{"id":1902,"date":"2026-05-30T16:31:54","date_gmt":"2026-05-30T08:31:54","guid":{"rendered":"https:\/\/shr1mp.top\/?p=1902"},"modified":"2026-06-02T11:24:50","modified_gmt":"2026-06-02T03:24:50","slug":"ctbuctf-2026","status":"publish","type":"post","link":"https:\/\/shr1mp.top\/index.php\/2026\/05\/30\/ctbuctf-2026\/","title":{"rendered":"CTBUCTF 2026"},"content":{"rendered":"\n
\n

\u8c22\u8c22\u91cd\u5e86\u5de5\u5546\u5927\u5b66\u9080\u8bf7\uff0c\u8ba9\u6211\u53c2\u52a0\u6bd4\u8d5b\uff0c\u867d\u7136\u8fd9\u5929\u6ee1\u8bfe\uff0c\u4f46\u662f\u8fd8\u662f\u6253\u4e86\u4e2a\u4e09\u8840\u51fa\u6765\uff0c\u563f\u563f<\/p>\n\n\n\n

\"\"\/<\/div><\/figure>\n\n\n\n

\u4e5f\u662f\u5728\u6700\u540e\u7528AI\u641e\u51fa\u6765\u4e2aweb\u9898\uff0c\u6781\u9650\u4e0a\u4ea4<\/p>\n<\/blockquote>\n\n\n\n

\u521d\u8d5b<\/h2>\n\n\n\n

Misc-[\u7b7e\u5230]Welcom<\/h3>\n\n\n\n

\u5728C0ba1t\u6218\u961f\u7684\u5b98\u7f51\uff0c\u53ef\u4ee5\u770b\u5230\u6709\u4e2ajs\u6587\u4ef6\uff0c\u641c\u7d22flag\uff0c\u53ef\u4ee5\u770b\u5230\u8fd9\u4e2a\u6293\u53d6flag\u7684\u64cd\u4f5c<\/p>\n\n\n\n

\"\"\/<\/div><\/figure>\n\n\n\n

\u4e8e\u662f\u83b7\u5f97\u8def\u5f84\/api\/flag<\/p>\n\n\n\n

\"\"\/<\/div><\/figure>\n\n\n\n

Misc-\u4e24\u53f6\u969c\u76ee<\/h3>\n\n\n\n
\n

\u4e24\u7247\u53f6\u5b50\u771f\u7684\u80fd\u8499\u4f4f\u4f60\u773c\u775b\u5417?<\/p>\n<\/blockquote>\n\n\n\n

\u53ea\u7ed9\u4e86\u4e2a\u4e24\u4e2a\u53f6\u5b50\u7684\u56fe\u7247\uff0c\u7528 010\u67e5\u770b\u5668\u6216 Python \u68c0\u67e5\u6587\u4ef6\uff0c\u53d1\u73b0\u6587\u4ef6\u4e2d\u5b58\u5728\u4e24\u4e2a JPEG \u7ed3\u675f\u6807\u8bb0 FF D9<\/code>\uff0c\u8bf4\u660e\u6587\u4ef6\u7531\u4e24\u5f20 JPEG \u56fe\u7247\u62fc\u63a5\u800c\u6210\u3002<\/p>\n\n\n\n

\"\"\/<\/div><\/figure>\n\n\n\n

\u63d0\u53d6\u51fa\u4e24\u4e2a\u56fe\u7247\uff0c\u53ef\u4ee5\u53d1\u73b0\u51e0\u4e4e\u4e00\u6a21\u4e00\u6837\uff1a<\/p>\n\n\n\n

\u4e24\u5f20\u56fe\u7247\u5c3a\u5bf8\u5b8c\u5168\u76f8\u540c\uff08682\u00d7511 RGB\uff09\uff0c\u9010\u50cf\u7d20\u8ba1\u7b97\u7edd\u5bf9\u5dee\u503c\uff0c\u7136\u540e\u7b49\u6bd4\u653e\u5927\u5230\u53ef\u89c6\u8303\u56f4\u3002<\/p>\n\n\n\n

\"\"\/<\/div><\/figure>\n\n\n\n
from PIL import Image\nimport numpy as np\n\nimg1 = np.array(Image.open('leaf1.jpg'))\nimg2 = np.array(Image.open('leaf2.jpg'))\n\ndiff = np.abs(img2.astype(float) - img1.astype(float))\ndiff_gray = diff.max(axis=2)  # \u53d6\u6bcf\u4e2a\u50cf\u7d20\u7684\u6700\u5927\u901a\u9053\u5dee\n\n# \u6b64\u65f6\u56e0\u4e3a\u51fa\u6765\u7684\u56fe\u7247\u5f88\u6a21\u7cca\uff0c\u6240\u4ee5\u9700\u8981\u653e\u5927\u8fd9\u79cd\u5dee\u503c\uff0c\u653e\u5927\u5230 0-255\ndiff_scaled = (diff_gray \/ diff_gray.max() * 255).astype(np.uint8)\nImage.fromarray(diff_scaled).save('diff_scaled.png')<\/code><\/pre>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u5b98\u65b9wp\u5199\u7684\u53e6\u4e00\u4e2a\u65b9\u6cd5\uff1a<\/p>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
Misc-SGA<\/h3>\n\n\n\n
\n
\u8fd8\u4e0d\u9519\u7684\u9644\u9b54\uff1f\u7b49\u7b49\uff0c\u8fd9\u4e2a\u9644\u9b54\u53f0\u4e0d\u592a\u5bf9\u52b2\u6ce8\uff1a\u8bf7\u5c06\u6700\u7ec8\u7ed3\u679c\u6309\u5355\u8bcd\u4ee5_\u5206\u79bb\u5e76\u5305\u4e0actbuctf{}\u63d0\u4ea4\uff0c\u5168\u5c0f\u5199<\/p>\n<\/blockquote>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u9996\u5148SGA\u7ffb\u8bd1\u4e0b\u6765\u662f\u9644\u9b54\u53f0\u6587\u5b57<\/p>\n\n\n\n
\u5176\u6b21\uff0c\u6839\u636e\u8fd9\u4e2a\u201d\u4ee5_\u5206\u79bb\u201c\u53ef\u4ee5\u5224\u65ad\u51faflag\u7edd\u5bf9\u662f\u96f6\u6563\u7684\uff0c\u800c\u4e14\u4f60\u53ef\u4ee5\u5f88\u660e\u786e\u77e5\u9053\u4ed6\u662fflag<\/p>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u731c\u6d4b\uff1aMinecraft\u7684\u9644\u9b54\u94ed\u6587\u7f16\u7801\uff0c\u7b2c\u4e00\u884c\u5f00\u59cb\u7ffb\u8bd1\u4e0b\u6765\u662fyou have…\u6700\u540e\u662fsga well done it\u3002\u90a3\u5c31\u7edd\u5bf9\u662f\u4e86<\/p>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u5168\u90e8\u5bf9\u4e0b\u6765\u5c31\u662fflag<\/p>\n\n\n\n
Misc-Hashcat<\/h3>\n\n\n\n
\u7ed9\u4e86\u4e2a\u4e00\u4e2a\u54c8\u673a\u54aa\u7684png\uff0c\u53ef\u4ee5\u53d1\u73b0\u5728\u6587\u4ef6\u91cc\u5b58\u5728rar\u3001<\/p>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u53d1\u73b0\u8fd9\u4e2a\u538b\u7f29\u5305\u5b58\u5728\u6ce8\u91ca<\/p>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u653e\u5728\u968f\u6ce2\u9010\u6d41\u8dd1\u4e00\u4e0b<\/p>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u5f97\u5230\u6253\u5f00\u538b\u7f29\u5305\u7684\u5bc6\u7801\uff08\u542b\u63a9\u7801\uff09<\/p>\n\n\n\n
f1agf1ag:xxxx:doyouKKKKNOW<\/code><\/pre>\n\n\n\n
\"\"\/<\/div><\/figure>\n\n\n\n
\u6700\u7ec8\u5f97\u5230\uff1a<\/p>\n\n\n\n
f1agf1ag:4096:doyouKKKKNOW<\/code><\/pre>\n\n\n\n
\u6253\u5f00\u5f97\u5230\uff1a<\/p>\n\n\n\n
\u54c8\u6c14\uff01\u7981\u6b62\u968f\u5730\u5927\u5c0f\u8eba\uff01\nctbuctf{ffe45f13-72be-4723-a7ad-00229bfd6b46}<\/code><\/pre>\n\n\n\n
\u5bc6\u7801-Xor<\/h3>\n\n\n\n
\u9898\u76ee\u63cf\u8ff0<\/p>\n\n\n\n
\u7ed9\u51fa\u4e00\u6bb5\u5341\u516d\u8fdb\u5236\u5bc6\u6587\u548c\u5173\u952e\u8bcd c0ba1t<\/code>\uff0c\u9700\u8981\u89e3\u5bc6\u5f97\u5230 flag\u3002<\/p>\n\n\n\n