摸鱼大作战闯关

摸鱼大作战闯关_第1张图片

摸鱼大作战:
https://p.hancel.org/

Stage 1

stage1改成stage2

Stage 2

查看源代码

Stage 3

查看源代码

Stage 4

F12

摸鱼大作战闯关_第2张图片

Stage 5

摸鱼大作战闯关_第3张图片

this is linux
把url的mac换成linux

Stage 6

看源码

 摸鱼大作战闯关_第4张图片

lang/加上ruby.php
后缀会自动变成html

Stage 7

密码是here

Stage 8

英语是真的烂

& 
实体化字符是空格的意思
空格的英文是space

Stage 9

凯撒密码

 摸鱼大作战闯关_第5张图片

Stage 10

十六进制

251636973——————————》》effaced
十进制转十六进制

Stage 11

base64解密

VGhlIHBhc3N3b3JkIGlzIHN0b3JhZ2Uu
||
|| (base64)
||
storage

Stage 12

39°54'32.3"N 116°23'51.1"E
经纬度坐标为tiananmen

Stage 13

找个莫斯密码解码解得 HELLO.MORSE

Stage 14

密码是4
猜出来的

Stage 15

摸鱼大作战闯关_第6张图片

 创建post请求输入空密码

摸鱼大作战闯关_第7张图片

Stage 16

Stage 17

Stage 18

同上

Stage 19

c74d97b01eae257e44aa9d5bade97baf    16

70efdf2ec9b086079795                

6f4922f45568161a8cdf4ad2299f6d23    18

由A得B

1f0e3dad99908345f7439f8ffabdffc4    19

Stage 20

开着F12进入页面,不然看不到             
           var a,b,c,d,e,f,g;
                a = 6.18;
                b = a * 2;
                c = a + b;
                d = c / b + a;
                e = c - d * b + a;
                f = e + d /c - b * a;
                g = f * e - d + c * b + a;
                a = g * g;
                a = Math.floor(a);
a=110037296

Stage 21

 eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,102,111,114,109,115,91,48,93,46,111,110,115,117,98,109,105,116,32,61,32,102,117,110,99,116,105,111,110,40,41,123,10,32,32,32,32,32,32,32,32,105,102,40,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,66,121,73,100,40,39,112,97,115,115,119,100,39,41,46,118,97,108,117,101,32,61,61,32,39,118,117,101,106,115,39,41,123,10,32,32,32,32,32,32,32,32,32,32,32,32,119,105,110,100,111,119,46,108,111,99,97,116,105,111,110,46,104,114,101,102,32,61,32,39,118,117,101,106,115,46,104,116,109,108,39,59,10,32,32,32,32,32,32,32,32,125,101,108,115,101,123,10,32,32,32,32,32,32,32,32,32,32,32,32,97,108,101,114,116,40,39,80,97,115,115,119,111,114,100,32,119,97,115,32,119,114,111,110,103,33,39,41,59,10,32,32,32,32,32,32,32,32,125,10,32,32,32,32,32,32,32,32,114,101,116,117,114,110,32,102,97,108,115,101,59,10,32,32,32,32,125));

执行得到vuejs.html

Stage 22

F12网络里看请求头
set-cookie
	the password of stage 22 is =21fbd4a1acbdaf6f37e3eb01aebcf181ddcae1f8; Path=/; Expires=Wed, 13 Apr 2022 07:14:53 GMT; HttpOnly

Stage 23

F12网络中conmmon.js响应底部

Stage 24

F12网络http.html的头部

 

Stage 25

第n个数字对应第n个字母
组成flower

Stage 26

图片下载下来,改成rar压缩包,解压

摸鱼大作战闯关_第8张图片

 Stage 27

图片下载下来,拉到记事本

Stage 28

说图片上有字,我是没看到
下一关:
truth

Stage 29

下载图片拖入记事本里头写着
提示三: /9j/(中略)/9k=
加上[data:image/jpg;base64,]的前缀在浏览器里打开, 图片写着mistake

没搞出来

Stage 30

你可能感兴趣的:(CTF,安全)