TA的每日心情 | 奋斗 2019-5-22 23:11 |
---|
签到天数: 14 天 [LV.3]偶尔看看II
|
摘要:目测需要输入,四个数字,后缀.php. 生成四位数字典就是,然后再每一列字典后面加上.php 于是开始跑, 就得出最后一关地址了 http://game.f4ck.net/xxx.php
第一关
By aoy
下载了sendpacket,
这个好办啊. 打开WSExplorer 1.2 监听进程.监听的数据包内容如下.
Host: game.f4ck.net
Accept-Encoding: identity
Content-Length: 26
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded
next+level=jfasdsdlml.html
--------------------------------------------------------------------------------
?
P
POST /first.html HTTP/1.1
在content-Type: application/x-www-form-urlencoded
下的
next+level=jfasdsdlml.html
已经很明显提示出了第二关的地址.
game.f4ck.net/xx1.html
第二关
很明显是需要搞爆破啊,有木有!
Burpsuit载入字典就搞定了,自动判断状态…
输入密码后,第三关的地址就出来了
http://game.f4ck.net/xx2.html
第三关
这个写个排列组合算法生成字典就ok了
using System;
using System.Collections.Generic;
using System.Text;
namespace ConsoleApplication1
{
class Program
{
static void Main(string[] args)
{
int i = 1;
while (i <= 100)
{
Random r = new Random();
int rand = r.Next(10);
string s = "fck" + rand.ToString()+rand.ToString();
char[] ch = s.ToCharArray();
string result = "";
while (result.Length < 5)
{
Random randtemp = new Random();
int rtemp = randtemp.Next(ch.Length);
if (result.IndexOf(ch[rtemp].ToString()) == -1)
{
result += ch[rtemp].ToString();
}
}
Console.WriteLine(result);
i++;
}
}
}
http://game.f4ck.net/xx3.html
POST /login.php HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/msword, application/vnd.ms-excel, application/vnd.ms-powerpoint, */*
Referer: http://game.f4ck.net/sjkad.html
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
Host: game.f4ck.net
Content-Length: 31
Proxy-Connection: Keep-Alive
Pragma: no-cache
Connection: close
password=f4ck9&log=%B5%C7%C2%BC
遇到比较数据包大小
输入密码得出最后一关的地址
http://game.f4ck.net/xx4k.html
.终极关卡.
crackme
逆向实在.不会..
学过点C语言,载入od后,查找字符串, %d%d%d%d
目测需要输入,四个数字,后缀.php.
生成四位数字典就是,然后再每一列字典后面加上.php
于是开始跑, 就得出最后一关地址了
http://game.f4ck.net/xxx.php
|
|