{"id":80,"date":"2025-11-09T18:25:57","date_gmt":"2025-11-09T10:25:57","guid":{"rendered":"http:\/\/120.27.213.206\/?p=80"},"modified":"2025-11-09T18:35:18","modified_gmt":"2025-11-09T10:35:18","slug":"%e6%b5%99%e6%b1%9f%e7%9c%81%e7%9c%81%e8%b5%9bre","status":"publish","type":"post","link":"http:\/\/120.27.213.206\/index.php\/2025\/11\/09\/%e6%b5%99%e6%b1%9f%e7%9c%81%e7%9c%81%e8%b5%9bre\/","title":{"rendered":"\u6d59\u6c5f\u77012025\u9884\u8d5bre"},"content":{"rendered":"\n

Author\uff1ashare<\/p>\n\n\n\n

\u8fd9\u6b21\u6ca1\u6709\u6253\u597d,\u5438\u53d6\u4e86\u4e9b\u6559\u8bad<\/p>\n\n\n\n

1.DontDebugMe<\/h2>\n\n\n\n

\u4e00\u9053\u7b7e\u5230\u9898<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u6253\u5f00\u53d1\u73b0\u6709\u4e2a\u53cd\u8c03\u8bd5,\u7136\u540e\u901a\u8fc7\u590d\u6742\u7684\u8ba1\u7b97,\u7b97\u51fakey\u8fdb\u884c\u52a0\u5bc6,\u52a0\u5bc6\u903b\u8f91\u662f\u5148\u52a0\u4e0akey\u7684\u9ad8\u516b\u4f4d,\u5728\u5f02\u6216\u4e0a\u4f4e\u516b\u4f4d.<\/p>\n\n\n\n

key\u76f4\u63a5\u52a8\u8c03\u51fa\u6765\u5c31\u884c\u4e86,\u8fd9\u91cc\u662f\u4fe9\u4e2a\u5b57\u8282\u8fdb\u884c\u52a0\u5bc6\u7684<\/p>\n\n\n\n

exp:<\/p>\n\n\n\n

v=[   0xa9e9,0xa7f8,0xa2f9,0xd620,0xd69a,0xd9c8,0xd399,0x85cb,0xd29b,0xd5c7,0x8496,0xd4c9,0xd89a,0xd7ca,0xd59c,0x85c8,0xd597,0x859e,0xd49c,0x6dca,  ]

key=[0x685,0xEE20]

for i in range(len(v)):
    v[i]^=key[1]
    v[i]-=key[0]
for i in range(len(v)):
    print(chr(v[i]&0xff)+chr(v[i]>>8),end='')<\/pre>\n\n\n\n
2.BasicLoader<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fd9\u9898\u52a8\u8c03\u7684\u65f6\u5019\u53d1\u73b0\u4e86\u53cd\u8c03\u8bd5,\u76f4\u63a5\u67e5\u770b\u53d1\u73b0\u4e86\u8fd9\u662f\u4fee\u6539\u4e86\u503c,\u521b\u5efa\u4e86\u53e6\u5916\u4e00\u4e2a\u8fdb\u7a0b\u6765\u8fdb\u884c\u52a0\u5bc6,\u76f4\u63a5dump\u51fa\u6765\u52a0\u5bc6\u7a0b\u5e8f<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u6765\u5230\u4e86\u7b2c\u4e8c\u90e8\u5206,\u8fd9\u91cc\u8ddf\u7b2c\u4e00\u90e8\u5206\u7c7b\u4f3c,\u662f\u5bf9v9\u8fdb\u884crc4\u52a0\u5bc6,\u7136\u540e\u5f53\u4f5c\u51fd\u6570\u6765\u6821\u9a8c\u8f93\u5165\u7684\u5bf9\u9519,\u76f4\u63a5\u5c06\u52a0\u5bc6\u540e\u7684\u6570\u636e\u5199\u5165\u4e8c\u8fdb\u5236\u6587\u4ef6<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u5c31\u662f\u7b80\u5355\u7684\u4e00\u4e2a\u5f02\u6216<\/p>\n\n\n\n
exp:<\/p>\n\n\n\n
v = [
    0x20014077,
    0x770A1073,
    0x7C0B4320,
    0x73524472,
    0x73501128,
    0x20564477,
    0x77041321,
    0x72524721
]
key=0x44332211
for i in range(len(v)):
    v[i]^=key
for i in range(len(v)):
   for j in range(4):
       print(chr((v[i]>>8*j)&0xff),end='')<\/pre>\n\n\n\n
3.ez_rust<\/h2>\n\n\n\n
\u6bd4\u8d5b\u7684\u65f6\u5019\u6ca1\u6709\u65f6\u95f4\u53bb\u505a\u4e86,\u540e\u9762\u590d\u73b0\u4e86\u4e00\u4e0b<\/p>\n\n\n\n
\u8fd9\u662f\u4e00\u9053rust\u8bed\u8a00\u9006\u5411,\u8f93\u5165\u65f6\u7528\u6587\u4ef6\u6765\u5b8c\u6210\u7684<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u662f\u5c06\u524d\u56db\u4f4d\u5f53\u4f5c\u5bc6\u94a5\u6765\u521d\u59cb\u5316rc4\u7684,\u7136\u540e\u8fdb\u884crc4\u52a0\u5bc6,\u731c\u6d4b\u662fflag\u5934\u7684\u524d\u56db\u4f4dDASC<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u4f7f\u7528\u4e86salsa20\u8fd9\u4e2a\u52a0\u5bc6\u8ddfrc4\u4e00\u6837\u662f\u5bf9\u79f0\u52a0\u5bc6<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fd9\u91cc\u7684\u5bc6\u94a5\u662f\u4f7f\u7528\u4e86rc4\u521d\u59cb\u7684s\u76d2,\u8fd9\u91cc\u62fc\u63a5\u5230\u6700\u540e\u7684\u516b\u4f4d\u662fnonce<\/strong>,\u7136\u540e\u8fdb\u884c\u52a0\u5bc6<\/p>\n\n\n\n
\u4f7f\u7528idapython,\u52a8\u8c03\u8ba1\u7b97\u6570\u5bc6\u6587\u540e\u5728\u8fdb\u884crc4\u89e3\u5bc6\u5f97\u5230\u6700\u540e\u7684flag<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u63d0\u53d6\u51fa\u5bc6\u6587<\/p>\n\n\n\n
exp:<\/p>\n\n\n\n
def rc4(key, data):
    if isinstance(key, str):
        key = key.encode('utf-8')
    if isinstance(data, str):
        data = data.encode('utf-8')
    S = list(range(256))
    j = 0
    for i in range(256):
        j = (j + S[i] + key[i % len(key)]) % 256
        S[i], S[j] = S[j], S[i]
    i = j = 0
    result = []
    for byte in data:
        i = (i + 1) % 256
        j = (j + S[i]) % 256
        S[i], S[j] = S[j], S[i]
        # \u4e0e\u5bc6\u94a5\u6d41\u8fdb\u884c\u5f02\u6216\u64cd\u4f5c
        result.append(S[(S[i] + S[j]) % 256])
    return result


# \u793a\u4f8b\u7528\u6cd5
if __name__ == \"__main__\":
    key = 'DASC'
    # \u660e\u6587
    plaintext =[   0xB5, 0x46, 0x94, 0x60, 0x4A, 0x85, 0x5C, 0xFF, 0xBA, 0x0E,
  0x22, 0xDA, 0x65, 0x2B, 0xB4, 0xEB, 0x37, 0xF4, 0x61, 0xC7,
  0x76, 0x76, 0x79, 0x03, 0x07, 0xA1, 0x36, 0xEF, 0x0A, 0xCD,
  0x26, 0xA4, 0x1D, 0x26, 0x7D, 0x0C, 0x34, 0x4C, 0x0B, 0xA5,
  0x97,]
    a=[]
    ciphertext = rc4(key, plaintext)
    for i in range(len(plaintext)):
       a.append((plaintext[i]^ciphertext[i])&0xff)
    print(bytes(a))<\/pre>\n\n\n\n
\u8fd8\u9700\u8981\u52aa\u529b\u270a<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Author\uff1ashare \u8fd9\u6b21\u6ca1\u6709\u6253\u597d,\u5438\u53d6\u4e86\u4e9b\u6559\u8bad 1.DontDebugMe \u4e00\u9053\u7b7e\u5230\u9898 \u6253\u5f00\u53d1\u73b0\u6709\u4e2a\u53cd\u8c03 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-80","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/posts\/80","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/comments?post=80"}],"version-history":[{"count":5,"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/posts\/80\/revisions"}],"predecessor-version":[{"id":94,"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/posts\/80\/revisions\/94"}],"wp:attachment":[{"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/media?parent=80"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/categories?post=80"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/120.27.213.206\/index.php\/wp-json\/wp\/v2\/tags?post=80"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}