{"id":638,"date":"2016-05-18T05:07:30","date_gmt":"2016-05-17T21:07:30","guid":{"rendered":"https:\/\/laszlo.cs.thu.edu.tw\/?p=638"},"modified":"2021-05-04T04:33:48","modified_gmt":"2021-05-04T04:33:48","slug":"tuctf-2016-escape-from-misc-2","status":"publish","type":"post","link":"https:\/\/blog.laszlo.tw\/?p=638","title":{"rendered":"TUCTF 2016 MISC"},"content":{"rendered":"<p>\u6b64\u90e8\u5206\u7d00\u9304\u4e86MISC\u6709\u8da3\u7684\u5169\u984c \u5206\u5225\u70baBeatz for dayz\u3001The nack<\/p>\n<p><!--more--><\/p>\n<h2>Beatz for dayz<\/h2>\n<p>\u6b64\u984c\u662f\u62ff\u5230\u4e00\u500b.flac\u7684\u97f3\u8a0a\u6a94 \u7528Goldwave\u958b\u555f\u5f8c\u5167\u5bb9\u5982\u4e0b<\/p>\n<p><a href=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-2.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-650 size-full\" src=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-2.jpg\" alt=\"zzz\" width=\"1373\" height=\"456\" \/><\/a><\/p>\n<p>\u5149\u807d\u5176\u5be6\u807d\u4e0d\u51fa\u4ec0\u9ebc\uff0c\u50cf\u5728\u4e82\u53eb<\/p>\n<p>\u4f46\u53ef\u4ee5\u6ce8\u610f\u5230\u5de6\u8072\u9053\u6709\u584a\u8207\u53f3\u8072\u9053\u4e0d\u540c\u7684\u5730\u65b9<\/p>\n<p>\u5c07\u5176\u653e\u5927\u4ee5\u5f8c\u53ef\u4ee5\u770b\u898b\u4e0b\u5716<\/p>\n<p><a href=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-3.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-654\" src=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-3.jpg\" alt=\"zzz\" width=\"1003\" height=\"115\" \/><\/a><\/p>\n<p>\u660e\u986f\u662f\u6469\u65af\u5bc6\u78bc<\/p>\n<p>Flag: &#8220;MORSE IS FUN&#8221;<\/p>\n<h2>The nack<\/h2>\n<p>\u6b64\u984c\u7b2c\u4e00\u5929\u525b\u62ff\u5230pcap\u7684\u6642\u5019 \u5176\u5be6\u5982\u4e0b\u5716\u770b\u4e0d\u51fa\u4ec0\u9ebc<\/p>\n<p>\u53ea\u6709\u4e00\u5806\u4e82\u4e03\u516b\u7cdf\u7684Syn<\/p>\n<p><a href=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-4.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-657\" src=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/zzz-4.jpg\" alt=\"zzz\" width=\"1081\" height=\"229\" \/><\/a><\/p>\n<p>binwalk\u6a94\u6848 \u5176\u4e2d\u6703\u767c\u73fe\u6709gif\u7684\u6a19\u982d\u4f46\u662f\u6a94\u6848\u53d6\u4e0d\u51fa\u4f86<\/p>\n<p>xxd\u6703\u767c\u73fe\u6709\u5927\u91cf\u4e0d\u660e\u7684GOAT\u6a19\u8a18\u00a0 \u4ed4\u7d30\u89c0\u5bdf\u5f8c<\/p>\n<p>GOAT. \u5171\u662f5Bytes \u800c\u6bcf\u500bGOAT.\u5f8c\u76844Bytes\u6b63\u597d\u662f\u7834\u788e\u7684gif\u6a94\u6848<\/p>\n<p>\u56e0\u6b64\u968a\u53cb\u5beb\u4e86\u4e00\u96bbcode\u91cd\u7d44\u7834\u788e\u7684\u7247\u65b7 \u4ee5hex\u9084\u539f<\/p>\n<p>\u4e26\u53d6\u5f97\u4e86\u4e0b\u9762\u9019\u5f35\u5716<\/p>\n<p><a href=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/ce6e1a612a1da91648306ace.gif\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-662\" src=\"https:\/\/blog.laszlo.tw\/wp-content\/uploads\/2016\/05\/ce6e1a612a1da91648306ace.gif\" alt=\"ce6e1a612a1da91648306ace\" width=\"590\" height=\"225\" \/><\/a><\/p>\n<p>gif\u770b\u4e00\u8f2a\u4e26\u6703\u767c\u73fe\u76f4\u5347\u6a5f\u5c3e\u90e8\u85cf\u6709flag \u5728\u7528gif\u62c6\u89e3\u53d6\u51fa\u5373\u53ef<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6b64\u90e8\u5206\u7d00\u9304\u4e86MISC\u6709\u8da3\u7684\u5169\u984c \u5206\u5225\u70baBeatz <\/p>\n<div class=\"more-link-wrapper\"><a class=\"more-link\" href=\"https:\/\/blog.laszlo.tw\/?p=638\">\u95b1\u8b80\u5168\u6587<span class=\"screen-reader-text\">TUCTF 2016 MISC<\/span><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[12],"tags":[72,65,74,71,76,73,70],"class_list":["post-638","post","type-post","status-publish","format-standard","hentry","category-ctf","tag-beatz-for-dayz","tag-ctf","tag-gif","tag-misc","tag-morse-code","tag-the-nack","tag-tuctf","entry"],"_links":{"self":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts\/638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=638"}],"version-history":[{"count":23,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts\/638\/revisions"}],"predecessor-version":[{"id":829,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=\/wp\/v2\/posts\/638\/revisions\/829"}],"wp:attachment":[{"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.laszlo.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}