johnpoint

Sat Nov  7 09:59:22 AM CST 2020
Current Score: 1500, Overall Ranking: 225 / 2415
binary: 0, general: 850, math: 300, web: 350

Thanks for the invitation, I have a vested interest: I am an old check-in question setter.

This year's question group's requirement is "Many of the students participating in our competition are beginners, our check-in questions should be clear and straightforward, allowing students to check in easily."

I completely understand, the check-in question is just giving a flag, just give it, I am the best at giving.jpg

First, write a good question introduction: "You need to click the blue 'Open/Download Question' button below, get the flag in the form of flag{...} on the opened webpage, return to this page, fill it completely in the text box below, and click the gray 'Submit' button to complete this question."

Then write a flag extractor, how many flags the contestants want, I will give how many flags, green background, red bold, eye-catching position, standard format, if this is not called giving, then what is called giving.

Click the "Open/Download Question" button, open the flag extractor, and get the first flag!

Tip: Having trouble completing the question? You can refer to the 2018 check-in question solution and the 2019 check-in question solution.

<input type="range" id="number" name="number" class="form-control" value="0" min="0" max="1" step="0.00001">

Next to the graduate cafeteria in the west area of the university, there is a concrete slab that is home to fat cats. Every sunny noon, there will be lazy cats basking in the sun on it. Many students who have finished lunch can take this opportunity to pet the cats.

But suddenly, from a certain day, an animal with a cat's head and body appeared on the concrete slab, blocking the students who came to pet the cats, testing them with riddles it had carefully prepared. Only if they answer all correctly can they pet the cats, and if they accidentally answer incorrectly, it will show its displeasure.

To restore the daily cat petting activity, enthusiastic LUG association students have placed these riddles here. If you can answer all the riddles correctly, there will be a flag as a reward.

Tip: Just as you don't need to be on-site to pet cats, you don't need to be a student of the university to solve the riddles. Having trouble solving the riddles? You can refer to the 2018 cat Q&A solution.

The road ahead is long and FLXG never gives up!

To achieve FLXG, you need exceptional wisdom, strong will, and the favor of fate. Only by proving that you possess these valuable qualities in the world of 2048 and achieving "great success" can you qualify to carry the banner of FLXG.

if (merged.value === 16384) self.won = true;

On a clear autumn morning, by the West Lake. A poor student curled up on a bench by the road, tapping on an old notebook with rough fingers, repeatedly trying to open a program on the desktop. Each time the program runs, a flag briefly appears on the black console.

At his feet lies a sign made from discarded cardboard, reading "I am cute, please give me a flag." People pass by in a hurry, and the lunch box used to hold the flag remains empty.

A poet student passed by, saw this scene, and changed the sign to: "The flag has come, but I see nothing!"

As a new student, you couldn't help but feel pity. Looking at the poet's carefree figure as he walked away, can you help this poor person fill his lunch box with flags before the poet returns in the afternoon?

As usual, your npy suddenly throws you a shopping bill: "I bought a few small items today, can you help me calculate how much I spent in total?"

You think: Here we go again, time to eat dirt. Isn't this very simple? Just drag it in the spreadsheet and it will calculate.

However, after receiving the bill, you notice that in order to feel more secure while shopping, all the amounts on this bill are written in Chinese numerals.

Note: Please keep the total amount of the bill to two decimal places and submit it in flag{}, for example, if the total amount is 123.45 yuan, you need to submit flag{123.45}

import json


def cover(i):
    for j in range(0, len(text)):
        if text[j] == i:
            return j


yuan = 0
jiao = 0
fen = 0
text = ["零", "壹", "贰", "叁", "肆", "伍", "陆", "柒", "捌", "玖", "拾"]

with open('bills.json', 'r') as f:
    a = json.load(f)
    for i in a:
        y = i["mon"].split("元")
        num = int(i["num"])
        for j in y:
            if "角" in j:
                jj = j.split("角")
                jiao += cover(jj[0])*num
                if len(jj) > 1 and "分" in jj[1]:
                    fen += cover(jj[1].split("分")[0])*num
                continue
            if "分" in j:
                fen += cover(j.split("分")[0].replace("零", ""))*num
                continue
            for i in range(0, len(j)):
                if j[i] == "整":
                    continue
                if j[i] == "佰":
                    continue
                if i+1 < len(j):
                    if j[i+1] == "拾":
                        yuan += cover(j[i])*10*num
                    elif j[i+1] == "佰":
                        yuan += cover(j[i])*100*num
                else:
                    if j[i] != "拾" and j[i] != "佰":
                        yuan += cover(j[i])*num
                if i-1 < 0 and j[i] == "拾":
                    yuan += 10*num

jiao += int(fen/10)
fen = fen % 10*0.01
yuan += int(jiao/10)
jiao = jiao % 10*0.1

print(yuan+jiao+fen)
print("y", yuan)
print("j", jiao)
print("f", fen)

Little P discovered this image while doing a Fourier optics experiment in the lab computer's simulation program:

Little P, who does not have a solid mathematical foundation, does not know what kind of imaging would look like this: or perhaps it is nothing at all, after all, this is just a simulation... But it can be confirmed that there is indeed some information hidden in these seemingly strange patterns, perhaps a treasure map to an underground gold mine.

Do you know the Game of Life (Conway's Game of Life)?

Your task is to reproduce the effect of a butterfly flapping its wings in the world of the Game of Life, causing a storm across the ocean.

By changing the upper left 15x15 area, after the game evolves for 200 generations, if the cells in the specially marked square are "cleared," you will receive the corresponding flag:

"Clearing" any one square will get you the first flag. Clearing two squares will get you the second flag.

Note: Your input is 15 lines of text, each consisting of 15 zeros or ones, representing the contents of that area.

000000000000000
000000000000000
000000000000000
000000000000000
000000110000000
000001111000000
000001101100000
000000011000000
000000000000000
000000000000000
000000110000000
000001111000000
000001101100000
000000011000000
000000000000000

Classmate 233 learned about Docker in software engineering class, so he wrote a Dockerfile for his string tool project.

But Classmate 233 suddenly realized that he accidentally packaged a private file (flag.txt) into it, so he wrote a command to delete this file.

"Since it's already deleted, it shouldn't be found, right?" Classmate 233 thought.

/bin/sh -c rm /code/flag.txt

docker save imagename $(sudo docker history -q imagename | tail -n +2 | grep -v \<missing\> | tr '\n' ' ') > image-caching.tar

The annual Hackergame is approaching, and Classmate L plans to invite Classmate Q to participate, but he hasn't seen Classmate Q for several days. However, the night before the competition starts, he receives an email from Classmate Q:

Subject: Confidential! Do not forward!!!
Body: See attachment
From: Q
Classmate L opens the attachment and is stunned, it's all meaningless Chinese characters. Clever Classmate L thinks that Classmate Q usually likes to use GBK encoding, maybe the opening method is wrong. As a result, opening it with GBK reveals a bunch of mixed Japanese and numbers in Martian language...

Classmate L is completely confused, after several twists and turns, they found the university's most famous Martian language expert (you). Relying on years of character encoding decoding experience, can you decipher what Classmate Q's Martian language means?

Note: The correct flag consists entirely of ASCII characters!

脦脪鹿楼脝脝脕脣 拢脠拢谩拢茫拢毛拢氓拢貌拢莽拢谩拢铆拢氓 碌脛路镁脦帽脝梅拢卢脥碌碌陆脕脣脣眉脙脟碌脛 拢忙拢矛拢谩拢莽拢卢脧脰脭脷脦脪掳脩 拢忙拢矛拢谩拢莽 路垄赂酶脛茫拢潞 拢忙拢矛拢谩拢莽拢没拢脠拢麓拢枚拢鲁拢脽拢脝拢玫拢脦拢脽拢梅拢卤拢脭拢猫拢脽拢鲁拢卯拢茫拢掳拢盲拢卤拢卯拢莽拢脽拢麓拢脦拢盲拢脽拢盲拢鲁拢茫拢掳拢脛拢卤拢卯拢脟拢脽拢鹿拢帽拢脛拢虏拢脪拢赂拢猫拢贸拢媒 驴矛脠楼卤脠脠眉脝陆脤篓脤谩陆禄掳脡拢隆 虏禄脪陋脭脵掳脩脮芒路脻脨脜脧垄脳陋路垄赂酶脝盲脣没脠脣脕脣拢卢脪陋脢脟卤禄路垄脧脰戮脥脭茫赂芒脕脣拢隆

alcarl   2018-01-09 01:25:21 +08:00 via Android   ❤️ 3
First save this text as a file encoded in gb2312, then convert it to utf8, save it, and then convert it to 8859-1 and open it as gbk, and it will be fine, =͟͟͞͞(꒪ᗜ꒪ ‧̣̥̇) The text will look like this
Class: Contains file operations (for debugging and observation, I wrote the webpage information into a file, hence this file operation class)

Refer to http://blog.zeerd.com/ffmpeg-c2c3-bug/

I hacked the server of Hackergame and stole their flag, now I am sending the flag to you:
flag{H4v3_FuN_w1Th_3nc0d1ng_4N_d3c0D1nG_9qD2R8hs}
Go submit it on the competition platform!
Do not forward this information to others, or it will be bad if discovered!

As we all know, array indices should start from 0.

Similarly, TCP ports should also start from 0. To practice this, we have set up a website on the server's port 0.

Can you successfully connect to port 0 and get the flag?

Clicking the button below to open the question will not open the webpage, as ordinary browsers will consider this an invalid address.

#include <stdio.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <time.h>
#include <errno.h>
#include <signal.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <sys/wait.h>
#include <sys/time.h>
#include <netinet/in.h>
#include <arpa/inet.h>
 
#define IPSTR "202.38.93.111" // Server IP address;
#define PORT 0
#define BUFSIZE 1024
 
int main(int argc, char **argv)
{
        int sockfd, ret, i, h;
        struct sockaddr_in servaddr;
        char str1[4096], str2[4096], buf[BUFSIZE], *str;
        socklen_t len;
        fd_set   t_set1;
        struct timeval  tv;
         
         // Create socket
        if ((sockfd = socket(AF_INET, SOCK_STREAM, 0)) < 0 ) {
                printf("Failed to create network connection, this thread will terminate---socket error!\n");
                exit(0);
        };
 
        bzero(&servaddr, sizeof(servaddr));
        servaddr.sin_family = AF_INET;
        servaddr.sin_port = htons(PORT);
        if (inet_pton(AF_INET, IPSTR, &servaddr.sin_addr) <= 0 ){
                printf("Failed to create network connection, this thread will terminate--inet_pton error!\n");
                exit(0);
        };
 
        if (connect(sockfd, (struct sockaddr *)&servaddr, sizeof(servaddr)) < 0){
                printf("Failed to connect to server, connect error!\n");
                exit(0);
        }
        printf("Connected to the remote server\n");
        memset(str2, 0, 4096);
        str=(char *)malloc(128);
        len = strlen(str2);
        sprintf(str, "%d", len);
 
        memset(str1, 0, 4096);
        strcat(str1, "GET / HTTP/1.1\n");
        strcat(str1, "Host: 202.38.93.111\n");
        strcat(str1, "\n\n");
 
        // strcat(str1, str2);
        strcat(str1, "\r\n\r\n");
        printf("%s\n",str1);
 
        ret = write(sockfd,str1,strlen(str1));
        if (ret < 0) {
                printf("Send failed! Error code is %d, error message is '%s'\n",errno, strerror(errno));
                exit(0);
        }else{
                printf("Message sent successfully, a total of %d bytes sent!\n\n", ret);
        }
 
        FD_ZERO(&t_set1);
        FD_SET(sockfd, &t_set1);
 
        while(1){
                sleep(2);
                tv.tv_sec= 0;
                tv.tv_usec= 0;
                h= 0;
                // printf("--------------->1\n");
                h= select(sockfd +1, &t_set1, NULL, NULL, &tv);
                // printf("--------------->2\n");
 
                //if (h == 0) continue;
                if (h < 0) {
                        close(sockfd);
                        printf("An exception was detected during the reading of the data packet, this exception caused the thread to terminate!\n");
                        return -1;
                };
 
                if (h > 0){
                        memset(buf, 0, 4096);
                        i= read(sockfd, buf, 4095);
                        if (i==0){
                                close(sockfd);
                                printf("Detected that the remote end closed while reading the data packet, this thread will terminate!\n");
                                return -1;
                        }
 
                        printf("%s\n", buf);
						break;
                }
        }
        close(sockfd);
 
        return 0;
}

<script>
      const term = new Terminal();
      const fitAddon = new FitAddon.FitAddon();
      term.loadAddon(fitAddon);
      term.open(document.getElementById("terminal"));
      fitAddon.fit();
      window.addEventListener('resize', function(event) {
        fitAddon.fit();
      });
      var firstmsg = true;
      const socket = new WebSocket(
         "ws://202.38.93.111:0/shell"
      );
      const attachAddon = new AttachAddon.AttachAddon(socket);
      term.loadAddon(attachAddon);
      socket.onclose = event => {
        term.write("\nConnection closed");
      };
      socket.onmessage = event => {
        if (firstmsg) {
          firstmsg = false;
          let token = new URLSearchParams(window.location.search).get("token");
          window.history.replaceState({}, null, '/');
          if (token) {
            localStorage.setItem('token', token);
          } else {
            token = localStorage.getItem('token');
          }
          if (token) socket.send(token + "\n");
        }
      };
      term.focus();
    </script>

easywsclient: connecting: host=202.38.93.111 port=0 path=/shell
Connected to: ws://202.38.93.111:0/shell
>>> 2533:MEUCIQCz8PiKvLdy1K7+TZJTwqM581W17UdJRfk3Q6hxPtr6sQIgb+Cy14NALA4ETpFQfXyfDhIxz10fyy0+t7GDEhEpS3c=

>>> Please input your token: 
>>> flag{TCP_P0RT_0_1s_re5erved_BUT_w0rks_e7e56860a1}

A certain student saw a magical cryptographic protocol called "Oblivious Transfer" on an unknown encyclopedia website.

So he implemented one side of the protocol according to the description on the website "1–2 oblivious transfer," and you can interact with it as the other side.

There should be no problem implementing the protocol exactly as described on the encyclopedia website, right?

Click to download the source code

In addition to the web terminal, you can also connect via nc 202.38.93.111 10031

In 2039, an unprecedented pandemic broke out. To facilitate students in various places to access the website of a well-known university "Pants University" for "daily health check-in," Classmate C provided such a proxy service. Once an information security major, Classmate C decided to design this proxy to be the most secure.

Tip: The browser may prompt that the TLS certificate is invalid, which is unrelated to the solution of this problem, just trust it.

Announcement: The link to the help page (https://146.56.228.227/help) in the lower right corner of the problem help page is incorrect, it should be the same as the homepage, pointing to http://127.0.0.1:8080/

Notice: We have pushed the latest Secret to you, but you may not be able to see it directly.

The net-internals events viewer and related functionality has been removed. Please use chrome://net-export to save netlogs and the external netlog_viewer to view them.

t=1410 [st=281729]  HTTP2_SESSION_SEND_RST_STREAM
                    --> description = "Duplicate pushed stream with url: https://146.56.228.227/e3b2a173-d763-409e-807c-584d13a10c92"
                    --> error_code = "7 (REFUSED_STREAM)"
                    --> stream_id = 6