1$ unzip re87a57766.zip
2Archive:  re87a57766.zip
3  Length      Date    Time    Name
4---------  ---------- -----   ----
5     3296  2025-12-02 05:20   info_19ff9a2.ori.en
6    14552  2025-12-02 05:19   re87a57766

1$ file re87a57766
2re87a57766: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), 
3            dynamically linked, stripped
4
5$ file info_19ff9a2.ori.en  
6info_19ff9a2.ori.en: ASCII text, with CRLF line terminators

1$ strings re87a57766 | grep -E "(info|base64|ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789)"
2
3ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
4./info_19ff9a2.ori
5info_19ff9a2.ori.en

1$ head -3 info_19ff9a2.ori.en
2MjY1MjMxNDY5NDEgNzA2MTYzMTk2MDIxMTU1NzIyIGE5ZWFjNzNAMWQzLmNuCg==
3MjY2MjEzODU2NTUgODg1ODgyMTk4ODMwMjU3MTgzIDE4Y2E3ZWU5QDI2MC5jb20uY24K
4MzU2MTk4ODY0NzQgNzQ3ODUyMTk3NTI5MTI3Njc5IDM1N2M2NUAzNGUuY29tLmNuCg==

1import base64
2
3# 解码第1行
4line1 = "MjY1MjMxNDY5NDEgNzA2MTYzMTk2MDIxMTU1NzIyIGE5ZWFjNzNAMWQzLmNuCg=="
5decoded = base64.b64decode(line1).decode('utf-8')
6print(decoded)
7# 输出: 26523146941 706163196021155722 a9eac73@1d3.cn

 1#!/usr/bin/env python3
 2import base64
 3
 4with open('info_19ff9a2.ori.en', 'r') as f:
 5    lines = f.readlines()
 6
 7decoded_lines = []
 8for line in lines:
 9    line = line.strip()
10    if line:
11        decoded = base64.b64decode(line).decode('utf-8')
12        decoded_lines.append(decoded)
13        print(decoded)
14
15# 获取第6行第2列
16row6 = decoded_lines[5]  # 索引从0开始
17columns = row6.split()
18answer = columns[1]  # 第2列（索引1）
19
20print(f"\n答案: {answer}")

 1#!/usr/bin/env python3
 2"""数据存储1 - 快速解密工具"""
 3import base64
 4
 5def decrypt_and_get_answer(file_path, row=6, col=2):
 6    with open(file_path, 'r') as f:
 7        lines = [base64.b64decode(line.strip()).decode('utf-8') 
 8                 for line in f if line.strip()]
 9    
10    target = lines[row-1].split()[col-1]
11    return target
12
13# 使用方法
14answer = decrypt_and_get_answer('info_19ff9a2.ori.en', 6, 2)
15print(f"答案: {answer}")

1sqlite3 sqlite.db

1sqlite> .tables
2drivers     orders      sys_config  warehouses
3
4sqlite> SELECT * FROM sys_config;
5recovery.pointer|ERR_PTR: 0000013B:04F0|Start address of emergency chain
6recovery.structure|Struct: >IHH (NextPage, NextOff, Len)|Custom header inside freeblocks
7recovery.encryption|XOR_PAGE_ID_BE|Encryption mode

 1#!/usr/bin/env python3
 2import struct
 3
 4# 读取数据库文件
 5with open('sqlite.db', 'rb') as f:
 6    data = f.read()
 7
 8# 获取页面大小
 9page_size = struct.unpack('>H', data[16:18])[0]
10print(f"[*] 页面大小: {page_size} 字节")
11
12# 配置参数
13entry_page = 0x13B  # 315
14entry_offset = 0x04F0  # 1264
15
16extracted_sql = []
17current_page = entry_page
18current_offset = entry_offset
19
20visited = set()
21max_iterations = 1000
22iteration = 0
23
24print("[*] 开始遍历链表...\n")
25
26while iteration < max_iterations:
27    location = (current_page, current_offset)
28    if location in visited:
29        break
30    visited.add(location)
31    iteration += 1
32    
33    # 计算物理地址
34    physical_addr = (current_page - 1) * page_size + current_offset
35    
36    if physical_addr + 8 > len(data):
37        break
38    
39    # 读取自定义头部 (8字节: >IHH)
40    header_bytes = data[physical_addr:physical_addr + 8]
41    next_page, next_offset, data_len = struct.unpack('>IHH', header_bytes)
42    
43    print(f"[{iteration}] 页{current_page}+0x{current_offset:04X}: NextPage={next_page}, NextOff=0x{next_offset:04X}, Len={data_len}")
44    
45    if data_len == 0 or data_len > 10000:
46        break
47    
48    # 读取加密数据
49    data_start = physical_addr + 8
50    if data_start + data_len > len(data):
51        break
52    
53    encrypted_data = data[data_start:data_start + data_len]
54    
55    # XOR解密：使用大端字节序的页号
56    page_bytes = struct.pack('>I', current_page)
57    decrypted = bytearray()
58    for i, byte in enumerate(encrypted_data):
59        key_byte = page_bytes[i % 4]
60        decrypted.append(byte ^ key_byte)
61    
62    chunk = decrypted.decode('utf-8', errors='ignore')
63    extracted_sql.append(chunk)
64    
65    # 跳转到下一个节点
66    if next_page == 0 or next_page == 0xFFFFFFFF:
67        break
68    
69    current_page = next_page
70    current_offset = next_offset
71
72# 输出完整SQL
73full_sql = ''.join(extracted_sql)
74print("\n提取的SQL:\n" + "="*70)
75print(full_sql)
76
77# 保存到文件
78with open('extracted_sql.txt', 'w', encoding='utf-8') as f:
79    f.write(full_sql)

1python3 extract.py

 1-- [EMERGENCY_INDEX] Lidar Batch Locator
 2SELECT
 3    t1.container_id,
 4    t2.license_plate
 5FROM orders t1
 6JOIN drivers t2 ON t1.driver_id = t2.driver_id
 7WHERE
 8    t1.route_path LIKE '%深圳转运心%'
 9    AND t1.weight_kg BETWEEN 45.50 AND 45.60
10    AND t2.phone LIKE '%9527'
11    AND t1.handling_code = 'LIDAR_QC_HOLD';

1sqlite3 sqlite.db

 1.mode column
 2.headers on
 3
 4SELECT
 5    t1.container_id,
 6    t2.license_plate
 7FROM orders t1
 8JOIN drivers t2 ON t1.driver_id = t2.driver_id
 9WHERE
10    t1.route_path LIKE '%深圳转运心%'
11    AND t1.weight_kg BETWEEN 45.50 AND 45.60
12    AND t2.phone LIKE '%9527'
13    AND t1.handling_code = 'LIDAR_QC_HOLD';

 1def padding(msg):
 2    tmp = 16 - len(msg) % 16
 3    pad = format(tmp, '02x')
 4    return bytes.fromhex(pad * tmp) + msg
 5
 6message = padding(flag)                    # 第一次填充
 7hint = bytes_to_long(key) ^ bytes_to_long(message[:16])  # 侧信道泄露
 8message = pad(message, 16, 'pkcs7')        # 第二次填充 (PKCS7)
 9IV = os.urandom(16)
10encryption = AES.new(key, AES.MODE_CBC, iv=IV)
11enc = encryption.encrypt(message)

1hint = key XOR message[:16]

 1from Crypto.Cipher import AES
 2from Crypto.Util.number import *
 3from Crypto.Util.Padding import unpad
 4
 5enc = bytes.fromhex('1ce1df3812668ce0bccd86c146cc56989681e128edd0676f5d26e01abdee90c860e22a5a491f94ac5ca3ab02242740fb8c35a3b60ea737ca0d2662fba2b0e299')
 6hint = int('32393f4e3c3c4f3e323a512a5356437d', 16)
 7
 8# 已知前15字节
 9padding_1st = 10
10known_prefix = bytes([padding_1st] * padding_1st) + b'flag{'
11
12# 分割密文块
13blocks = [enc[i:i+16] for i in range(0, len(enc), 16)]
14
15# 爆破第16字节
16for byte_val in range(32, 127):
17    test_msg_block1 = known_prefix + bytes([byte_val])
18    test_key = long_to_bytes(hint ^ bytes_to_long(test_msg_block1), 16)
19    
20    # 使用ECB解密各块
21    cipher = AES.new(test_key, AES.MODE_ECB)
22    dec_blocks = [cipher.decrypt(b) for b in blocks]
23    
24    # 检查最后一块是否为PKCS7填充
25    last_pt = bytes([dec_blocks[3][j] ^ blocks[2][j] for j in range(16)])
26    
27    if last_pt == bytes([0x10] * 16):
28        # 密钥正确！恢复IV
29        iv = bytes([dec_blocks[0][j] ^ test_msg_block1[j] for j in range(16)])
30        
31        # 完整解密
32        cipher_cbc = AES.new(test_key, AES.MODE_CBC, iv=iv)
33        plaintext = unpad(cipher_cbc.decrypt(enc), 16)
34        
35        # 去除第一次填充
36        flag = plaintext[padding_1st:]
37        
38        if flag.startswith(b'flag{') and flag.endswith(b'}'):
39            print(f"Flag: {flag.decode()}")
40            break

1checkpoint = torch.load('multimodal_model.pth', map_location='cpu')

1input_dim = checkpoint['fc1.weight'].shape[1]   # 20
2hidden1_dim = checkpoint['fc1.weight'].shape[0]  # 64
3hidden2_dim = checkpoint['fc2.weight'].shape[0]  # 32
4output_dim = checkpoint['fc3.weight'].shape[0]   # 27

 1#!/usr/bin/env python3
 2import torch
 3import torch.nn as nn
 4from PIL import Image
 5import numpy as np
 6
 7# 定义模型结构
 8class MultiModalModel(nn.Module):
 9    def __init__(self, input_dim=20, hidden1_dim=64, hidden2_dim=32, output_dim=27):
10        super(MultiModalModel, self).__init__()
11        self.fc1 = nn.Linear(input_dim, hidden1_dim)
12        self.relu1 = nn.ReLU()
13        self.fc2 = nn.Linear(hidden1_dim, hidden2_dim)
14        self.relu2 = nn.ReLU()
15        self.fc3 = nn.Linear(hidden2_dim, output_dim)
16    
17    def forward(self, x):
18        x = self.fc1(x)
19        x = self.relu1(x)
20        x = self.fc2(x)
21        x = self.relu2(x)
22        x = self.fc3(x)
23        return x
24
25# 加载图片
26img = Image.open('secret_image.png')
27img_array = np.array(img)
28
29# 加载模型
30checkpoint = torch.load('multimodal_model.pth', map_location='cpu')
31model = MultiModalModel()
32model.load_state_dict(checkpoint)
33model.eval()
34
35# 提取特征 - 按列优先（上到下）
36features = []
37for row in range(20):
38    r_value = img_array[row, 0, 0]  # 第1列，前20行
39    features.append(r_value % 10)
40
41features = np.array(features, dtype=np.float32)
42print(f"提取的特征: {features}")
43
44# 模型推理
45with torch.no_grad():
46    input_tensor = torch.tensor(features).unsqueeze(0)
47    output = model(input_tensor)
48    ascii_codes = output.squeeze().numpy().round().astype(int)
49    flag = ''.join([chr(code) for code in ascii_codes])
50    
51    print(f"Flag: {flag}")

1[3, 8, 7, 2, 9, 1, 4, 0, 5, 6, 8, 7, 9, 2, 1, 4, 0, 5, 3, 6]

 1# 正确的实现方式
 2class SecureStego:
 3    def __init__(self, key):
 4        self.key = key
 5        self.model = load_server_model()  # 服务端模型
 6    
 7    def embed(self, image, message):
 8        # 使用密钥加密消息
 9        encrypted = encrypt(message, self.key)
10        # 动态生成隐写位置
11        positions = derive_positions(self.key, image.shape)
12        # 嵌入加密数据
13        stego_image = embed_at_positions(image, encrypted, positions)
14        return stego_image
15    
16    def extract(self, stego_image):
17        # 需要密钥才能提取
18        positions = derive_positions(self.key, stego_image.shape)
19        encrypted = extract_from_positions(stego_image, positions)
20        # 调用服务端API解密
21        message = api_decrypt(encrypted, self.key)
22        return message

1unzip 数据处理.zip

1# 使用tshark查看协议统计
2tshark -r attack.pcapng -q -z io,phs

 1import dpkt
 2
 3# 读取pcap文件
 4with open('attack.pcapng', 'rb') as f:
 5    pcap = dpkt.pcapng.Reader(f)
 6    packets = list(pcap)
 7
 8# 分析HTTP POST请求
 9for ts, buf in packets:
10    eth = dpkt.ethernet.Ethernet(buf)
11    if isinstance(eth.data, dpkt.ip.IP):
12        ip = eth.data
13        if isinstance(ip.data, dpkt.tcp.TCP):
14            tcp = ip.data
15            if b'POST /login' in tcp.data:
16                print("发现POST登录请求")

 1import dpkt
 2import re
 3from urllib.parse import unquote
 4
 5credentials = []
 6
 7for ts, buf in packets:
 8    try:
 9        eth = dpkt.ethernet.Ethernet(buf)
10        ip = eth.data
11        tcp = ip.data
12        
13        if len(tcp.data) > 0:
14            data_str = tcp.data.decode('utf-8', errors='ignore')
15            
16            # 查找POST登录请求
17            if 'POST /login' in data_str and 'username=' in data_str:
18                if '\r\n\r\n' in data_str:
19                    body = data_str.split('\r\n\r\n', 1)[1]
20                    decoded_body = unquote(body)
21                    
22                    # 提取用户名和密码
23                    username = re.search(r'username=([^&]+)', decoded_body)
24                    password = re.search(r'password=([^&\s]+)', decoded_body)
25                    
26                    if username and password:
27                        credentials.append(
28                            (username.group(1), password.group(1))
29                        )
30    except:
31        pass
32
33print(f"共提取 {len(credentials)} 组凭证")

 1# 统计HTTP响应的Content-Length
 2response_lengths = {}
 3
 4for ts, buf in packets:
 5    try:
 6        eth = dpkt.ethernet.Ethernet(buf)
 7        ip = eth.data
 8        tcp = ip.data
 9        
10        # 只看服务器响应（sport=5000）
11        if tcp.sport == 5000 and len(tcp.data) > 0:
12            data_str = tcp.data.decode('utf-8', errors='ignore')
13            if 'Content-Length:' in data_str:
14                match = re.search(r'Content-Length: (\d+)', data_str)
15                if match:
16                    length = int(match.group(1))
17                    response_lengths[length] = response_lengths.get(length, 0) + 1
18    except:
19        pass
20
21for length, count in sorted(response_lengths.items()):
22    print(f"长度 {length}: {count} 次")

 1# 查找302响应
 2for stream_key, packets_list in tcp_streams.items():
 3    for pkt in packets_list:
 4        data_str = pkt['data'].decode('utf-8', errors='ignore')
 5        
 6        if 'HTTP/1.1 302 FOUND' in data_str:
 7            print("找到302重定向！")
 8            print(data_str)
 9            
10            # 找到对应的POST请求
11            for req_pkt in packets_list:
12                req_str = req_pkt['data'].decode('utf-8', errors='ignore')
13                if 'POST /login' in req_str:
14                    # 提取凭证...

1HTTP/1.1 302 FOUND
2Server: Werkzeug/3.1.4 Python/3.12.12
3Date: Tue, 09 Dec 2025 03:06:18 GMT
4Content-Type: text/html; charset=utf-8
5Content-Length: 189
6Location: /
7Vary: Cookie
8Set-Cookie: session=eyJsb2dnZWRfaW4iOnRydWV9.aTeSKg.wNp00wl0i77Wq6sQpxH_rHrjtT8; HttpOnly; Path=/
9Connection: close

1POST /login HTTP/1.1
2Host: 172.16.4.135:32768
3Content-Type: application/x-www-form-urlencoded
4Content-Length: 48
5
6username=admin&password=Adm1n%402024%23Secure%21Pass

 1#!/usr/bin/env python3
 2import dpkt
 3import socket
 4import re
 5from urllib.parse import unquote
 6
 7def solve():
 8    pcap_file = 'attack.pcapng'
 9    
10    with open(pcap_file, 'rb') as f:
11        try:
12            pcap = dpkt.pcapng.Reader(f)
13            packets = list(pcap)
14        except:
15            f.seek(0)
16            pcap = dpkt.pcap.Reader(f)
17            packets = list(pcap)
18    
19    # 按TCP流组织数据
20    tcp_streams = {}
21    
22    for ts, buf in packets:
23        try:
24            eth = dpkt.ethernet.Ethernet(buf)
25            if not isinstance(eth.data, dpkt.ip.IP):
26                continue
27            
28            ip = eth.data
29            if not isinstance(ip.data, dpkt.tcp.TCP):
30                continue
31            
32            tcp = ip.data
33            src_ip = socket.inet_ntop(socket.AF_INET, ip.src)
34            dst_ip = socket.inet_ntop(socket.AF_INET, ip.dst)
35            
36            if src_ip < dst_ip:
37                stream_key = (src_ip, tcp.sport, dst_ip, tcp.dport)
38            else:
39                stream_key = (dst_ip, tcp.dport, src_ip, tcp.sport)
40            
41            if stream_key not in tcp_streams:
42                tcp_streams[stream_key] = []
43            
44            tcp_streams[stream_key].append({
45                'src': src_ip,
46                'sport': tcp.sport,
47                'data': tcp.data
48            })
49        except:
50            pass
51    
52    # 查找302响应和对应的登录凭证
53    for stream_key, packets_list in tcp_streams.items():
54        for pkt in packets_list:
55            if len(pkt['data']) > 0:
56                data_str = pkt['data'].decode('utf-8', errors='ignore')
57                
58                if 'HTTP/1.1 302 FOUND' in data_str:
59                    # 找到对应的POST请求
60                    for req_pkt in packets_list:
61                        if len(req_pkt['data']) > 0:
62                            req_str = req_pkt['data'].decode('utf-8', errors='ignore')
63                            
64                            if 'POST /login' in req_str and 'username=' in req_str:
65                                if '\r\n\r\n' in req_str:
66                                    body = req_str.split('\r\n\r\n', 1)[1]
67                                    decoded_body = unquote(body)
68                                    
69                                    username_match = re.search(r'username=([^&]+)', decoded_body)
70                                    password_match = re.search(r'password=([^&\s]+)', decoded_body)
71                                    
72                                    if username_match and password_match:
73                                        username = username_match.group(1)
74                                        password = password_match.group(1)
75                                        
76                                        flag = f"{username}:{password}"
77                                        print(f"[+] 找到成功的登录凭证！")
78                                        print(f"[+] Flag: {flag}")
79                                        return flag
80
81if __name__ == '__main__':
82    solve()

1python3 solve.py

1head -5 '#U5c45#U6c11#U4fe1#U606f#U8868.csv'

1序号,姓名,身份证号,手机号码,家庭住址,职位,单位
21,5ruh6bmP,NTAwMjM3MTk0MDA3MjkyNzk5,MTUyNzc4MzUzMjc=,6Z2S5rW355yB5rKI6Ziz5biC5ZCI5bed5b6Q6KGXOeWPtw==,5rG96L2m6KOF6aWw576O5a65,6bi/552/5oCd5Y2a5L+h5oGv5pyJ6ZmQ5YWs5Y+4
32,5p2O5biG,MjMwNDA1MjAwMzA3MjYyNTI3,MTUxNzQ3MjU2Mzc=,5rmW5YyX55yB5L2b5bGx5Y6/55m95LqR5byg6LevNTnlj7c=,5pWw5o2u6YCa5L+h5bel56iL5biI,5LiD5Zac5Lyg5aqS5pyJ6ZmQ5YWs5Y+4
4...

 1import base64
 2
 3# 测试第一行数据
 4name = '5ruh6bmP'
 5phone = 'MTUyNzc4MzUzMjc='
 6address = '6Z2S5rW355yB5rKI6Ziz5biC5ZCI5bed5b6Q6KGXOeWPtw=='
 7
 8print('姓名:', base64.b64decode(name).decode('utf-8'))
 9print('手机:', base64.b64decode(phone).decode('utf-8'))
10print('住址:', base64.b64decode(address).decode('utf-8'))

 1#!/usr/bin/env python3
 2import base64
 3import csv
 4
 5target_phone = '18896239239'
 6found = False
 7
 8with open('#U5c45#U6c11#U4fe1#U606f#U8868.csv', 'r', encoding='utf-8-sig') as f:
 9    reader = csv.DictReader(f)
10    
11    for row in reader:
12        try:
13            # 解码手机号
14            phone_encoded = row['手机号码']
15            phone = base64.b64decode(phone_encoded).decode('utf-8')
16            
17            # 检查是否是目标手机号
18            if phone == target_phone:
19                # 解码所有信息
20                name = base64.b64decode(row['姓名']).decode('utf-8')
21                id_card = base64.b64decode(row['身份证号']).decode('utf-8')
22                address = base64.b64decode(row['家庭住址']).decode('utf-8')
23                position = base64.b64decode(row['职位']).decode('utf-8')
24                company = base64.b64decode(row['单位']).decode('utf-8')
25                
26                print('找到目标记录！')
27                print('=' * 60)
28                print(f'序号: {row["序号"]}')
29                print(f'姓名: {name}')
30                print(f'身份证号: {id_card}')
31                print(f'手机号码: {phone}')
32                print(f'家庭住址: {address}')
33                print(f'职位: {position}')
34                print(f'单位: {company}')
35                print('=' * 60)
36                print()
37                print(f'答案: {address}')
38                found = True
39                break
40        except Exception as e:
41            continue
42
43if not found:
44    print('未找到该手机号')

1python3 find_address.py

 1python3 -c "
 2import base64, csv
 3target = '18896239239'
 4with open('#U5c45#U6c11#U4fe1#U606f#U8868.csv', 'r', encoding='utf-8-sig') as f:
 5    for row in csv.DictReader(f):
 6        try:
 7            phone = base64.b64decode(row['手机号码']).decode('utf-8')
 8            if phone == target:
 9                address = base64.b64decode(row['家庭住址']).decode('utf-8')
10                print(f'答案: {address}')
11                break
12        except: pass
13"

 1import base64
 2import csv
 3
 4names = []
 5
 6with open('#U5c45#U6c11#U4fe1#U606f#U8868.csv', 'r', encoding='utf-8-sig') as f:
 7    reader = csv.DictReader(f)
 8    
 9    for row in reader:
10        try:
11            name_encoded = row['姓名']
12            name = base64.b64decode(name_encoded).decode('utf-8')
13            names.append(name)
14        except:
15            continue
16
17print(f'总共解码了 {len(names)} 个姓名')

 1from collections import Counter
 2
 3# 统计姓名出现次数
 4name_counter = Counter(names)
 5
 6# 获取出现次数最多的10个姓名
 7most_common = name_counter.most_common(10)
 8
 9print('出现次数最多的前10个姓名:')
10for name, count in most_common:
11    print(f'{name}: {count} 次')

1# 获取重名最多的姓名和次数
2top_name, top_count = most_common[0]
3
4print(f'重名最多的人: {top_name}')
5print(f'出现次数: {top_count}')
6print(f'答案: {top_name}{top_count}')

 1print('验证：所有叫"刘红梅"的记录')
 2print('=' * 80)
 3
 4with open('#U5c45#U6c91#U4fe1#U606f#U8868.csv', 'r', encoding='utf-8-sig') as f:
 5    reader = csv.DictReader(f)
 6    count = 0
 7    
 8    for row in reader:
 9        try:
10            name = base64.b64decode(row['姓名']).decode('utf-8')
11            if name == '刘红梅':
12                count += 1
13                id_card = base64.b64decode(row['身份证号']).decode('utf-8')
14                phone = base64.b64decode(row['手机号码']).decode('utf-8')
15                address = base64.b64decode(row['家庭住址']).decode('utf-8')
16                print(f'{count}. 序号:{row["序号"]:>4} | 身份证:{id_card} | 手机:{phone}')
17        except:
18            continue
19
20print(f'确认：刘红梅 出现了 {count} 次')

 1#!/usr/bin/env python3
 2import base64
 3import csv
 4from collections import Counter
 5
 6def solve():
 7    # 读取CSV并解码所有姓名
 8    names = []
 9    
10    with open('#U5c45#U6c11#U4fe1#U606f#U8868.csv', 'r', encoding='utf-8-sig') as f:
11        reader = csv.DictReader(f)
12        
13        for row in reader:
14            try:
15                name_encoded = row['姓名']
16                name = base64.b64decode(name_encoded).decode('utf-8')
17                names.append(name)
18            except:
19                continue
20    
21    print(f'总共有 {len(names)} 条记录')
22    print()
23    
24    # 统计姓名出现次数
25    name_counter = Counter(names)
26    
27    # 找出出现次数最多的姓名
28    most_common = name_counter.most_common(10)
29    
30    print('出现次数最多的前10个姓名:')
31    print('=' * 60)
32    for name, count in most_common:
33        print(f'{name}: {count} 次')
34    
35    print()
36    print('=' * 60)
37    top_name, top_count = most_common[0]
38    print(f'重名最多的人: {top_name}')
39    print(f'出现次数: {top_count}')
40    print()
41    print(f'答案: {top_name}{top_count}')
42    
43    return f'{top_name}{top_count}'
44
45if __name__ == '__main__':
46    answer = solve()

1python3 solve.py

 1python3 -c "
 2import base64, csv
 3from collections import Counter
 4names = []
 5with open('#U5c45#U6c11#U4fe1#U606f#U8868.csv', 'r', encoding='utf-8-sig') as f:
 6    for row in csv.DictReader(f):
 7        try: names.append(base64.b64decode(row['姓名']).decode('utf-8'))
 8        except: pass
 9top = Counter(names).most_common(1)[0]
10print(f'答案: {top[0]}{top[1]}')
11"

1file disk.img

1xxd disk.img | head -20

1sudo blkid disk.img

1strings disk.img | head -100

1# 创建输出目录
2mkdir recovered_files
3
4# 运行foremost恢复
5foremost -i disk.img -o recovered_files -v

1ls -R recovered_files/

1# 方法1: 直接打开PDF查看
2xdg-open recovered_files/pdf/00351776.pdf
3
4# 方法2: 转换为文本后搜索
5pdftotext recovered_files/pdf/00351776.pdf - | grep "HT-"
6
7# 方法3: 使用strings搜索
8strings recovered_files/pdf/00351776.pdf | grep "HT-"

1tshark -r <pcap_file> \
2  -o "tls.keys_list:0.0.0.0,443,http,id285_key.pem" \
3  -Y "http" \
4  -T fields \
5  -e http.request.uri

1$ echo -n "mAqY0WRHsV.pcap" | md5sum
21f5c34eab5696a300afff7452b7f7e6a