XYCTF 2025 WP

MISC

签个到吧

题目给了一堆代码

>+++++++++++++++++[<++++++>-+-+-+-]<[-]>++++++++++++[<+++++++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++[<+++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++[<+++>-+-+-+-]<[-]>+++++++++++++++++[<+++>-+-+-+-]<[-]>++++++++++++[<+++++++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>++++++++[<++++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>+++++++++++++++++++[<+++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++[<++++>-+-+-+-]<[-]>++++++++[<++++++>-+-+-+-]<[-]>+++++++++++++++++++[<+++++>-+-+-+-]<[-]>+++++++++++[<++++++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>++++++++++++[<+++++++>-+-+-+-]<[-]>++++++++++[<+++++++>-+-+-+-]<[-]>+++++++++++++++++++[<+++++>-+-+-+-]<[-]>++++++++++[<+++++>-+-+-+-]<[-]>++++++++[<++++++>-+-+-+-]<[-]>++++++++++[<+++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-+-+-+-]<[-]>+++++++++++++++++++[<+++++>-+-+-+-]<[-]>+++++++++++++++++++++++[<+++>-+-+-+-]<[-]>+++++++++++[<++++++++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++++++++++++++++++++++++++[<++>-+-+-+-]<[-]>++++++++[<++++++>-+-+-+-]<[-]>+++++++++++[<+++++>-+-+-+-]<[-]>+++++++++++++++++++[<+++++>-+-+-+-]<[-]>+++++++[<+++++++>-+-+-+-]<[-]>+++++++++++++++++++++++++++++[<++++>-+-+-+-]<[-]>+++++++++++[<+++>-+-+-+-]<[-]>+++++++++++++++++++++++++[<+++++>-+-+-+-]<[-]

很明显的brainfuck,但是运行后发现不行,看了下代码发现没有.

这里让ai修复一下

>+++++++++++++++++[<++++++>-]
>++++++++++++[<+++++++++>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>+++++++++++++++++++++++++++++++++++++++++[<+++>-]
>+++++++++++++++++++++++++++++[<+++>-]
>+++++++++++++++++[<+++>-]
>++++++++++++[<+++++++++>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>++++++++[<++++++>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>+++++++++++++++++++[<+++++>-]
>+++++++++++++++++++++++++++++[<++++>-]
>++++++++[<++++++>-]
>+++++++++++++++++++[<+++++>-]
>+++++++++++[<++++++++>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>++++++++++++[<+++++++>-]
>++++++++++[<+++++++>-]
>+++++++++++++++++++[<+++++>-]
>++++++++++[<+++++>-]
>++++++++[<++++++>-]
>++++++++++[<+++++>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++[<+>-]
>+++++++++++++++++++[<+++++>-]
>+++++++++++++++++++++++[<+++>-]
>+++++++++++[<++++++++++>-]
>+++++++++++++++++++++++++++++++++++++++++++++++++++++[<++>-]
>++++++++[<++++++>-]
>+++++++++++[<+++++>-]
>+++++++++++++++++++[<+++++>-]
>+++++++[<+++++++>-]
>+++++++++++++++++++++++++++++[<++++>-]
>+++++++++++[<+++>-]
>+++++++++++++++++++++++++[<+++++>-]
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<[.>]

image-20250610172441498

image-20250610172811843

官方解法:

https://ashupk.github.io/Brainfuck/brainfuck-visualizer-master/index.html#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

读寄存器1的极大值

得到flag{W3lC0me_t0_XYCTF_2025_Enj07_1t!}

曼波曼波曼波

拿到一个图片一个文本文件

图片里面二维码扫出来是假flag,文本里面一大堆东西,首先怀疑与base编码有关

看到等号,猜测是反转base64

image-20250610191334037

得到一张图片,binwalk提取出压缩包

image-20250610191404920

xixi.zip的密码是secret.txt描述的XYCTF2025

得到另一张EASY图片

看了下easy.png,好像有lsb隐写,但是没找到什么

那就查一下解压出来的EASY.png有没有lsb隐写,好像也没找到什么

猜测双图盲水印

image-20250610192315485

得到flag

XYCTF{easy_yin_xie_dfbfuj877}

会飞的雷克萨斯

image-20250610184002934

很简单的图寻

flag{四川内江市资中县水南镇春岚北路中铁城市中心内}

XGCTF

按照题目意思,先找到LamentXU的blog

然后从总结里面发现题目,然后找到dragonkeep的blog

之后找到ciscn那个原wp,在源码里面可以找到base编码(环境掉了sad)

解密后得flag

flag{1t_I3_t3E_s@Me_ChAl1eNge_aT_a1L_P1e@se_fOrg1ve_Me}

喜欢就说出来

流量包用NetA工具提取,得到一张图片

image-20250610193900973

用tweakpng查看发现这个图片有点问题,需要修复一下

image-20250610194348778

一个一个试试吧就

image-20250610194334389

得到前半段flag

flag{WatAshl_W@_anA

那另一个呢?看到两个IHDR头了吗,这应该是两张图片

手动还原第二张

image-20250610194827597

根据提示,直接将第二张图片放到stegsolve取lsb信息

image-20250610195008939

得到第二段flag

ta_G@_t0kubetsu_Suki!!!}

flag{WatAshl_W@_anAta_G@_t0kubetsu_Suki!!!}