{"id":117,"date":"2025-10-29T16:48:14","date_gmt":"2025-10-29T08:48:14","guid":{"rendered":"https:\/\/blog.ichenfu.cn\/?p=117"},"modified":"2026-03-11T19:27:51","modified_gmt":"2026-03-11T11:27:51","slug":"%e7%ac%ac%e4%b8%80%e5%b1%8aminecraft-ctfwriteup%e9%a2%98%e8%a7%a3","status":"publish","type":"post","link":"https:\/\/blog.ichenfu.cn\/index.php\/2025\/10\/29\/%e7%ac%ac%e4%b8%80%e5%b1%8aminecraft-ctfwriteup%e9%a2%98%e8%a7%a3\/","title":{"rendered":"\u7b2c\u4e00\u5c4aMineCraft CTF(WriteUp\u9898\u89e3)"},"content":{"rendered":"\n<p><strong>\u961f\u4f0d\u540d\u79f0: \u4f60\u8bf4\u6211\u5bf9\u4e0d\u961f<\/strong><\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Misc\u65b9\u5411<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">\u53d6\u8bc1-1.1<\/h2>\n\n\n\n<p>1.\u8bf7\u63d0\u4ea4\u653b\u51fb\u8005IP<\/p>\n\n\n\n<p>Geek\u56e2\u961f\u8fd0\u8425\u7740\u4e00\u4e2a\u5927\u578b\u7684Minecraft\u591a\u4eba\u670d\u52a1\u5668\uff0c\u62e5\u6709\u8d85\u8fc75000\u540d\u6ce8\u518c\u73a9\u5bb6\u30022025\u5e748\u670811\u65e5\u4e0b\u5348\uff0c\u670d\u52a1\u5668\u7ba1\u7406\u5458\u6536\u5230\u591a\u540d\u73a9\u5bb6\u4e3e\u62a5\uff0c\u79f0\u670d\u52a1\u5668\u51fa\u73b0\u5f02\u5e38\u884c\u4e3a\uff0c\u6280\u672f\u5728\u6392\u67e5\u540e\u53d1\u73b0\u670d\u52a1\u5668\u6587\u4ef6\u88ab\u52d2\u7d22\u7ec4\u7ec7\u6295\u653e\u4e86\u52d2\u7d22\u75c5\u6bd2\uff0c\u5bfc\u81f4\u6587\u4ef6\u88ab\u52a0\u5bc6\uff0c\u6280\u672f\u5c06\u670d\u52a1\u5668\u5185\u5b58\u955c\u50cf\u6253\u5305\u4ea4\u7ed9\u4e13\u4e1a\u7f51\u7edc\u5b89\u5168\u56e2\u961f\u6781\u5b89\u4e91\u79d1\u8fdb\u884c\u6392\u67e5\uff0c\u8bf7\u4f60\u534f\u52a9\u516c\u53f8\u65b9\u8fdb\u884c\u6392\u67e5\u3002<\/p>\n\n\n\n<p>\u7528\u6237\u987b\u77e5\uff1a\u672c\u9898\u6d89\u53ca\u5230\u771f\u5b9e\u73af\u5883\u52d2\u7d22\u75c5\u6bd2\uff0c\u8bf7\u5728\u9694\u79bb\u73af\u5883\u4e0b\u8fdb\u884c\u89e3\u9898\u64cd\u4f5c\uff0c\u4e25\u7981\u5c06\u672c\u9898\u6240\u6d89\u6587\u4ef6\u4e0e\u5916\u754c\u4e92\u8054\u7f51\u63a5\u89e6\uff0c\u4e0b\u8f7d\u9644\u4ef6\u5219\u8868\u793a\u60a8\u5df2\u63a5\u53d7\u5e76\u627f\u8bfa\u9075\u5b88\u8be5\u6761\u7ea6\uff0c\u82e5\u56e0\u8fdd\u53cd\u672c\u6761\u7ea6\u5bfc\u81f4\u7684\u75c5\u6bd2\u4f20\u64ad\u6216\u6587\u4ef6\u88ab\u52a0\u5bc6\uff0c\u672c\u7ec4\u59d4\u4f1a\u4e0d\u627f\u62c5\u4efb\u4f55\u8d23\u4efb\uff01<\/p>\n\n\n\n<p>\u6839\u636e lovelymem \u5de5\u5177\u7f51\u7edc\u4fe1\u606f\u4e2d \u53ef\u4ee5\u53d1\u73b0\u653b\u51fb\u8005IP \u6ce8\u610f:\u5185\u7f51IP<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=Nzk1ZDUwODFlZDEzZTU5OTlkYTRjOTI2N2ZhNGM0NjlfY25GaTFpVEt4bGNZTkplWUNPMm1HNkdtZkk4eWNreHdfVG9rZW46VHJ4ZGJuVmhvb2RCODh4ZkltSGM3TVpHbkNmXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>flag: MCCTF{10.10.0.1}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u53d6\u8bc1-2.1<\/h2>\n\n\n\n<p>\u8bf7\u63d0\u4ea4\u653b\u51fb\u8005\u5916\u8054IP\u548c\u7aef\u53e3<\/p>\n\n\n\n<p>\u5982\u4e0a \u4e5f\u53ef\u4ee5\u770b\u51fa\u6765<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=ZDU5OTllZDdhMjE4NDkzYTBlN2YxMzM5OTU3MzA3NTRfd3VpOGxQRjVUdjd4SldobVN2Q0xmTnFkb24zck05VlVfVG9rZW46Q25ud2JVWVdqbzhoUVN4Nno2emNTdUxubldVXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>flag: MCCTF{66.240.205.34:9002}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u53d6\u8bc1-3.1<\/h2>\n\n\n\n<p>\u8bf7\u63d0\u4ea4\u8be5\u670d\u52a1\u5668\u76ae\u80a4\u4e0a\u4f20\u7cfb\u7edf\u4e2d\u53d1\u73b0\u7684webshell\u7edd\u5bf9\u8def\u5f84\uff08\u542b\u6587\u4ef6\u540d\uff09<\/p>\n\n\n\n<p>\u53ef\u4ee5\u5728lovelymem NTFS\u6587\u4ef6\u65f6\u95f4\u7ebf\u4e0a\u641c\u7d22.php\u540e\u7f00 \u7136\u540e\u53d1\u73b0\u6709shell.php \u7136\u540e\u53bb\u52a0\u8f7d\u955c\u50cf\u4e2d<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=YWJiMzU0ZTI1MTIxYjMzMzk3ODUzOTViMjk2M2FhOTNfWXNMWDFWNGtYSnhCVUdYMHJJRzVTVUdzU1FjZnRGdXFfVG9rZW46SUIwM2JmYkpGb0E4cUV4alN0Q2Nya3lHbmVmXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=ZWU0NWI2NmMzMDI4YmU0ZjhhZDZhZjllZGIwMzU4MDZfQmJiZUFOdVpvQjdoWDZVTXB1UXFLdkp5dk41U3pWZWRfVG9rZW46WlhFY2J1cnFhb2t0MkV4c2JuM2MzSk5Dbjg0XzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>\u53ef\u4ee5\u53d1\u73b0\u4e5f\u627e\u5230\u4e86shell.php \u4f46\u662f\u662f\u88ab\u611f\u67d3\u8fc7\u7684\u6587\u4ef6 \u63d0\u4ea4flag\u4e0d\u80fd\u5e26 \u88ab\u611f\u67d3\u7684\u540e\u7f00<\/p>\n\n\n\n<p>\u540c\u65f6\u4e5f\u53ef\u4ee5\u53d1\u73b0\u8fd9\u5c5e\u4e8eC\u76d8<\/p>\n\n\n\n<p>flag\u683c\u5f0f\uff1aMCCTF{D:\/xxx\/xxx.php}<\/p>\n\n\n\n<p>flag: MCCTF{C:\/phpstudy_pro\/WWW\/uploads\/shell.php}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u53d6\u8bc1-4.1<\/h2>\n\n\n\n<p>\u8bf7\u63d0\u63d0\u4ea4\u8be5\u670d\u52a1\u5668\u52d2\u7d22\u75c5\u6bd2\u540d\u79f0<\/p>\n\n\n\n<p>flag\u683c\u5f0f\uff1aMCCTF{WannaCry 1.0}<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=OWQyM2M5MTg4ZWY3MTI5M2Y1N2VmZGI1MmQ2YTZlNGVfMlYxNnFXM2hkUnYzR0pZODlscDRBeWx5Q05pS1hLUGRfVG9rZW46TzRiSGI1a3dXb1pQTGh4aDdQYmNyQ0NOblliXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>\u8fd9\u8fb9\u4e5f\u662f\u5728\u6587\u4ef6\u5939\u4e2d\u53d1\u73b0\u4e86 LB3Decryptor.exe<\/p>\n\n\n\n<p><code>LB3<\/code> = LockBit 3.0<\/p>\n\n\n\n<p>LockBit \u52d2\u7d22\u75c5\u6bd2\uff0c\u5176 3.0 \u7248\u672c\u901a\u5e38\u88ab\u7b80\u79f0\u4e3a LB3\u3002<\/p>\n\n\n\n<p>\u8fd9\u4e2a\u75c5\u6bd2\u4f1a\u52a0\u5bc6\u6587\u4ef6\u5e76\u7559\u4e0b <code>[\u5b57\u7b26].README.txt<\/code> \u548c<code>LB3Decryptor.exe<\/code> \u5728\u6587\u4ef6\u5939\u4e2d\u4e5f\u662f\u53d1\u73b0\u8fd9\u4e24\u4e2a\u6587\u4ef6<\/p>\n\n\n\n<p>flag: MCCTF{LockBit 3.0}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u53d6\u8bc1-5.1<\/h2>\n\n\n\n<p>\u8bf7\u63d0\u63d0\u4ea4\u8be5\u52d2\u7d22\u7ec4\u7ec7\u7559\u4e0b\u7684\u6d4f\u89c8\u5668\u5730\u5740\u7684\u9876\u7ea7\u57df\u540d\uff0c\u5982\uff1a.com<\/p>\n\n\n\n<p>flag\u683c\u5f0f\uff1aMCCTF{.com}<\/p>\n\n\n\n<p>\u6839\u636e\u662f\u52d2\u7d22\u75c5\u6bd2 \u80af\u5b9a\u4e0d\u4f1a\u90a3\u4e48\u660e\u663e\u548c\u66b4\u9732 \u7136\u540e\u6211\u5c31\u641c\u4e86\u4e00\u6ce2 \u9876\u7ea7\u57df\u540d<\/p>\n\n\n\n<p>\u901a\u5e38\u5728\u7f51\u7edc\u5b89\u5168\u4e8b\u4ef6\u4e2d\uff0c\u52d2\u7d22\u7ec4\u7ec7\u4f1a\u4f7f\u7528 <code>.onion<\/code> \u57df\u540d\uff08Tor \u9690\u85cf\u670d\u52a1\u7684\u9876\u7ea7\u57df\u540d\uff09\u6765\u9690\u85cf\u5176\u670d\u52a1\u5668\u5730\u5740\u3002<\/p>\n\n\n\n<p>\u540c\u65f6\u53bblovelymem \u6b63\u5219\u641c\u7d22\u4e86\u4e0b \u6b63\u597d\u6838\u9a8c\u5230\u7684 \u67e5\u5230\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=Y2I5ODM5ZTQ0Y2IxYjU0ZWZhNzZiODNjZTVjNzZmZThfYzRLSVRTMFlmM0k4dDhwMm1oSUVJRWVaM1B4Mm5QY0NfVG9rZW46QnFtSmIzTVcwb3Z5OGN4S3RYRGNSSDdlblpnXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>\u6240\u4ee5\u9876\u7ea7\u57df\u540d\u4e3a <code>.onion<\/code>\u3002<\/p>\n\n\n\n<p>Flag: MCCTF{.onion}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">ezmisc-\u7b7e\u5230<\/h2>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=MDc0YTQ1ODM0YzQwYWIzNzk0Zjk5YzZhNjY4ZDliNmNfNzJHRjFqdDFUZ1l4MlRPNjljYlNldzhnZ0xoS0dZZFBfVG9rZW46Q016emJud29ub0NEN2V4SVJ0NGNxbXhqbk1iXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=OTkyZDYwZTdhOWVhOWE2MmNiMTIwNjkzZDMxNzM1MWRfcDR6VUhEUnNjMTU3TmM1cTEwdjd2Rmx4TXlHbXdZOXNfVG9rZW46SHNScGI1QUJ0b014WGp4eTJQbWNhVjlWbjRNXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>\u53e6\u5916\uff0c\u653e\u63d0\u793a\u8bf4<\/p>\n\n\n\n<p>\u7b7e\u5230\u63d0\u793a<\/p>\n\n\n\n<p><strong>\u738b\u6893\u82b7\u5531\u8fc7<\/strong><\/p>\n\n\n\n<p>\u6240\u4ee5\u6211\u53ef\u4ee5\u731c\u5230\u662f\u4e00\u8def\u751f\u82b1<\/p>\n\n\n\n<p>\u6240\u4ee5flag\uff1aMCCTF{Wellcome_To_1th_MCCTF_\u4e00\u8def\u751f\u82b1}<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Web\u65b9\u5411<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">ez_Minecraft_login<\/h2>\n\n\n\n<p>\u6211\u53ea\u77e5\u9053\u5927\u6982\u7387\u8003\u7684\u662fsql\u6ce8\u5165\uff0c\u4f46\u662f\u6ca1\u60f3\u5230\u4f1a\u8fd9\u4e48\u7b80\u5355\u3002<\/p>\n\n\n\n<p>\u4e07\u80fd\u5bc6\u7801\u641e\u5b9a<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=MjhlNWE3ZjhhN2U5NWZmNTFmYzhlZjE3YzRmNGQwNTJfUTlDSjVYenZoeEJndVZGaEVSSU1TUjNnbzlENGlNdlVfVG9rZW46TmwwTWJkQzM2b0s5b2l4aVJmMWNHZ3AzbllkXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>\u767b\u5f55\u8fdb\u53bb\u4e4b\u540eF12\u770b\u6e90\u7801<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=MTllYzc0Y2FiYzI4NGU5NGFmNTdiNDkyODAyMTk0OWZfYVg5dEROVDNBVW04ZnBXdVZpWm1rYTJSRlU5c0ZkZzlfVG9rZW46TEgwb2JERWQybzJrSUd4aXZIdGNVaTFVblZnXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>flag:mcctf{security_Big_Panda}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">MinecraftWeb<\/h2>\n\n\n\n<p>\u7b54\u9898\u5373\u53ef:1.25,67,-13 2.3 3.0 4.c 5.8<\/p>\n\n\n\n<p>flag:mcctf{M1n3cr4ft_R3d5t0n3_Ch4ll3ng3_5ucc3ss}<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Re\u65b9\u5411<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">Ezhard_launcher<\/h2>\n\n\n\n<p>\u7b80\u5355\u7684python\u9006\u5411(\u8fd9\u9053\u9898\u771f\u7684\u7b97re\u5417)<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>def show_flag():\n    p1 = &#91;0x66,0x6c,0x61,0x67,0x7b]\n    p2 = &#91;0x68,0x34,0x72,0x64,0x5f,0x6c,0x61,0x75,0x6e,0x63,0x68,0x33,0x72,0x5f]\n    p3 = &#91;0x72,0x33,0x76,0x5f,0x63,0x74,0x66,0x7d]\n    flag = ''.join(&#91;chr(x^0) for x in p1+p2+p3])\nmessagebox.showinfo('flag', flag)<\/code><\/pre>\n\n\n\n<p>\u76f4\u63a5\u628aflag\u5c55\u793a\u51fa\u6765\u4e86\uff0c\u505a\u9898\u7684\u65f6\u5019\u76f4\u63a5print\u5c31\u884c<\/p>\n\n\n\n<p>flag:flag{h4rd_launch3r_r3v_ctf}<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Crypto\u65b9\u5411<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">Ezlog<\/h2>\n\n\n\n<p>\u8fd9\u4e48\u5927\u6587\u672c\u91cf\u53ea\u80fd\u4ea4\u7ed9ai\u5206\u6790<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=ZGNlMGEwY2Q1NWJmMDJmNWJkZmNlYjY5YjVjMzViNjlfc2JSSWtmS0kzVnJPUW9SREdGUmtCcHZsOGZlR1RKWWZfVG9rZW46UmlaSGJEcHNlbzJ3YjZ4R05oRWNSRzhrbnRjXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>\u6ce8\u610f\u5230\u6709\u4e2a\u8fd9\u4e2a\u53ef\u80fd\u662f\u67d0\u4e2a\u7f16\u7801\u4e4b\u540e\u7684flag<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/xcnh1kv30dmc.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=MGZjYWFkMTllZmNkZjI0ZTVkZGFhMzk2YzJkNDc1YjZfSTg5V1ZHMDBHbk5BcjJyczN4cE1DMlZHTzBKaFlhT3pfVG9rZW46U2YwTWJHbWdVb2Z0aTR4cE9hcmNTaWR0bkhoXzE3NzMyMjg0NTg6MTc3MzIzMjA1OF9WNA\" alt=\"\"\/><\/figure>\n\n\n\n<p>flag:mcctf{ez!_Steve111}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u54a9\u54a9\u54a9<\/h2>\n\n\n\n<p>\u867d\u7136\u4f46\u662f\u8fd9\u9053\u9898\u53ea\u662f\u4e00\u4e2a\u4ece\u6469\u65af\u5bc6\u7801\u5305\u88c5\u8d77\u6765\u7684\u9898\u76ee<\/p>\n\n\n\n<p>\u7136\u540e\u5c31\u53ef\u4ee5\u89e3\u51fa\u6765\u5bc6\u6587\u662f<\/p>\n\n\n\n<p>FOAMRVNGUKFQQUU<\/p>\n\n\n\n<p>\u4e4b\u540e\u89c1\u5230\u6709\u5bc6\u94a5\u7684\u9898\u76ee\uff0c\u7b2c\u4e00\u65f6\u95f4\u60f3\u5230\u7684\u5c31\u662f\u7ef4\u57fa\u5c3c\u4e9a<\/p>\n\n\n\n<p>\u4e8e\u662f<\/p>\n\n\n\n<p>flag:mccctf{yangzofzgxzyjmn}<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">ez_lattice<\/h2>\n\n\n\n<p>\u9996\u5148\u6211\u4eec\u77e5\u9053flag\u88ab\u5206\u6210\u4e8610\u90e8\u5206\uff0c\u6bcf\u90e8\u5206\u8f6c\u5b57\u8282\u540e\u5206\u522b\u52a0\u5bc6\u8868\u793a\u3002<\/p>\n\n\n\n<p>\u4ee5\u4e0b\u662f\u52a0\u5bc6\u8fc7\u7a0b<\/p>\n\n\n\n<p><code>n<\/code>\u662f\u4e00\u4e2a1024\u4f4d\u7684\u7d20\u6570\u3002<\/p>\n\n\n\n<p><code>k<\/code>\u662f\u4e00\u4e2a320\u4f4d\u7684\u7d20\u6570\u3002<\/p>\n\n\n\n<p>\u7136\u540e\u4ed6\u628aflag\u5206\u6210\u4e86\u5341\u4efd\u5206\u522b\u8fdb\u884c\u52a0\u5bc6<\/p>\n\n\n\n<p>$$ h_i \\equiv k \\cdot flag_i^{-1} \\pmod{n} $$<\/p>\n\n\n\n<p>\u5373<\/p>\n\n\n\n<p>$$flag_i \\cdot h_i \\equiv k \\pmod{n} \\quad (\\forall i \\in [0,9])$$<\/p>\n\n\n\n<p>\u6240\u4ee5\u6211\u4eec\u53ef\u4ee5\u8fdb\u884c\u89e3\u5bc6<\/p>\n\n\n\n<p>\u9996\u5148\u6211\u4eec\u4e0d\u59a8\u8bbe\u7b2c\u4e00\u5757\u513fflag\u662fmcctf{<\/p>\n\n\n\n<p>\u4e8e\u662f\u6211\u4eec\u53ef\u4ee5\u901a\u8fc7\u8fd9\u4e2a\u6765\u89e3\u51fak\uff0c\u56e0\u4e3a<\/p>\n\n\n\n<p>$$k \\equiv f_0 \\cdot h_0 \\pmod{n}$$<\/p>\n\n\n\n<p>\u6709\u4e86k\u6211\u4eec\u5c31\u53ef\u4ee5\u5f80\u4e0b\u89e3\u5bc6\u5176\u4ed6\u90e8\u5206\u7684flag\uff0c\u56e0\u4e3a<\/p>\n\n\n\n<p>$$\\forall i \\in [0,10),\u90fd\u6709f_i \\equiv k \\cdot h_i^{-1} \\pmod{n}$$<\/p>\n\n\n\n<p>\u6240\u4ee5\u6211\u4eec\u53ef\u4ee5\u6709\u5982\u4e0bexp:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>from Crypto.Util.number import long_to_bytes, bytes_to_long\nfrom sage.all import *\n\nn = 101058037881577920580002375991533361443161573598172872401436929130908010655347634552777064174546568575027746607488492099154312267724394462943506690144947830040343315369562513570527692894685015573081207528621819747699733304080614793374057284273387848357708739112531677281801323793173090364390370736467003582917\nh = &#91;65238694465386915975309840141683615649716012162296959248563569592374718661731701206400896806537952397410032261877378530686978759625292099657084619983375773255755144153781457417211674091516407534881571548771997217431814162001948536903510439216595988996202297986689400937900640116301788349788192250828531102128, 32068430839487144716294122362877372185693231094331598085462142396101367356886620469702732239532304931830205469549873073426114974524345753699104479003686428551918989837919692818874041699167857438504796702427222322750641837975840611428682636854000155270647980139296254355022602725831316373502464385756822509507, 48045538813319220884490922546018868575029946351799253696566675045038593914426407040185597260237676046539039366729571890778376978523204708113947916683959718708951574554301326506033685253589648114421528029323355988178699924863264060114597711724540199556277259170518549061045104668001222710528847166168767224549, 75123995948950968391603159591624639368414690146643442871589447787252191810497231696845253418339980365162413355185111520483921331823652266243697559776174240013810488917495610598469082493126712875223200656678886780170706766832861117452830161713449328056483280254149803408052080851148204725932967126493489495389, 42343824812526091206264281076069981510653655573870037741842182418474719039360760283698683250943728878536765635239317776400805788012233353293622608102030711446811052604409325460820893599261928948443614050545507085890105202716250838690843035633052646253790841787346488131868389877735682981371140434336342163669, 37628269352817676029356094741613805749594096808670358767615556155530757612666502454541938594622721603313749449559343049177509738095358796943332112708078541782706675648358891508089680020008921913219362413211208103447607363315907316039312691994345309495981824477958094292712571053294153865686883217285045072976, 73095252261793287281307332092278639250704283375416144614680921495193800381044097746018933097918509033128787939821334122567907138901258104948978871755972801343922472074421943147663482695952043375035475082008819785709339730299175470843123204596279944349658280821397882576553260815905563725407952447607089415633, 8361412049519617647068414326705006074844850312921172001754491320379019244806566558657382200324831784028297924464089518976736942901670220750313172374617027089856976338617784260689863433040095122712749142220670740521573738642943802961154307094774904173422138158314888817191233893356292405644600013350124816088, 62352524946552767010792198212753557220884107271554779577796506420796971189249469475111704305722210605467500390830564039781429821148651682920442985923243637249469873109032519540399258091710648539664160224041270628257896923843424376128648420038693104506093124335294407330397776591999820661062819804224881373090, 45213281711383478082421649210599256239528608897580799695344082282030442480159495245224471785682835728050988008519768665616995327124516724160052452164034157361068252085880379351444661551341271829125924017634986473455126215443151677035338594360564464453084451500811436155828884254112395862897223575590665873227]\n\n# \u5047\u8bbeflag\u7684\u5f00\u5934\u662f'mcctf{'\uff0c\u8ba1\u7b97\u7b2c\u4e00\u4e2a\u5206\u5757\u7684\u53ef\u80fd\u503c\n# flag\u662fb'mcctf{...}'\uff0c\u5206\u621010\u90e8\u5206\uff0c\u6bcf\u90e8\u5206\u957f\u5ea6\u4e3alen_flag \/\/ 10\n# \u6211\u4eec\u9700\u8981\u8ba1\u7b97\u7b2c\u4e00\u4e2a\u5206\u5757\u7684\u503c\nflag_start = b'mcctf{'\n# \u8ba1\u7b97\u7b2c\u4e00\u4e2a\u5206\u5757\u7684\u503c\n# \u7531\u4e8eflag\u88ab\u5206\u621010\u90e8\u5206\uff0c\u6bcf\u90e8\u5206\u7684\u957f\u5ea6\u662flen_flag \/\/ 10\n# \u4f46len_flag\u662f\u52a8\u6001\u7684\uff0c\u53d6\u51b3\u4e8eUUID\u7684\u957f\u5ea6\n# UUID\u7684\u6807\u51c6\u957f\u5ea6\u662f36\u5b57\u7b26\uff08\u5305\u62ec'-'\uff09\uff0c\u6240\u4ee5flag\u7684\u603b\u957f\u5ea6\u662f6 + 36 + 1 = 43\nlen_flag = 43\npart_len = len_flag \/\/ 10  # 4\n# \u7b2c\u4e00\u4e2a\u5206\u5757\u662f_flag&#91;0:4] = b'mcct'\nf0 = bytes_to_long(b'mcct')\n# \u8ba1\u7b97k\nk = (h&#91;0] * f0) % n\n# \u9a8c\u8bc1k\u662f\u5426\u5bf9\u5176\u4ed6h_i\u4e5f\u6210\u7acb\nfor i in range(1, 10):\n    fi = (k * inverse_mod(h&#91;i], n)) % n\n    print(long_to_bytes(fi))\n# \u53d1\u73b0\u8f93\u51fa\u4e0d\u5168\u662f\u5408\u7406\u7684flag\u90e8\u5206\uff0c\u56e0\u6b64\u53ef\u80fd\u9700\u8981\u8c03\u6574part_len\u6216f0\n\n# \u53e6\u4e00\u79cd\u65b9\u6cd5\u662f\u5229\u7528h_i * f_i \u2261 h_j * f_j \u2261 k (mod n)\n# \u56e0\u6b64 h_i * f_i \u2261 h_j * f_j (mod n)\n# \u53ef\u4ee5\u8868\u793a\u4e3a f_i \u2261 f_j * h_j * h_i^{-1} (mod n)\n# \u7531\u4e8eflag\u7684\u683c\u5f0f\u5df2\u77e5\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u7528\u5df2\u77e5\u7684\u90e8\u5206\u6062\u590d\u5176\u4ed6\u90e8\u5206\n\n# \u53e6\u4e00\u79cd\u601d\u8def\u662f\u6ce8\u610f\u5230k\u662fh_i * f_i % n\uff0c\u4e14k\u662f\u76f8\u540c\u7684\n# \u56e0\u6b64\u53ef\u4ee5\u8ba1\u7b97k\u7684\u5019\u9009\u503c\n# \u4eceh&#91;0]\u548ch&#91;1]\u7684\u5173\u7cfb\uff1a\n# h&#91;0] * f0 \u2261 h&#91;1] * f1 (mod n)\n# f1 \u2261 f0 * h&#91;0] * h&#91;1]^{-1} (mod n)\n# \u7531\u4e8ef0\u548cf1\u662f\u8fde\u7eed\u7684flag\u90e8\u5206\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u7528f0\u7684\u5019\u9009\u503c\u8ba1\u7b97f1\n\n# \u5047\u8bbef0\u662fb'mcct'\uff0c\u8ba1\u7b97f1\nf0 = bytes_to_long(b'mcct')\nf1 = (f0 * h&#91;0] * inverse_mod(h&#91;1], n)) % n\nprint(long_to_bytes(f1))  # \u8f93\u51fa\u53ef\u80fd\u662fb'f{...'\u7684\u4e00\u90e8\u5206\n\n# \u7ee7\u7eed\u62fc\u63a5flag\nflag_parts = &#91;]\nfor i in range(10):\n    fi = (k * inverse_mod(h&#91;i], n)) % n\n    flag_parts.append(long_to_bytes(fi))\n    print(f\"Part {i}: {long_to_bytes(fi)}\")\n\n# \u62fc\u63a5\u6240\u6709\u90e8\u5206\nflag = b''.join(flag_parts)\nprint(flag)\n# \u53ef\u80fd\u9700\u8981\u8c03\u6574part_len\u6216f0\u7684\u521d\u59cb\u503c\n\n# \u7531\u4e8eflag\u7684\u603b\u957f\u5ea6\u662f43\uff0c\u5206\u621010\u90e8\u5206\uff0c\u6bcf\u90e8\u5206\u957f\u5ea6\u4e3a4\u62165\n# \u5c1d\u8bd5part_len = 5\nlen_flag = 43\npart_len = (len_flag + 9) \/\/ 10  # 5\n# \u7b2c\u4e00\u4e2a\u5206\u5757\u662f_flag&#91;0:5] = b'mcctf'\nf0 = bytes_to_long(b'mcctf')\nk = (h&#91;0] * f0) % n\nflag_parts = &#91;]\nfor i in range(10):\n    fi = (k * inverse_mod(h&#91;i], n)) % n\n    flag_parts.append(long_to_bytes(fi))\n    print(f\"Part {i}: {long_to_bytes(fi)}\")\nflag = b''.join(flag_parts)\nprint(flag)\n# \u8f93\u51fa\u53ef\u80fd\u662f\u5b8c\u6574\u7684flag\n\n# \u53ef\u80fd\u9700\u8981\u622a\u65ad\u5230\u6b63\u786e\u7684\u957f\u5ea6\nflag = flag&#91;:43]\nprint(flag)<\/code><\/pre>\n\n\n\n<p>\u8fd0\u884c\u5f97\u5230flag:mcctf{f670d7a5-80db-4b7a-86f3-466a0e1e7daf}<\/p>\n","protected":false},"excerpt":{"rendered":"\u300aMineCraft CTF\u9898\u89e3\u300b\u63ed\u79d8\uff1a\u4ece\u52d2\u7d22\u75c5\u6bd2\u6eaf\u6e90\u5230\u9006\u5411\u7834\u89e3\uff0c\u653b\u51fb\u8005IP\u3001Webshell\u8def\u5f84\u3001\u75c5\u6bd2\u540d\u79f0\u5168\u66dd\u5149\u3002\u5185\u542bSQL\u6ce8\u5165\u3001\u6469\u65af\u5bc6\u7801\u3001\u7ef4\u5409\u5c3c\u4e9a\u7b49\u591a\u7c7b\u9898\u578b\u5b9e\u6218\u89e3\u6790\uff0c\u9644\u5b8c\u6574\u89e3\u9898\u811a\u672c\u4e0e\u601d\u8def\u3002","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[5,6],"tags":[],"class_list":["post-117","post","type-post","status-publish","format-standard","hentry","category-ctf","category-wp"],"_links":{"self":[{"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/posts\/117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/comments?post=117"}],"version-history":[{"count":2,"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/posts\/117\/revisions"}],"predecessor-version":[{"id":164,"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/posts\/117\/revisions\/164"}],"wp:attachment":[{"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/media?parent=117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/categories?post=117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ichenfu.cn\/index.php\/wp-json\/wp\/v2\/tags?post=117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}