攻防世界MISC_Ditf

环境

题目下载，图片宽高，流量分析

flag{Oz_4nd_Hir0_lov3_For3ver}

wp

打开发现长和宽不对，修改完发现字符串StRe1izia
image

同时发现文件分离出一个压缩包，尝试这个字符串密码，拿到一个流量包，查看http流量，找到可疑请求，发现存在

HTTP/1.1 200 OK
Date: Sun, 01 Jul 2018 09:46:19 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Sun, 01 Jul 2018 09:45:26 GMT
ETag: "c6-56fecf0c66879-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 177
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  </head>
  <body>
  	<img src="/kiss.png" />
  ZmxhZ3tPel80bmRfSGlyMF9sb3YzX0ZvcjN2ZXJ9 #base64解码就是flag
  </body>
</html>
posted @ 2024-11-16 17:53  ra1nbowsea  阅读(200)  评论(0)    收藏  举报