标签:HTTP jpg flag 流量 day13 password png
一、[第五空间 2021]alpha10
1.foremost分离,得到png和jpg,两张图片一样,猜测是盲水印隐写,得到一张类似于flag的图片
python bwmforpy3.py decode 1.jpg 2.png result.png
![image](/i/l/?n=23&i=blog/2629165/202307/2629165-20230725162353988-370627386.png)
2.颜色异或转换一下,得到flag
![image](/i/l/?n=23&i=blog/2629165/202307/2629165-20230725162640182-1909217567.png)
二、messy_traffic
1.打开流量过滤HTTP流,发现了文件上传,直接导出HTTP对象文件
![image](/i/l/?n=23&i=blog/2629165/202307/2629165-20230725172718690-843001035.png)
2.将uploadfile.php中多余的字节删除,修改后缀,得到flag.zip,打开发现需要密码
![image](/i/l/?n=23&i=blog/2629165/202307/2629165-20230725172832477-259395021.png)
3.回到流量中找与password相关的内容,直接先找上传zip的流量之前的流量,发现了cat passwd.txt的操作,猜测回显的内容就是password的内容
![image](/i/l/?n=23&i=blog/2629165/202307/2629165-20230725173351724-1664593951.png)
4.使用SignUpForHUBUMars@1405解压,得到flag
![image](/i/l/?n=23&i=blog/2629165/202307/2629165-20230725173653765-1696250990.png)
标签:HTTP,
jpg,
flag,
流量,
day13,
password,
png
From: https://www.cnblogs.com/120211P/p/17580314.html