https://ruajingjing.top/tags/%E5%9B%BE%E7%89%87%E9%9A%90%E5%86%99/Recent content in 图片隐写 on 静静的安全笔记Hugo -- gohugo.iozh-CNThu, 08 Aug 2024 16:13:45 +0000https://ruajingjing.top/post/0101-boy-play-gta/Thu, 08 Aug 2024 16:13:45 +0000https://ruajingjing.top/post/0101-boy-play-gta/<img src="https://ruajingjing.top/" alt="Featured image of post 0101 BOY PLAY GTA" /> <blockquote> <p><a class="link" href="https://blog.csdn.net/weixin_48427966/article/details/124745652" target="_blank" rel="noopener" >https://blog.csdn.net/weixin_48427966/article/details/124745652</a></p> </blockquote> <p><img alt="图0" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-09-30-07.png"></p> <p><img alt="图1" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-09-35-12.png"></p> <p><img alt="图2" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-09-36-55.png"></p> <p><img alt="图3" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-09-40-11.png"></p> <p><code>K9@?88F@;:2J@F</code> rot47解密是 <code>zhongguojiayou</code> 用作 <code>flag.zip</code> 的解压密码得到新图片。</p> <p><img alt="图4" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-09-41-44.png"></p> <p><img alt="图5" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-09-43-33.png"></p> <p><img alt="图6" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-09-46-44.png"></p> <p>Zsteg分析有BMP图。zsteg 安装见末尾。</p> <p><img alt="图7" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-10-20-28.png"></p> <p><img alt="图8" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-10-48-28.png"></p> <p><img alt="图9" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://newblogimg.oss-cn-beijing.aliyuncs.com/2024/2024070809/2024-08-08-10-54-15.png"></p> <p><code>illg{rd1a0_od_rg_hx???}</code> 解密得到 <code>flag{da1a0_dd_dd_hm???}</code></p> <p>完整命令</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="ln"> 1</span><span class="cl">unzip BOY_PLAY_GTA.zip </span></span><span class="line"><span class="ln"> 2</span><span class="cl">exiftool dalao.png </span></span><span class="line"><span class="ln"> 3</span><span class="cl">binwalk dalao.png </span></span><span class="line"><span class="ln"> 4</span><span class="cl">binwalk dalao.png -e --run-as<span class="o">=</span>root </span></span><span class="line"><span class="ln"> 5</span><span class="cl">cat key.txt </span></span><span class="line"><span class="ln"> 6</span><span class="cl">unzip flag.zip <span class="c1"># 输入密码 zhongguojiayou</span> </span></span><span class="line"><span class="ln"> 7</span><span class="cl">git clone https://github.com/zed-0xff/zsteg </span></span><span class="line"><span class="ln"> 8</span><span class="cl"><span class="nb">cd</span> zsteg </span></span><span class="line"><span class="ln"> 9</span><span class="cl">gem sources -l <span class="c1"># 查看现有源</span> </span></span><span class="line"><span class="ln">10</span><span class="cl">gem sources --remove https://rubygems.org/ <span class="c1"># 删除国外源</span> </span></span><span class="line"><span class="ln">11</span><span class="cl">gem sources -a http://gems.ruby-china.com/ </span></span><span class="line"><span class="ln">12</span><span class="cl">gem install zsteg </span></span><span class="line"><span class="ln">13</span><span class="cl">zsteg ../Boy<span class="se">\ </span>Play<span class="se">\ </span>GTA.png </span></span><span class="line"><span class="ln">14</span><span class="cl">zsteg ../Boy<span class="se">\ </span>Play<span class="se">\ </span>GTA.png -E extradata:0 -&gt; dalao2.bpg </span></span></code></pre></div>