[SWPUCTF 2022 新生赛]js_sign
题目来源:nssctf
题目类型:web
涉及考点:JS分析
1. 题目给了一个传入口,不管传入什么都回显 ‘fuck off ’
![](https://images.cnblogs.com/cnblogs_com/blogs/729425/galleries/2326707/o_230731132826_image-20230731211317195.png)
![](https://images.cnblogs.com/cnblogs_com/blogs/729425/galleries/2326707/o_230731132826_image-20230731211326490.png)
- 查看源代码:
![](https://images.cnblogs.com/cnblogs_com/blogs/729425/galleries/2326707/o_230731132826_image-20230731211428209.png)
- 看到一个base64编码,先解码看看:
![](https://images.cnblogs.com/cnblogs_com/blogs/729425/galleries/2326707/o_230731132826_image-20230731211527442.png)
2. 搜了下发现tapcode是个编码方式,于是对flag进行tapcode解码
![](https://images.cnblogs.com/cnblogs_com/blogs/729425/galleries/2326707/o_230731132826_image-20230731211936290.png)
把它构造成flag的形式即可:
NSSCTF{youfindflagbytapcode}
日期:2023.7.31
作者:y0Zero
标签:题目,SWPUCTF,sign,flag,2022,js From: https://www.cnblogs.com/bkofyZ/p/17594550.html