"http:\/\/schaik.com\/png\/pngcsum.html\">PNGchecksum<\/a>\u5de5\u5177\u6aa2\u67e5<\/p>\n<p>\u4f46\u662f\u4ecd\u7136\u6c92\u7570\u72c0<\/p>\n<p>\u56e0\u6b64\u8dd1pngcheck -vvf odrrere.png\u4f86\u6aa2\u67e5\u662f\u5426\u6709\u8cc7\u6599\u932f\u8aa4<\/p>\n<p>\u767c\u73fe\u5728\u7b2c\u4e8c\u500bIDAT\u7684\u90e8\u5206\u6709error<\/p>\n<p><a href=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/xxxx.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-614\" src=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/xxxx.jpg\" alt=\"xxxx\" width=\"513\" height=\"225\"><\/a><\/p>\n<p>\u56e0\u6b64\u904e\u7a0b\u4e2d\u4e5f\u731c\u6e2cError\u662f\u5426DATA\u8d85\u51falength\u4f46\u4e5f\u4e0d\u662f<\/p>\n<p>\u5f8c\u4f86\u4fee\u4fee\u88dc\u88dc\u67d0\u4e9bByte\u62ff\u5230\u4e86\u4e0b\u9762\u7834\u788e\u7684\u5716<\/p>\n<p><a href=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/odrrere-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-622\" src=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/odrrere-1.png\" alt=\"odrrere\" width=\"665\" height=\"665\"><\/a><\/p>\n<p>\u5176\u5be6\u7576\u4e0b\u6c92\u6709\u60f3\u5230\u662f\u5716\u7247IDAT\u7684\u9806\u5e8f\u932f\u8aa4\u6240\u4ee5\u5148\u62fc\u62fc\u6e4a\u6e4a\u88dc\u4e86\u8d77\u4f86<\/p>\n<p>\u66f4\u597d\u7684\u89e3\u6cd5\u53ef\u4ee5\u53c3\u8003<a href=\"https:\/\/blog.nfrost.me\/2016\/05\/08\/asis-ctf-quals-2016-odrrere.html\">asis-ctf-quals-2016-odrrere<\/a><\/p>\n<p>\u5c0713\u500bIDAT\u7528<a href=\"http:\/\/www.hexedit.com\/\">hexedit<\/a>\u4f9d\u7167\u6b63\u78ba\u9806\u5e8f0,12,8,4,9,10,6,7,3,5,2,11,1\u64fa\u653e\u5f8cFlag\u986f\u800c\u6613\u898b<\/p>\n<p><a href=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/odrrere.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-604\" src=\"https:\/\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/odrrere.png\" alt=\"odrrere\" width=\"665\" height=\"665\"><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Odrrere\u9019\u984c\u62ff\u5230\u7684\u539f\u5716\u5982\u4e0b<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[12],"tags":[66,65,68,67,69],"class_list":["post-590","post","type-post","status-publish","format-standard","hentry","category-ctf","tag-asis-ctf","tag-ctf","tag-idat","tag-odrrere","tag-png","entry"],"_links":{"self":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts\/590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=590"}],"version-history":[{"count":34,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts\/590\/revisions"}],"predecessor-version":[{"id":1200,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts\/590\/revisions\/1200"}],"wp:attachment":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}