菜鸡最近迷上了玩游戏，但它总是赢不了，你可以帮他获胜吗 菜鸡最近迷上了玩游戏，但它总是赢不了，你可以帮他获胜吗答案:zsctf{T9is_tOpic_1s_v5ry_int7resting_b6t_others_are_n0t}方法一依次输入1,2,3,4,5,6,7,8即可出答案方法二拖入ida pro 32位中找到main_0，F5反编译，查看伪代码，查看流程图修改判断逻辑，修补至原程序，打开再得到flag方法三拖入ida pro 32位中找到main_0，F5反编译，查看伪代码，再查看flag计算过程，写程序推出python代码v6 = [] v3 = [] for i in range(0, 64): v6.append(i) for i in range(0, 56): v3.append(i) v6[0] = 18 v6[1] = 64 v6[2] = 98 v6[3] = 5 v6[4] = 2 v6[5] = 4 v6[6] = 6 v6[7] = 3 v6[8] = 6 v6[9] = 48 v6[10] = 49 v6[11] = 65 v6[12] = 32 v6[13] = 12 v6[14] = 48 v6[15] = 65 v6[16] = 31 v6[17] = 78 v6[18] = 62 v6[19] = 32 v6[20] = 49 v6[21] = 32 v6[22] = 1 v6[23] = 57 v6[24] = 96 v6[25] = 3 v6[26] = 21 v6[27] = 9 v6[28] = 4 v6[29] = 62 v6[30] = 3 v6[31] = 5 v6[32] = 4 v6[33] = 1 v6[34] = 2 v6[35] = 3 v6[36] = 44 v6[37] = 65 v6[38] = 78 v6[39] = 32 v6[40] = 16 v6[41] = 97 v6[42] = 54 v6[43] = 16 v6[44] = 44 v6[45] = 52 v6[46] = 32 v6[47] = 64 v6[48] = 89 v6[49] = 45 v6[50] = 32 v6[51] = 65 v6[52] = 15 v6[53] = 34 v6[54] = 18 v6[55] = 16 v6[56] = 0 v3[2] = 18 v3[3] = 98 v3[4] = 119 v3[5] = 108 v3[6] = 65 v3[7] = 41 v3[8] = 124 v3[9] = 80 v3[10] = 125 v3[11] = 38 v3[12] = 124 v3[13] = 111 v3[14] = 74 v3[15] = 49 v3[16] = 83 v3[17] = 108 v3[18] = 94 v3[19] = 108 v3[20] = 84 v3[21] = 6 i = 0 while i < 56: v3[i] ^= v6[i] v3[i] ^= 0x13 i = i+1 print(v3)

网络安全靶场--sqli-labs搭建 网络安全靶场--sqli-labs搭建安装注：因为mysql函数原因PHP版本必须<71.下载源代码https://github.com/Audi-1/sqli-labs2.新建站点，上传源代码并解压3.修改网站根目录为解压后的文件夹4.修改sql-connections文件夹下的db-creds.inc文件<?php //give your mysql connection username n password $dbuser ='root'; $dbpass ='root'; $dbname ="security"; $host = 'localhost'; $dbname1 = "challenges"; ?>进入网站点击选项安装数据库[Setup/reset Database for labs]

网络安全靶场--DVWA搭建 网络安全靶场--DVWA搭建LAMP环境1.CentOS7安装小皮面板yum install -y wget && wget -O install.sh https://notdocker.xp.cn/install.sh && sh install.sh2.在网页后台选择安装PHP8.0+MYSQL5.6环境3.新建网站部署phpadmin网址：https://www.phpmyadmin.net/版本：phpadmin5.1.3安装DVWA1.下载DVWA源代码http://www.dvwa.co.uk/2.创建PHP网站和mysql数据库php:8.0mysql:5.6mysql用户：dvwamysql密码：dvwamysql数据库名：dvwa3.上传源代码至网站目录解压4.修改解压后的文件夹为网站根目录5.复制config文件夹下的配置文件源文件：config.inc.php.dist复制后文件：config.inc.php6.修改重命名后的配置文件$_DVWA[ 'db_server' ] = '127.0.0.1'; $_DVWA[ 'db_database' ] = 'dvwa'; $_DVWA[ 'db_user' ] = 'dvwa'; $_DVWA[ 'db_password' ] = 'dvwa'; $_DVWA[ 'db_port'] = '3306';7.打开网址进入安装8.爆红问题解决PHP function allow_url_include: Disabled进入php版本的php.ini，把Off改为Onallow_url_include = OnreCAPTCHA key: Missing生成地址https://www.google.com/recaptcha/admin/create编辑config/config.inc.php文件$_DVWA[ 'recaptcha_public_key' ] = '6LdJJlUUAAAAAH1Q6cTpZRQ2Ah8VpyzhnffD0mBb';$_DVWA[ 'recaptcha_private_key' ] = '6LdJJlUUAAAAAM2a3HrgzLczqdYp4g05EqDs-W4K';9.Create / Reset Database登入DVWA和设置难度默认用户：admin默认密码：password设置难度：DVWA Security