湖湘杯 2020 writeup

太菜了。

misc

颜文字得秘密

导出文件,在index-demo.html中发现base64信息

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
KO+9oe+9peKIgO+9pSnvvonvvp7ll6hIaX4gCm==
KO+8oF/vvKA7KSjvvKBf77ygOyko77ygX++8oDspCr==
KCtfKyk/KOOAgj7vuL88KV/OuCjjgII+77i/PClfzrgK
bygq77+j4pa977+jKinjg5bjgpwK
77yc77yI77y+77yN77y+77yJ77yeKOKVr+KWveKVsCAp5aW96aaZfn4K
44O9KOKcv+++n+KWve++nynjg44o77yg77y+77yQ77y+KQp=
KF5e44Kezqgo77+j4oiA77+jKc6oKuKYhSzCsCo6LuKYhijvv6Pilr3vv6MpLyQ6Ki7CsOKYhSog44CCCp==
flwo4omn4pa94ommKS9+byhe4pa9XilvKMKs4oC/wqwpKCriiafvuLbiiaYpKSjvv6Pilr3vv6MqICnjgp7ilLPilIHilLMo4pWv4oC14pah4oCyKeKVr++4teKUu+KUgeKUuwp=
4pSz4pSB4pSzIOODjigg44KcLeOCnOODjingsqBf4LKgCn==
4LKgX+CyoCjila/igLXilqHigLIp4pWv54K45by577yB4oCi4oCi4oCiKu+9nuKXjyjCrF/CrCApCp==
KOODjuOBuO+/o+OAgSlvKO+/o+KUsO+/oyop44Ke4pWwKOiJueeav+iJuSAp77yI77i2Xu+4tu+8iSgqIO+/o++4v++/oyko77+jzrUoI++/oykK
KO++n9CU776fKinvvonil4t877+jfF8gPTMo44OO772A0JQp44OOKOKAstC0772Az4Mpz4Mo77+i77i/zKvMv++/ouKYhinvvZ4o44CAVOODrVQpz4M8KCDigLXilqHigLIpPuKUgOKUgAo=
KMKsX8KsIiko77+j77mP77+j77ybKSjila/CsOKWocKw77yJ4pWv77i1IOKUu+KUgeKUu+ODvSjjgpzilr3jgpzjgIAp77yNQzwoLzvil4c7KS9+KOODmO+9pV/vvaUp44OY4pSz4pSB4pSzCu==
4LKgX+CyoCjila/igLXilqHigLIp4pWv54K45by577yB4oCi4oCi4oCiKu+9nuKXjyjCrF/CrCApCo==
KOKKmcuN4oqZKe+8nyjPg++9gNC04oCyKc+DPCgg4oC14pah4oCyKT7ilIDilIDilIDvvKPOtSjilKzvuY/ilKwpMzwoIOKAteKWoeKAsinilIDilIDilIBD77yc4pSAX19fLSl8fO+9nijjgIBU44OtVCnPgyjjgIMK
4oqZ77mP4oqZ4oil44O9KCrjgII+0JQ8KW/jgpwvKOOEkm/jhJIpL35+KCNfPC0p77yI77ye5Lq677yc77yb77yJCo==
KOODjuOBuO+/o+OAgSlvKO+/o+KUsO+/oyop44Ke4pWwKOiJueeav+iJuSAp77yI77i2Xu+4tu+8iSgqIO+/o++4v++/oyko77+jzrUoI++/oykK
KO++n9CU776fKinvvonil4t877+jfF8gPTMo44OO772A0JQp44OOKOKAstC0772Az4Mpz4Mo77+i77i/zKvMv++/ouKYhinvvZ4o44CAVOODrVQpz4M8KCDigLXilqHigLIpPuKUgOKUgAq=
KOKKmcuN4oqZKe+8nyjPg++9gNC04oCyKc+DPCgg4oC14pah4oCyKT7ilIDilIDilIDvvKPOtSjilKzvuY/ilKwpMzwoIOKAteKWoeKAsinilIDilIDilIBD77yc4pSAX19fLSl8fO+9nijjgIBU44OtVCnPgyjjgIPvvJ7nm67vvJwpCm==
KG/vvp92776fKeODjmQ9PT09PSjvv6Pilr3vv6MqKWLOtT3OtT3OtT0ofu+/o+KWve+/oyl+KOKdpCDPiSDinaQpVeKAouOCp+KAoipVCs==
KO++n9CU776fKinvvonil4t877+jfF8gPTMo44OO772A0JQp44OOKOKAstC0772Az4Mpz4Mo77+i77i/zKvMv++/ouKYhinvvZ4o44CAVOODrVQpz4M8KCDigLXilqHigLIpPuKUgOKUgAp=
KOKKmcuN4oqZKe+8nyjPg++9gNC04oCyKc+DPCgg4oC14pah4oCyKT7ilIDilIDilIDvvKPOtSjilKzvuY/ilKwpMzwoIOKAteKWoeKAsinilIDilIDilIBD77yc4pSAX19fLSl8fO+9nijjgIBU44OtVCnPgyjjgIPvvJ7nm67vvJwpCr==
KG/vvp92776fKeODjmQ9PT09PSjvv6Pilr3vv6MqKWLOtT3OtT3OtT0ofu+/o+KWve+/oyl+KOKdpCDPiSDinaQpVeKAouOCp+KAoipVCt==
KO++n9CU776fKinvvonil4t877+jfF8gPTMo44OO772A0JQp44OOKOKAstC0772Az4Mpz4Mo77+i77i/zKvMv++/ouKYhinvvZ4o44CAVOODrVQpz4M8KCDigLXilqHigLIpPuKUgOKUgAr=
KOKKmcuN4oqZKe+8nyjPg++9gNC04oCyKc+DPCgg4oC14pah4oCyKT7ilIDilIDilIDvvKPOtSjilKzvuY/ilKwpMzwoIOKAteKWoeKAsinilIDilIDilIBD77yc4pSAX19fLSl8fO+9nijjgIBU44OtVCnPgyjjgIPvvJ7nm67vvJwpCi==
KG/vvp92776fKeODjmQ9PT09PSjvv6Pilr3vv6MqKWLOtT3OtT3OtT0ofu+/o+KWve+/oyl+KOKdpCDPiSDinaQpVeKAouOCp+KAoipVCn==
KO++n9CU776fKinvvonil4t877+jfF8gPTMo44OO772A0JQp44OOKOKAstC0772Az4Mpz4Mo77+i77i/zKvMv++/ouKYhinvvZ4o44CAVOODrVQpz4M8KCDigLXilqHigLIpPuKUgOKUgAo=
KOKKmcuN4oqZKe+8nyjPg++9gNC04oCyKc+DPCgg4oC14pah4oCyKT7ilIDilIDilIDvvKPOtSjilKzvuY/ilKwpMzwoIOKAteKWoeKAsinilIDilIDilIBD77yc4pSAX19fLSl8fO+9nijjgIBU44OtVCnPgyjjgIPvvJ7nm67vvJwpCp==
KG/vvp92776fKeODjmQ9PT09PSjvv6Pilr3vv6MqKWLOtT3OtT3OtT0ofu+/o+KWve+/oyl+KOKdpCDPiSDinaQpVeKAouOCp+KAoipVCq==
KG/vvp92776fKeODjmQ9PT09PSjvv6Pilr3vv6MqKWLOtT3OtT3OtT0ofu+/o+KWve+/oyl+KOKdpCDPiSDinaQpVeKAouOCp+KAoipVCl==
KO++n9CU776fKinvvonil4t877+jfF8gPTMo44OO772A0JQp44OOKOKAstC0772Az4Mpz4Mo77+i77i/zKvMv++/ouKYhinvvZ4o44CAVOODrVQpz4M8KCDigLXilqHigLIpPuKUgOKUgAq=
KOKKmcuN4oqZKe+8nyjPg++9gNC04oCyKc+DPCgg4oC14pah4oCyKT7ilIDilIDilIDvvKPOtSjilKzvuY/ilKwpMzwoIOKAteKWoeKAsinilIDilIDilIBD77yc4pSAX19fLSl8fO+9nijjgIBU44OtVCnPgyjjgIPvvJ7nm67vvJwpCl==
KG/vvp92776fKeODjmQ9PT09PSjvv6Pilr3vv6MqKWLOtT3OtT3OtT0ofu+/o+KWve+/oyl+KOKdpCDPiSDinaQpVeKAouOCp+KAoipVCi==
KOKVr+KAteKWoeKAsinila/ngrjlvLnvvIHigKLigKLigKIK
KOKVr+KAteKWoeKAsinila/ngrjlvLnvvIHigKLigKLigKIK
KOKVr+KAteKWoeKAsinila/ngrjlvLnvvIHigKLigKLigKIK
KOKVr+KAteKWoeKAsinila/ngrjlvLnvvIHigKLigKLigKIo4pWv4oC14pah4oCyKeKVr+eCuOW8ue+8geKAouKAouKAoijila/igLXilqHigLIp4pWv54K45by577yB4oCi4oCi4oCiKOKVr+KAteKWoeKAsinila/ngrjlvLnvvIHigKLigKLigKIK
ZmxhZ+iiq+aIkeeCuOayoeS6huWTiOWTiOWTiC==

base64隐写,解密得到key

1
key:"lorrie"

index-demo.html进行snow解密,得到信息

1
flag{→_→←_←←_←←_←←_← →_→→_→←_←←_←←_← →_→←_←←_←←_← ←_←←_←←_←→_→→_→ ←_←←_←←_←→_→→_→ ←_← ←_←←_←←_←→_→→_→ →_→→_→→_→→_→←_← →_→←_←←_←←_← ←_←←_←←_←←_←←_← ←_←→_→→_→→_→→_→ →_→→_→→_→→_→→_→ ←_←←_←←_←←_←←_← ←_←←_←→_→←_← →_→←_←←_←←_← ←_←←_←←_←←_←→_→ ←_←→_→ ←_←←_←→_→→_→→_→ →_→→_→→_→→_→←_← ←_←←_←←_←←_←←_← ←_←←_←←_←→_→→_→ ←_←→_→ →_→→_→→_→→_→→_→ →_→←_←→_→←_← ←_← →_→→_→←_←←_←←_← →_→→_→→_→→_→←_← →_→←_←→_→←_← ←_←←_←←_←→_→→_→ ←_←←_←←_←→_→→_→ →_→→_→←_←←_←←_← →_→→_→→_→←_←←_←}

两种字符,摩斯密码,将→_→换为-←_←换为.,解密得flag

1
67b33e39b5105fb4a2953a0ce79c3378

隐藏之谜

查看当前登录信息,得知登录用户为CTF

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
❯ volatility -f WIN-BU6IJ7FI9RU-20190927-152050.raw --profile=Win7SP1x86 printkey -K "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
Volatility Foundation Volatility Framework 2.6
Legend: (S) = Stable (V) = Volatile

----------------------------
Registry: \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
Key name: Winlogon (S)
Last updated: 2009-07-14 04:34:14 UTC+0000

Subkeys:

Values:
REG_SZ ExcludeProfileDirs : (S) AppData\Local;AppData\LocalLow;$Recycle.Bin
----------------------------
Registry: \??\C:\Users\CTF\ntuser.dat
Key name: Winlogon (S)
Last updated: 2019-09-19 02:36:36 UTC+0000

Subkeys:

Values:
REG_SZ ExcludeProfileDirs : (S) AppData\Local;AppData\LocalLow;$Recycle.Bin
REG_DWORD BuildNumber : (S) 7601
REG_DWORD FirstLogon : (S) 0
----------------------------
Registry: \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
Key name: Winlogon (S)
Last updated: 2009-07-14 04:34:14 UTC+0000

Subkeys:

Values:
REG_SZ ExcludeProfileDirs : (S) AppData\Local;AppData\LocalLow;$Recycle.Bin

查看用户密码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
❯ volatility -f WIN-BU6IJ7FI9RU-20190927-152050.raw --profile=Win7SP1x86 hivelist
Volatility Foundation Volatility Framework 2.6
Virtual Physical Name
---------- ---------- ----
0x93fc41e8 0x030cf1e8 \SystemRoot\System32\Config\SAM
0x93fe7008 0x1bc6c008 \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
0x9494e9c8 0x11c9a9c8 \??\C:\Users\CTF\AppData\Local\Microsoft\Windows\UsrClass.dat
0x992de5d8 0x223cb5d8 \SystemRoot\System32\Config\DEFAULT
0x8a00c2b0 0x23e0a2b0 [no name]
0x8a01c008 0x24019008 \REGISTRY\MACHINE\SYSTEM
0x8a03d008 0x22dfa008 \REGISTRY\MACHINE\HARDWARE
0x8c6d99c8 0x22b499c8 \Device\HarddiskVolume1\Boot\BCD
0x8e00d9c8 0x189629c8 \??\C:\Users\CTF\ntuser.dat
0x8f97c008 0x22de2008 \SystemRoot\System32\Config\SOFTWARE
0x93fb19c8 0x00a759c8 \SystemRoot\System32\Config\SECURITY
0x93fb7440 0x03145440 \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT

❯ volatility -f WIN-BU6IJ7FI9RU-20190927-152050.raw --profile=Win7SP1x86 hashdump -y 0x8a01c008 -s 0x93fc41e8
Volatility Foundation Volatility Framework 2.6
Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
CTF:1000:aad3b435b51404eeaad3b435b51404ee:0a640404b5c386ab12092587fe19cd02:::

对CTF密码解密得qwer1234
sha1加密得flag

1
db25f2fc14cd2d2b1e7af307241f548fb03c312a

虚实之间

伪加密得mingwen-副本.txt

明文爆破得密码123%asd!O,注意,这里无法使用ARCHPR,会报错

得到flag.txt

1
2
仅需5,跳过去
ffd5e341le25b2dcab15cbb}gc3bc5b{789b51

栅栏解密,此处只能用千千秀字解密能正解flag

1
flag{febc7d2138555b9ebccb32b554dbb11c}

隐藏的秘密

查看截图发现打开了file.txt

1
❯ volatility -f 隐藏的秘密.vmem --profile=Win2003SP1x86 screenshot --dump-dir=./


提取file.txt

1
2
3
4
5
6
7
8
❯ volatility -f 隐藏的秘密.vmem --profile=Win2003SP1x86 filescan | grep file.txt
Volatility Foundation Volatility Framework 2.6
0x000000000412cde0 1 0 RW-r-- \Device\HarddiskVolume1\Documents and Settings\Administrator\桌面\file.txt
0x000000000479d4a8 4 2 -W-rw- \Device\HarddiskVolume1\Documents and Settings\All Users\Application Data\VMware\VMware VGAuth\logfile.txt.0
0x00000000049e6228 1 0 RW-rw- \Device\HarddiskVolume1\Documents and Settings\Administrator\Recent\file.txt.lnk
❯ volatility -f 隐藏的秘密.vmem --profile=Win2003SP1x86 dumpfiles -Q 0x000000000412cde0 --dump-dir=./
Volatility Foundation Volatility Framework 2.6
DataSectionObject 0x0412cde0 None \Device\HarddiskVolume1\Documents and Settings\Administrator\桌面\file.txt

得到提示

1
2
3
什么?计算机又被不知名账户登录了?明明在计算机管理中没有这个用户,为什么还会被这个用户登录呢?电脑跟前的你能帮我找到原因吗?flag为该用户的用户名以及密码的md5值。

格式:md5(用户名:密码)

查看密码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
❯ volatility -f 隐藏的秘密.vmem --profile=Win2003SP1x86 hivelist
Volatility Foundation Volatility Framework 2.6
Virtual Physical Name
---------- ---------- ----
0xe174a008 0x12eab008 \Device\HarddiskVolume1\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
0xe1013008 0x17b28008 [no name]
0xe101d008 0x17b31008 \Device\HarddiskVolume1\WINDOWS\system32\config\system
0xe12fb260 0x17851260 [no name]
0xe1756200 0x12df8200 \Device\HarddiskVolume1\WINDOWS\system32\config\SECURITY
0xe1763008 0x12d41008 \Device\HarddiskVolume1\WINDOWS\system32\config\default
0xe13c9a80 0x1776ea80 \Device\HarddiskVolume1\WINDOWS\system32\config\software
0xe1757860 0x12d8e860 \Device\HarddiskVolume1\WINDOWS\system32\config\SAM
0xe24560b0 0x0da280b0 \Device\HarddiskVolume1\Documents and Settings\NetworkService\NTUSER.DAT
0xe2460a80 0x0da35a80 \Device\HarddiskVolume1\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
0xe247c008 0x0d95b008 \Device\HarddiskVolume1\Documents and Settings\LocalService\NTUSER.DAT
0xe2484008 0x0d7eb008 \Device\HarddiskVolume1\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
0xe233aa80 0x0e0dda80 \Device\HarddiskVolume1\Documents and Settings\Administrator\NTUSER.DAT

提取密码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
❯ volatility -f 隐藏的秘密.vmem --profile=Win2003SP1x86 hashdump -y 0xe101d008 -s 0xe1757860
Volatility Foundation Volatility Framework 2.6
Administrator:500:f0d412bd764ffe81aad3b435b51404ee:209c6174da490caeb422f3fa5a7ae634:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
SUPPORT_388945a0:1001:aad3b435b51404eeaad3b435b51404ee:8d9221b8e70124641a83291d3d21f7e0:::
9w3a6J0$:1003:e761601f5cf981c136077a718ccdf409:ec9dc7d0895ad3dae1feba8ffdeacffd:::
4hiU9ZK$:1004:de5eea9d3fd12c34aad3b435b51404ee:2f2d544c53b3031f24d63402ea7fb4f9:::
A4W7iKb$:1005:61339c1be342167eaad3b435b51404ee:b6e6f6a85f90219d619aca4706f354fc:::
oeTQczq$:1006:b4d2cf4a862f6fcaaad3b435b51404ee:3fbc1f9dc4416f6fb3666de834185cb4:::
CAlrXyU$:1007:8ea6fb8594a1b952aad3b435b51404ee:51d603c77a884df049f7ed4dabed4fd4:::
AVqKsvQ$:1008:939e0f8990e68047aad3b435b51404ee:1796c2db94ce6276744f88b740152154:::
scdTbYy$:1009:792677ee54a26732891c5133c13673e8:138393419f9b418eb735d36e1da50a5e:::
KXlNBcf$:1010:17c6f830172f2731b75e0c8d76954a50:25c93091cdfabe015d6770734eb9024a:::
b4YNlvE$:1011:c827216bbf0c654d0ce4e57c62586573:b6bb4ce745d55b2f4bb87768c27bbbae:::
vxy921o$:1012:1e0ac88abba020c94827253349babf0f:476b1879238bea3eb0fe93575c76643e:::
Yl2GjDd$:1013:0182bd0bd4444bf838a0a8035a6a24c3:184dd4b8727cdbeaccb650da0579411b:::
fM8xa10$:1014:c7418a726d8b057faad3b435b51404ee:e807b0191fb9571ac66fdea1f2cc36c0:::
BMubfrk$:1015:17c6f830172f2731b75e0c8d76954a50:25c93091cdfabe015d6770734eb9024a:::
QrptqJl$:1016:4cd720fc5c37c747eacbeb9271fb3e7a:b9c0cbb8bba37e05b858d99864b5eb3a:::
flicduJ$:1017:e2302b9a91361d152b999340d53adc02:1600177b90b941691a5058540729b42e:::
jNXqO9a$:1018:58cdc0fa6c5fefb4aad3b435b51404ee:9e4b2858cab5d304d34413a0aabd2545:::
3ndmDSk$:1019:97ce1f5c10f5980baad3b435b51404ee:841f779368eff4c81bbc65e77191ecac:::
qpAZlPh$:1020:2d8c041ffa91df73aad3b435b51404ee:700ec8a682f6e41418007992fc604c77:::
qZGx64P$:1021:d986246dc1eab595c6ebe8776a153feb:61c5b38f4874f0effa68e165abba5e8e:::
JE71YxI$:1022:4001a65f34fec9e1aad3b435b51404ee:c8a71e6fd71767a0fba2d7419e1dd872:::
v86jpGa$:1023:ff5365e2b3a4f74c8eefe33a7f9bee0d:a854fab01395abacb0aca80c1a1e923c:::
1wqHfyP$:1024:9f4936a68670a3edaad3b435b51404ee:e16b2773ce02394bfcf44774d407caa7:::
YZQ6Oax$:1025:d1a5321ed4cd4d7072d3f90e28c9734d:4f63c2aa548d58aadbf66e612a2ae0df:::
YHZ5DSU$:1026:81943b4a2b58de5625ad3b83fa6627c7:66ee8a4472b160b48068d471e7617709:::
LV54FGr$:1027:b106ddf6b974c53caad3b435b51404ee:08badb3834b83aa015867405339cac2d:::
SboeqrN$:1028:4d2cd3ddad4e5505aad3b435b51404ee:3e86eec2da2eb6444a019239c2c3a3c9:::
3VmhSgQ$:1029:41cd5a6aaee151f27c3113b4a1a5e3a0:0b908c1eed51e5a053829db1b2252060:::
VZRNaTG$:1030:6c6d7eda6b250386aad3b435b51404ee:50927ac00deed09d873cd9cbed7117e0:::
xdip2JQ$:1031:a6cfe4dbd3bd8820aad3b435b51404ee:3d59f89e417b990bcd42753c1d520ca6:::
OJroIqR$:1032:e8b07bead898d459aad3b435b51404ee:c9bd43fce3a780c26c3af48a9cabba21:::
4brWN2d$:1033:c63a41ed1640fd46aad3b435b51404ee:3f0d07d829a940ba99c99845b277c7c2:::
C4HajW8$:1034:e15ae43dfc25355436077a718ccdf409:555fa089396338df14fa09ba51010929:::
D9gdyJ6$:1035:984233c512821fec6a744efc2e9bb9e0:e817e6f07d94639182bfe373641cd4c9:::
MK1537F$:1036:97370e3de8d06e7faad3b435b51404ee:cf3ddeb3c50b2f756511a636d5cfc9da:::
dTGeBR8$:1037:100c1a0933c07ebc25ad3b83fa6627c7:eb8d7885b9134700297a97fcfb5aabd3:::
4yBsAvX$:1038:81575b026f3643a0fc3a211d991668db:eef285f4c800bcd1ae1e84c371eeb282:::
5WM4Kiu$:1039:ff5365e2b3a4f74c8eefe33a7f9bee0d:a854fab01395abacb0aca80c1a1e923c:::
l2omEuU$:1040:0182bd0bd4444bf827880e58f3aaf553:d18603195f5ea12806f5c37072cc57e6:::
YjHkq1J$:1041:667c617d6fc55a45143f8bd9ae9e0363:12592eac5cc08e5210eed72c5f87799c:::
Cfy4KPZ$:1042:eb82185f6e82609daad3b435b51404ee:5855b0e9a7b53f7c18e2658623da2d24:::
p0sGlfe$:1043:45e61ad4a7d3b5f9aad3b435b51404ee:e2ae771ad0aba9cd5c9786efd59b1309:::
LQ2ktqN$:1044:886725fb8939901125ad3b83fa6627c7:0f49445be69a6c6adadb57f4fe9b4291:::
vWsgwnU$:1045:b3aca879c78af6caaad3b435b51404ee:c8037cb9d07b2326819162e20bf507d3:::
ocT8tlz$:1046:5a8e6058e8ba132eaad3b435b51404ee:50d827d8aee60198dafd73c44d0cb8c2:::
wTIkOyZ$:1047:aad3b435b51404eeaad3b435b51404ee:886d0c55f8a229df786ace40f6d516ba:::
CZ4Kgla$:1048:ef335dc31ee302fc3695cc4f69425ef3:e4ae08e88420fa300ef6368f522b305e:::
mB9NqKY$:1049:c23413a8a1e7665faad3b435b51404ee:674e48b68c5cd0efd8f7e5faa87b3d1e:::
nJbH7IR$:1050:9dde056cbd40369bf8c18b75411b6e5d:6a69f9b694ffb29aa591d99b0fdce4c3:::
VvqDpCA$:1051:87aca51a5ef4d19c1e929ffc01395127:9be37e32001a2370b9099652da550b03:::
10L6lYw$:1052:bb1368d102de6ce3c6ebe8776a153feb:8a25dff822df07d755f8635f2aec6ad9:::
SHUaeYf$:1053:302533da802449013dc9ed4746e3a614:306f05450ed4369934504c6121d231d3:::
pA1u4ei$:1054:f099de913ce63046df128b2dd32bad07:4b52faa6764ccc6258fa2f288e18954d:::
nc19X0Q$:1055:45347ed867da57e1aad3b435b51404ee:b7acbe9f91845bc2985f6d5c75ebbde9:::
iy2n9Px$:1056:a8528ab959b57f9cc81667e9d738c5d9:c977c09da2744b7264bb6f9f84cf4b29:::
8650twj$:1057:7cfe848a843e1879aad3b435b51404ee:8bbfb7a73bca97d9b7eb5d5a21715f10:::
OSr95zP$:1058:6676df840638e7dfc2265b23734e0dac:5c27e5976ea571ede4cfc8c4cc1f821a:::
rREfl3w$:1059:9dde056cbd40369bf8c18b75411b6e5d:6a69f9b694ffb29aa591d99b0fdce4c3:::
l10ftyE$:1060:61136f97a4741615f7e62f36f8db5ae6:28dcbd2481ac83b0a52eb84163c0a6a7:::
fKhcxqB$:1061:557e746081301ca1511a02b6cacb6d18:60abee4f346d49ad65e484c21ccef498:::
rizuavf$:1062:95b50b02ca399c78e6cc85c35f8dee19:642c669ed903839f28b3cf8e7bf8a7d5:::
wyg92bJ$:1063:a780a2793038e0d41e929ffc01395127:ba19814d54b9e1978c70b1bafda7dd08:::
GRnASJ7$:1064:9afd47244021614ce68aa26a841a86fa:bc53166b76bb840735d6ab4438b4cd5e:::
knwStv5$:1065:456333fc160d1031aad3b435b51404ee:d5c7e959e044ee4850499235cebd6fa7:::
g6mMT0p$:1066:a3218b383ae047331aa818381e4e281b:6142c213414e24fb890baa14ca909953:::
Yzo7nju$:1067:9ac4dd25bb8a9587d8265b84d6256f93:473df2ef734ccb314c558fc4504432f0:::
lqMSLAu$:1068:c8dfd5ac0546e95d2ecdb8acb87b6d97:8006996168d493bca22cf07ad5b593e8:::
DfxoCt2$:1069:ac019e406c1f77c6aad3b435b51404ee:33f5a0004bc47f68bc268fdd908bc533:::
md3h2cO$:1070:302533da802449011d91a081d4b37861:be1540d89dd493427aa61372ba567310:::
R1qFl0N$:1071:44efce164ab921caaad3b435b51404ee:32ed87bdb5fdc5e9cba88547376818d4:::
arLAx2i$:1072:ea4dc076ca45ec7ea101f3293029149e:fefa3c8671676f5a2897fc8981a12595:::
CtX0aGL$:1073:5cd8eeaa72e70dca613e9293942509f0:7910be13dca724273be85cd0e000a27b:::
SOpLB3b$:1074:9e1624ce1b75d58f1aa818381e4e281b:7ffefaa9ac8782082ab6ad013bf8e438:::
JBCjUSx$:1075:1cf3161816219c15aad3b435b51404ee:4cf7fbdacedf9a1a609bd56706ca69f9:::
M5cxm89$:1076:0182bd0bd4444bf85d3872c04445e010:828fcb9f997e9886e9e9fc510fd7b747:::
Wl5dj7Y$:1077:e15ae43dfc25355425ad3b83fa6627c7:d2fe937a91d9641903b2e0a7aac9cb72:::
1Ay0Lkc$:1078:de5eea9d3fd12c34aad3b435b51404ee:2f2d544c53b3031f24d63402ea7fb4f9:::
gn6kLOU$:1079:41cd5a6aaee151f2aad3b435b51404ee:48d28627b7f196284b73f3c6fae4eded:::
7UNEJz9$:1080:5e011cc31459cf7c25ad3b83fa6627c7:885e980ae56101097d2010bfb540de0c:::
q0Y3a69$:1081:f79f60ca37893010c2265b23734e0dac:58db4601967b755c1a05f447764bae63:::
PKgiZnO$:1082:6bf11e04afab197ff72c44fed3c74f89:a28442867745f75f7cb47656fde44eee:::
RhdV8i6$:1083:b5a4c5eb4b9d3ee1aad3b435b51404ee:96880159e785de5314803b1169768900:::
GApZf7I$:1084:f63fa2babc78471c35897f12d278913a:599413a2bf947b7db539eb52e1da4996:::
lwq9SL5$:1085:104e1e570ba3356d25ad3b83fa6627c7:226d410164c5e2d14204f05cfea5107b:::
D7yNfpZ$:1086:c7e67c4b720f4007aad3b435b51404ee:7f959c37f3562107afc87ccda8987a92:::
l36TjWh$:1087:f210cc1d1e8187adf63f95d3e417d25e:8afcf672b9a51a067b167133f78766a5:::
m8nwBi2$:1088:f1d6c94ed20066123695cc4f69425ef3:8ff8849481149c69052e7a6dd5c0ad88:::
CWT0SfL$:1089:97df3b7cf4ceb5a0ccb71d7a18053468:bc105905fb6b97aafb653a7e125f2e13:::
TzpctOX$:1090:d1a5321ed4cd4d7072d3f90e28c9734d:4f63c2aa548d58aadbf66e612a2ae0df:::
gSIcj56$:1091:f2d186d7fdecd040b75e0c8d76954a50:2431c2d0e6c550c00b35dbdf1e746f74:::
YnNzMHE$:1092:6d9df16655336ca7e309f1015033cafe:4daa4c0b8d5a791039533e54f47558dc:::
brxVkUf$:1093:a963917bf6d602c712991e265c67ed4e:acf586e39c5838baeea66ec864d7c437:::
MkPXWB3$:1094:4667874befc652c5aad3b435b51404ee:488bb3bc23529ccfa88b653ed8705276:::
yuaDqix$:1095:78642d001b124073e68aa26a841a86fa:09c4a4108ea487c971a78a395d4dd1d2:::
CmOjiYy$:1096:856dcbd3859b7675aad3b435b51404ee:47ee771ea237ed3f83867c68d190d6ff:::
ucT0no5$:1097:219ad59f77805fe5ccf9155e3e7db453:fac5d668099409cb6fa223a32ea493b6:::
te2G1P6$:1098:5e011cc31459cf7c25ad3b83fa6627c7:885e980ae56101097d2010bfb540de0c:::
tUYVMy7$:1099:6bf11e04afab197faad3b435b51404ee:9196e3c548d54cc0e9630c5f40f00bfc:::
6gELZwl$:1100:bb79f34913bdfb73aad3b435b51404ee:7237e4268c9df2430f8e464b07521cc0:::
HhELtRb$:1101:3d0e67ebca3d5481aad3b435b51404ee:d8e3ec9461be00e8d50032af495d14a1:::
E1QbM3T$:1102:a4a0e203de07f208aad3b435b51404ee:d633e5a8fafc9ee2a401b998db1b1e02:::
axNPF9y$:1103:e0f2e286641ec2c3aad3b435b51404ee:c0092d23ea08ce46d5155654205888b0:::
P8BKUa2$:1104:7097f44713241b2aaad3b435b51404ee:9de20a3dab7b262851b4ad556a1d69a0:::
ecOFJxC$:1105:f48a05a063d7865b1d71060d896b7a46:096682c4a5dd38ef0f131ddf313551e2:::
Fat864v$:1106:e843ca60b61e89cdfc3a211d991668db:83370de539041b3ac6a623bd95319275:::
qcP8Xm9$:1107:f7ebbc28fa230f48aad3b435b51404ee:b27d54e3058e43b7689c3fb400f22ac6:::
qGmBhOV$:1108:dab56d929b00db039d4bd15cfff0e20c:b66b458e27bd714f99a05ee3c479fbf1:::
EJjrMBm$:1109:244ad2194d726b7eaad3b435b51404ee:2ae5815bb1beae289f977e2f47c0e09a:::
OlkGosH$:1110:fa20ee95019fb037c81667e9d738c5d9:cfeff215d461385934435a5b0fc060f4:::
BgVDbI2$:1111:030c5cb77e6c6705aad3b435b51404ee:aa91fc87f47874f142f86aed85eeb9b1:::
AQFloZs$:1112:db170c426eae78beff17365faf1ffe89:482563f0adaac6ca60c960c0199559d2:::
hmWtL7P$:1113:1170e49ed7ed31308e5b4ead6c9eb077:ae1f787e99d85fa31df7946bd18b1531:::
TUbeCoz$:1114:9d33e4df5b27fdaaaad3b435b51404ee:5091f76235513db8d91ea410f652e99c:::
lrOns81$:1115:fc877937d8849dbdaad3b435b51404ee:133b2072bae59f2a913f85455cffd0ce:::
2cpOliw$:1116:53e23b9539381326aad3b435b51404ee:5aec804f2f82ff4333ceb1dc40d226bd:::
XZdFU0I$:1117:3e21ea326bdffa1c1aa818381e4e281b:02dd45a60e87ed15ba143b2a95a3d5df:::
nJAMRkd$:1118:c7dabca4ef23f5bde72c57ef50f76a05:45488ad4d1962dffc737781b920f47f4:::
EMUsHoB$:1119:99a8b4c297b04137c81667e9d738c5d9:d9e59d040eafd9a59d30dfd9984a18d8:::
dHMbRA1$:1120:83ae7750e988a1d0e72c57ef50f76a05:1e28747c2368644bcc12976ffa991423:::
qUCTkYM$:1121:0f6e673f5cc82d752550b275603c75c6:89492d216d0a212f8ed54fc5ac9d340b:::
0iPtn45$:1122:e843ca60b61e89cd1aa818381e4e281b:d2ac09c1fa2f35068728f66ba68eefdf:::
3SiNtGg$:1123:9fcd895865fa1c88aad3b435b51404ee:4da7676c90a149da71616bc59ccd4e8b:::
TfkVrno$:1124:6d9df16655336ca7f7e62f36f8db5ae6:528bc44db20df13a5b8de27a8407de9f:::
YXMhPTL$:1125:0e91978b647e27c5aad3b435b51404ee:9d5827f70cdd5fe6fa3c46804a5006f0:::
U3cEyOL$:1126:6f87cd328120cc554e835f1cd90f4c76:62ef97a5c309c18ee4a31a9e7733a177:::
W6Q5ZXl$:1127:ef335dc31ee302fc0da7667323c02f46:9f03693b08ee874ed629cb57c051fe62:::
8F0mc1L$:1128:9ee0d521c88b2c76aad3b435b51404ee:8bb80565a55deaa6e1847dc1bc3505fa:::
Ipir4TG$:1129:e761601f5cf981c136077a718ccdf409:ec9dc7d0895ad3dae1feba8ffdeacffd:::
87m60TU$:1130:6d9df16655336ca7f7e62f36f8db5ae6:528bc44db20df13a5b8de27a8407de9f:::
1iyMXLW$:1131:6f87cd328120cc552ecdb8acb87b6d97:cd73b0aeeb2d1c1907c8783a05e8dd08:::
WgrBwAN$:1132:5ff455fbd8e20a2a120758fbf9e8a7f8:076fd085e43c2fb34a08a6cc9876dae0:::
kHbEAwM$:1133:722ac01404a7515648116059303a4365:aaf696f5a0cc601a636a0364d5bf2543:::
l3iAUca$:1134:d1a5321ed4cd4d701e929ffc01395127:4bade06198a1b41ae22a5b9fde5a43ae:::
60JDpVI$:1135:81943b4a2b58de56c2265b23734e0dac:d406292d3d7ab2e9c0e06620809031e5:::
RMrtdCL$:1136:67481caaf9fe12a5c81667e9d738c5d9:eff75893e07dce7c3f974528ac82796c:::
yzKO1xs$:1137:598ddce2660d3193aad3b435b51404ee:2d20d252a479f485cdf5e171d93985bf:::
59B3qNG$:1138:49f3b9813e67994c7584248b8d2c9f9e:753cd7549f4e86d7f8fdbc63f2a59103:::
9xGLmVB$:1139:6a9952fd0314bc5a467a148c7bf7858b:7d04440df5341d02718a3bf1b19b532c:::
FtNHiY2$:1140:d1f773e13b8fb1d1aad3b435b51404ee:ffca8151006422aac008408e1fe6e9ee:::
4ryloB0$:1141:b53112ed39e33a15aad3b435b51404ee:619fa025f0969f107b93437afd6e13da:::
dRpx0Zr$:1142:f79f60ca3789301025ad3b83fa6627c7:5901dc3fd18d90250a74b477110d778d:::
h07qIz9$:1143:697fdded5ad97eda8eefe33a7f9bee0d:c184e77ca70780c3caf5e6db12221c50:::
YhTrD2E$:1144:5fb208a65e998def9c5014ae4718a7ee:beecadeb681164acf98598162117315c:::
vXkt6CY$:1145:fa6499529a81d8f5c482c03f54cdb5d9:8ea5f8c44f6f7d146bd9416a4c71ddb9:::
cjUPk0J$:1146:88d772ccb2b6fee9ff17365faf1ffe89:f910f2f76de2d64142bc3280d0df123f:::
jNWmqQo$:1147:8aa07451e386acbbaad3b435b51404ee:bc85c547bdab42acfd078168a76eed57:::
l3ENLGA$:1148:47ed159955e4055baad3b435b51404ee:0514a0b7cd1da120e7834237f76c3c21:::
6gXaUSH$:1149:667c617d6fc55a45143f8bd9ae9e0363:12592eac5cc08e5210eed72c5f87799c:::
LTKAf0G$:1150:d3748c08ddefe8c9aad3b435b51404ee:7d2dae9011b2c89f4c51007a6e9cd869:::
A9M2IzH$:1151:9086f7896aa3d2fa1486235a2333e4d2:8e028dabd93e25d79aafed3afcc2c380:::
pIP3wkg$:1152:f48a05a063d7865b1d71060d896b7a46:096682c4a5dd38ef0f131ddf313551e2:::
YcfWhsK$:1153:85f6c3b41dfb0b830bbfd49140063f69:78d5dbd7aa4f948a7510a778815cafb7:::
CHN92zv$:1154:c8dfd5ac0546e95daad3b435b51404ee:3450440718ff7a746541f588d2b385c5:::
tpLry64$:1155:41cd5a6aaee151f2e7b72cc2eb0602d8:21da95b451c2736231eedb87d08f7edb:::
JBCwhWV$:1156:7ebb48fb4996977daad3b435b51404ee:3aff185e26375c92af3253842a330415:::
JQkjdXe$:1157:74f9b2862c4c1d03aad3b435b51404ee:24bf8795fd4c7694f184a0fc18dc3678:::
yCAnG3x$:1158:8265c2384747942fc81667e9d738c5d9:816af27b8f7443461cdc9fc7b65e43a5:::
4tvm25a$:1159:022e02fb9d871e9ec2265b23734e0dac:10e892f1902fa5718f98f1cd4c92c25b:::
dfFvAnx$:1160:47fce55aa0fb10dfaad3b435b51404ee:c9808fe8951ef1fec62b8a35dbb568e9:::
EVbcxRA$:1161:8e4f4b84b4a0e54faad3b435b51404ee:4a8a335a9b53c9df7b1727b8d7a7e1b6:::
nPr5pHa$:1162:6cea8379da96cca5aad3b435b51404ee:e444c35aee8ea5f86cb1ddb057adf1eb:::
Uy3IHZY$:1163:f1d6c94ed20066123695cc4f69425ef3:8ff8849481149c69052e7a6dd5c0ad88:::
xvepzfJ$:1164:72fc79573e0bd6e2aad3b435b51404ee:a690e789b416187dbd530875e5a976c1:::
4SAse09$:1165:a4a0e203de07f2089c5014ae4718a7ee:726a563bc74add8c1c4d04b0a1c71a8b:::
Oms5b6R$:1166:3a73bd4cb7355bd3aad3b435b51404ee:be8ebf1a64a2fe491124e1bf4eddca68:::
XtFzQUe$:1167:877bcd3bb56de79daad3b435b51404ee:69bc0b33957b8535327a6b00f10dad73:::
z3GVYOn$:1168:9145cf074926f511aad3b435b51404ee:f1351ac828428d74f6da2968089fc91f:::
bjmlXrf$:1169:554f3664b4d73942aad3b435b51404ee:103b2d4ef7828ef96ba4abe26d2843fb:::
sUVQyIP$:1170:e3abb2a6e79910a2aad3b435b51404ee:2cc0e4a4dd1106afea7fe671f4aa7dc9:::
FHREhpe$:1171:70fdb8f853bd427d7584248b8d2c9f9e:f3cf477fc3ea6ec0b3b5887616dd4506:::
ZU8lRXt$:1172:ee2614cc1063a8331d71060d896b7a46:152f212ffddf970fe72ac04907d68693:::
ct5eDpV$:1173:5d962a4fb7eb252dc6ebe8776a153feb:3d02f79503a01539f15b74d185029333:::
ShrM3wv$:1174:6d9df16655336ca7b2a8712a9b0be09c:0d757ad173d2fc249ce19364fd64c8ec:::
i6y2r3k$:1175:6666b9685153df04884409659cd10ae8:45b4f8babedef3c0dd7a96952c1c4efa:::
dkhxlEW$:1176:39ead569b79c7ea2aad3b435b51404ee:ade566c9bafd9e5e741889ec6b0e9579:::
n8i1Ofs$:1177:6040adaf16d5d55525ad3b83fa6627c7:9bdc61db5a3fced6d82d49279f1f0430:::
ImFANki$:1178:44efce164ab921caaad3b435b51404ee:32ed87bdb5fdc5e9cba88547376818d4:::
6KprbOP$:1179:91df0b3575f9fcb3aad3b435b51404ee:79aad169045dc11a29b1040b31d9d482:::
9l36Unt$:1180:731e275019b36e9aaad3b435b51404ee:daa7506c700d2c81ddef50307d4216e8:::
EiAM0td$:1181:607326e5bec51b3caad3b435b51404ee:a69875db7aec139df13568cdba6bd69c:::
Gkm4Hbq$:1182:cec52eb9c8e3455dc2265b23734e0dac:d109d4b749aba95d12042dcdbd8add2d:::
dtP2zTB$:1183:d50d494788c70e0eaad3b435b51404ee:f45b9214e8355026171660972a86fcdb:::
a4rs6BL$:1184:b5a4c5eb4b9d3ee1b5a4c5eb4b9d3ee1:6bc0b557d74b3c736d13e7101861c973:::
jWAMDqK$:1185:153033baf901ad0e12991e265c67ed4e:c8faba7865dc3eff56bed46d5c2f9a7d:::
GDe61dk$:1186:fcaeee2c72d24a8c17306d272a9441bb:60dfa6af1f36cfda25b1ffe3dc7eb7db:::
AuMi7GU$:1187:7cfe848a843e1879aad3b435b51404ee:8bbfb7a73bca97d9b7eb5d5a21715f10:::
o46QKID$:1188:49f3b9813e67994cccf9155e3e7db453:c992c1b2beb5874a43e5d5ee33d71213:::
QZsrimD$:1189:76b5f9e8150ff969120758fbf9e8a7f8:c276d49ac80a6297944e0c36556cb79c:::
2mZt8DK$:1190:95dc9db01e55ba86aad3b435b51404ee:e1a692bd23bde99b327756e59308b4f8:::
iuhRJKj$:1191:c3e365a15f764236e72c57ef50f76a05:c77d88e4f0637d00282caaa32d926c3f:::
ULjJCbS$:1192:3f3408e14012c63baad3b435b51404ee:fc1ad3265f9ddaefbd10417e1a5389b3:::
Ez90veU$:1193:3906c4e0f041ec75902139606b6d16b5:ea575ce420c834c5379f65c6125dbc37:::
TQNoF6L$:1194:0182bd0bd4444bf8bd0c4ee69fc29f9e:3b300fb12b539a576aa8d12e5489169b:::
1Zcj4Rr$:1195:49d58563113416eb9c5014ae4718a7ee:ea847b34167fd797cac465a00a2d88b3:::
cYW1exH$:1196:cd38cb12fd784106aad3b435b51404ee:00f745e28a691cfe9f1b65b99037f2c9:::
FZ6rJyb$:1197:4001a65f34fec9e1aad3b435b51404ee:c8a71e6fd71767a0fba2d7419e1dd872:::
hMLyrzi$:1198:6089b6316b3577c480e849a27cb2f122:3e24dcead23468ce597d6883c576f657:::
wmS5r7I$:1199:c969c91d4757416b8358f3d2c80c1dc5:72b2daa0961ada2b9ba5ff43267d0b08:::
SPvRtLF$:1200:dcf054f5eb7f3ef2aad3b435b51404ee:e2486e74ec335b4f95f831fb59a83bad:::
ZS0yIjx$:1201:c63a41ed1640fd46aad3b435b51404ee:3f0d07d829a940ba99c99845b277c7c2:::
qjfM8nE$:1202:a4a0e203de07f208aad3b435b51404ee:d633e5a8fafc9ee2a401b998db1b1e02:::
JrYfLk9$:1203:a7f6fe4d214a8591613e9293942509f0:b963c57010f218edc2cc3c229b5e4d0f:::
OVBGSiP$:1204:b5a4c5eb4b9d3ee184b46c947ed585c9:28814c14ae6ced237aebee2dc3854da8:::
H3I5rN9$:1205:83a9b7feb48c20dcaad3b435b51404ee:67f2409ebc86ecbc62af9de5903b8ee0:::
q1yvIG9$:1206:988e5764fe46a6b6aad3b435b51404ee:e5accf1aede6e47b243cc4d9fc2a7ac5:::
OWxi40m$:1207:e0f2e286641ec2c3aad3b435b51404ee:c0092d23ea08ce46d5155654205888b0:::
LsgucTG$:1208:c667b2dba5b40d107c3113b4a1a5e3a0:30aff9dcac5893153f9a1e9f81c8369e:::
Ih3KCLb$:1209:81575b026f3643a0fc3a211d991668db:eef285f4c800bcd1ae1e84c371eeb282:::
WXxySu9$:1210:0182bd0bd4444bf887bbabe26cf438b1:47aea3ce09b0b63970091b52b976b0e3:::
eKrTfNL$:1211:e6edd9efc6caad43b75e0c8d76954a50:1c3555dcd3664df8cb6834d37178ecb2:::
HBbe3kz$:1212:1f27acde849935b0aad3b435b51404ee:579110c49145015c47ecd267657d3174:::
OmzhkJA$:1213:0182bd0bd4444bf80af36851e9ea3ee7:b120854f37272136e61f685e28a70cad:::
gPmG9RW$:1214:6255fb201f8bf8e7aad3b435b51404ee:8fa2ccb466f6fc25fa1ba5c39d422247:::
u1mHQ6r$:1215:f9e979aaaba75b19aad3b435b51404ee:dee72ea94bd4a98606fa0361e60f6436:::
2RhyP7a$:1216:c7dce12c7fce3decaad3b435b51404ee:58977dcf50222850f3c93ea47e8e911a:::
U6sgH5Y$:1217:41f3c01914449b6baad3b435b51404ee:76d5f1de52ccb13f0c05c6c5a0e09c51:::
oEAw1dI$:1218:3f3408e14012c63baad3b435b51404ee:fc1ad3265f9ddaefbd10417e1a5389b3:::
iBOotJQ$:1219:fdcd8c997b2ec83fccf9155e3e7db453:778bdb5272f207337f3454c801b9c975:::
TC4d0EN$:1220:58244792fd9b71a8aad3b435b51404ee:38b0e75e468b57e9c526d3f943f9702c:::
krgzwKd$:1221:c7dabca4ef23f5bde72c57ef50f76a05:45488ad4d1962dffc737781b920f47f4:::
TsegBW6$:1222:5a8e6058e8ba132eaad3b435b51404ee:50d827d8aee60198dafd73c44d0cb8c2:::
iSxDMFy$:1223:21ba095132081b80aad3b435b51404ee:ccd3d95ea08b81140eee3cfbb98c68f1:::
1y2tshe$:1224:254da42aa0b00a7baad3b435b51404ee:6ee968067c132eaad12e7f69516a34f8:::
EOU5F6X$:1225:d333a2f8f0ed4ca4aad3b435b51404ee:b43f8aff1fa9afff8655542b22ef9a14:::
2olymDt$:1226:d0a2a1e8cd73fe2faad3b435b51404ee:cc67be384eb0cd6c362df9d479a361ea:::
Mho4pYS$:1227:4cd720fc5c37c747eacbeb9271fb3e7a:b9c0cbb8bba37e05b858d99864b5eb3a:::
gv8qtxH$:1228:410d6a4ae665bb0483d91a552acf1efb:0a3fad24a52f5547b4d9f39e6a50ad44:::
RlkFjo5$:1229:d9dadd1b34cb175daad3b435b51404ee:79c57cc0bd6ef0fe5b1cea0e58ef228b:::
ib37Bst$:1230:f110518e67eaede9aad3b435b51404ee:e657e2369006413629759ba8fa262931:::
zL8QKg6$:1231:6349379eb8deaa05aad3b435b51404ee:11398d271cff9472ed4b45a5d3cc5735:::
g1GhRBz$:1232:20c8820cafe826e5ff17365faf1ffe89:e54599d21b99184359b141d2b13478a7:::
KUBIoOv$:1233:648b604b40c60491aad3b435b51404ee:dfb10e668d0bf36a066a2bbcf796fa40:::
JkOWcaC$:1234:3b33d8c0374feed4e7b72cc2eb0602d8:87eaa1a9f762df662d7c76e47674c8ce:::
F78CjKn$:1235:ab3e6c926c5d62187584248b8d2c9f9e:b36ba9a6cd455730381f9a1c21aaf133:::
zGyCWgD$:1236:49ab891f0fd6831eaad3b435b51404ee:85ac333bbfcbaa62ba9f8afb76f06268:::
ObJnkTH$:1237:6f5e0ac207814dc6aad3b435b51404ee:8f0d58f779eb6be5d64008a9306c2dfe:::
HM82L1C$:1238:ee50825f7b0e520c36077a718ccdf409:7bb321e47157b618ed146cc3f359b5ce:::
4tVs1G5$:1239:58d74804723e4a7baad3b435b51404ee:c66cffad0df66288d53730e0b5591766:::
kjMLBNF$:1240:254da42aa0b00a7baad3b435b51404ee:6ee968067c132eaad12e7f69516a34f8:::
L1MlwDN$:1241:664f8f6896797225d28503ccdc647742:9a91d62f37d3b3350163663f05e86ab6:::
3TmSJ6H$:1242:c8dfd5ac0546e95d2ecdb8acb87b6d97:8006996168d493bca22cf07ad5b593e8:::
zr1fsIY$:1243:d50d494788c70e0eaad3b435b51404ee:f45b9214e8355026171660972a86fcdb:::
OSkztZM$:1244:254da42aa0b00a7baad3b435b51404ee:6ee968067c132eaad12e7f69516a34f8:::
uRPl0UV$:1245:e3abb2a6e79910a2aad3b435b51404ee:2cc0e4a4dd1106afea7fe671f4aa7dc9:::
vPSKXa7$:1246:b0f120fcbf777083ff17365faf1ffe89:833900be0925f73f6b0cc9b8f5f248e0:::
KFdMRPs$:1247:a9eca6d4f255749be765670f16456fe0:8a053034910bfc0dfb6ac03cfb19c6c2:::
4opSc5k$:1248:f4e189364eb824409a75402fb6ea1a13:d64d1ff7aee24264eab92724d6161d3e:::
EzW5G8o$:1249:559420a272a9bb14aad3b435b51404ee:e07a80f3b61f10da103b0cd60180cbef:::
oFEeICN$:1250:c8dfd5ac0546e95daad3b435b51404ee:3450440718ff7a746541f588d2b385c5:::
fbWO4jI$:1251:1b0422c1d67c1babaad3b435b51404ee:0b82e1dace77e29dd1de00896ba1c5bc:::
xBlASF8$:1252:007ff60da83a0bc5613e9293942509f0:4b0b902a31060da90497884297a2bbef:::
7iwhQVl$:1253:8ea6fb8594a1b952aad3b435b51404ee:51d603c77a884df049f7ed4dabed4fd4:::
i3VXdsA$:1254:3906c4e0f041ec757584248b8d2c9f9e:5c4fabe20708d5b4d581b7a589a54ffa:::
S3aTK8b$:1255:639ec8b688c2171525ad3b83fa6627c7:bb7aed4bcd0be80699afbccafcc410ac:::
ZPgmszn$:1256:6040adaf16d5d555ae91a15a9fdf9d77:118ad08fbe2f7bea5334439c91c5fc5b:::
bgSJFZI$:1257:a07c6ae70d9299de8eefe33a7f9bee0d:bcd285980e1d9b302e16875844ef6977:::
qus0nHZ$:1258:c7dabca4ef23f5bde72c57ef50f76a05:45488ad4d1962dffc737781b920f47f4:::
r0KyASo$:1259:e15ae43dfc253554c81667e9d738c5d9:2e74b460fe1b482a341f9f51c41da769:::
J453SzF$:1260:806bc23a2623a3a63afe223c767082e5:b1685cd635013f38e4da8f4021be93b8:::
snHzaU0$:1261:6d9dd43d64b5222aaad3b435b51404ee:e84d037613721532e6b6d84d215854b6:::
9KJHQng$:1262:022e02fb9d871e9e5d3872c04445e010:6cc514511fe5ce1fb5f759e189ccbc00:::
i9LCUsQ$:1263:49f3b9813e67994caad3b435b51404ee:26788717f4ae12d171c5cdba11259414:::
Y9lwiCa$:1264:9fcd895865fa1c88aad3b435b51404ee:4da7676c90a149da71616bc59ccd4e8b:::
VWzmXUl$:1265:eb82185f6e82609daad3b435b51404ee:5855b0e9a7b53f7c18e2658623da2d24:::
7GCDHao$:1266:b485c2ef669041c4aad3b435b51404ee:699a22472abcad2d7dff0ca1072794cf:::
yIzWbXN$:1267:f1d8abae82dd2ec774d664cedeb5c1cb:57b58ca8026ccdd319ea1de1668b72ce:::
AMOigYb$:1268:c667b2dba5b40d10aad3b435b51404ee:1d7774d5bbec877ba1bbfcac2f1ae296:::
1ryHcZS$:1269:302533da802449011d91a081d4b37861:be1540d89dd493427aa61372ba567310:::
oaspByP$:1270:7a26382ae48b95940ce4e57c62586573:3419ddf4994eb00c7879c6de42ef95d4:::
bAzRBCi$:1271:b5c4baf3496415c6aad3b435b51404ee:e5174abb80fa94aaca8332b121ad6b17:::
ouWpYGV$:1272:9815f1087736cf0daad3b435b51404ee:50ada1e356c68314d5ffd44cf0d274e8:::
UlJIWui$:1273:351c29a425dddc4edf128b2dd32bad07:f9f44354f39af6ff1cc1de9175fc32cb:::
CmFsnPx$:1274:17c6f830172f2731b75e0c8d76954a50:25c93091cdfabe015d6770734eb9024a:::
f6peHPT$:1275:44efce164ab921caaad3b435b51404ee:32ed87bdb5fdc5e9cba88547376818d4:::
dqG8UnP$:1276:81575b026f3643a0fc3a211d991668db:eef285f4c800bcd1ae1e84c371eeb282:::
JkyD2iN$:1277:a1160b1508ca841baad3b435b51404ee:940bd098f4d4e71ac7b36177ae65b67a:::
w4bCstP$:1278:9c31990dcda8245aff17365faf1ffe89:34722b8852d786e91307b0d026a0c998:::
Ud4Q6Nr$:1279:0182bd0bd4444bf884f0b2211e66b0de:9f8cc8c6e9e8ba3344ce00078175a4ff:::
Yr7j9GC$:1280:164976e3fb8230592c9a787fbd0450f2:0628af8e46bdba0f70693251fbe35b45:::
rkqN7b1$:1281:41cd5a6aaee151f2e7b72cc2eb0602d8:21da95b451c2736231eedb87d08f7edb:::
D2usvbp$:1282:50af9e3632e172a41d71060d896b7a46:1c114b782fcfeb93288b889db7c1ae7f:::
NM9sglt$:1283:ee50825f7b0e520c36077a718ccdf409:7bb321e47157b618ed146cc3f359b5ce:::
rYl4miA$:1284:23ff7f88a407515fdf128b2dd32bad07:07e20608452d85287f33d2207cc86e6d:::
knz1Oqi$:1285:28b4cf80b6bfdf2d25ad3b83fa6627c7:1c512f7dc6639c6dd93a531d3a645472:::
kvL4XqI$:1286:72f9880d1edce95a944e2df489a880e4:08e122a8e723d85167fc876d33ca0145:::
TiAS0FG$:1287:7b15d440349e01f6aad3b435b51404ee:4efac3b41f55193b58faa03a52bea185:::
U2Z83D1$:1288:c0cc823d001cce6daad3b435b51404ee:00a6e97ae43abd5af9f5fa28652e5f6b:::
JfrgUyS$:1289:e9894dc5752a6630df128b2dd32bad07:e935dd52cf78dc7dbebcf6c8d555e3d9:::
itAN1g8$:1290:e15ae43dfc2535541d71060d896b7a46:b8c87b0a62d5d0eea06bc0c378bc1515:::
uDbwC8g$:1291:75f564aec56e3584aad3b435b51404ee:9b4a8e128c60987d35d65b5a0cbce72d:::
FdZr2pW$:1292:ede5438680a42478c2265b23734e0dac:8ff88b63c972367df804cf526917c19f:::
s6EwWIj$:1293:244ad2194d726b7eaad3b435b51404ee:2ae5815bb1beae289f977e2f47c0e09a:::
V0Tbund$:1294:95b50b02ca399c78e6cc85c35f8dee19:642c669ed903839f28b3cf8e7bf8a7d5:::
MYPsuXz$:1295:ccd352d042d3fb308e5b4ead6c9eb077:8a99db303d2cb97764a3dcb50c099da7:::
lMPArK3$:1296:fe8bb4dd68ab3628e68aa26a841a86fa:82d737fd380ea09cf2fd8526fab023fb:::
s79M3FP$:1297:104e1e570ba3356d25ad3b83fa6627c7:226d410164c5e2d14204f05cfea5107b:::
maRQycj$:1298:21ba095132081b80aad3b435b51404ee:ccd3d95ea08b81140eee3cfbb98c68f1:::
MZJGSAi$:1299:886725fb8939901125ad3b83fa6627c7:0f49445be69a6c6adadb57f4fe9b4291:::
NWPyXZ7$:1300:6f5e0ac207814dc6aad3b435b51404ee:8f0d58f779eb6be5d64008a9306c2dfe:::
OokiQuX$:1301:9be067ea8c4efb51ff17365faf1ffe89:f7232083603b192a3b411784671630bf:::
8rOeNaJ$:1302:173ab332217371b21e929ffc01395127:324e773ec800dc70882568f5a41d2b63:::
K3vBWzQ$:1303:0505d7b1382b6726aad3b435b51404ee:6d12a8e0eba3e0f4a3dad559f80ce1be:::
8GkzTly$:1304:a4a0e203de07f208aad3b435b51404ee:d633e5a8fafc9ee2a401b998db1b1e02:::
3kEtens$:1305:9ce6f7808ca851712ecdb8acb87b6d97:113168423de4ed541162831762d94554:::
QeDMyj9$:1306:e15ae43dfc25355436077a718ccdf409:555fa089396338df14fa09ba51010929:::
XhzcTLa$:1307:a3218b383ae047331aa818381e4e281b:6142c213414e24fb890baa14ca909953:::
hzVyrGm$:1308:a0f4096b983e3d737584248b8d2c9f9e:63b01293eb708782d661f98f2be7492b:::
AkTWZji$:1309:a3218b383ae047331d71060d896b7a46:3e527a88d6905a3ac3287a774cf362f6:::
jl4cDfP$:1310:0182bd0bd4444bf884f0b2211e66b0de:9f8cc8c6e9e8ba3344ce00078175a4ff:::
XoDuHOM$:1311:630a33310a35218faad3b435b51404ee:20bb97dbc2d44f79ce308ed7a2e5edb3:::
G07Yg5L$:1312:785690a1b894ad49c81667e9d738c5d9:344549e82a5051b3003a8f30d5ccc532:::
K64rdsA$:1313:a9eca6d4f255749be765670f16456fe0:8a053034910bfc0dfb6ac03cfb19c6c2:::
HCL2ZtQ$:1314:1fb363feb834c12daad3b435b51404ee:fce5df542d589b2b55e2a8ea8290c8b6:::
9LA6rCc$:1315:a9819929ee822992e7b72cc2eb0602d8:da1b871c91f502322750e438668e79ee:::
T8xStkl$:1316:f79f60ca378930109c5014ae4718a7ee:31261bb8be6cc22c7448f038921df08e:::
7s6CkJ3$:1317:49f3b9813e67994cccf9155e3e7db453:c992c1b2beb5874a43e5d5ee33d71213:::
jimcPUu$:1318:4ec235ecaaf608897be20735f26cb604:b37b4a6d9f3656bcf01ff4e90988341f:::
ywrBZ9T$:1319:c7e67c4b720f4007aad3b435b51404ee:7f959c37f3562107afc87ccda8987a92:::
LUfP5Ep$:1320:f6a8d758e3d1ad85df128b2dd32bad07:710ed421953225df0b9bf2a85e3aae0e:::
AhjZfJV$:1321:8a861ae2f3ff8476aad3b435b51404ee:4be2dced567aaae24e201a06017d29e7:::
TLeN5Wa$:1322:e9b1c1af7ee4f4b5aad3b435b51404ee:b21c99d5319aa1d4c4ea406197e3c08a:::
cUjOxvg$:1323:8d8a0565bda42a96aad3b435b51404ee:bb53a477af18526ada697ce2e51f76b3:::
JbpPIa4$:1324:b6948c946647b182aad3b435b51404ee:bbe56bc646e19f69b62a54a3ab0c03fe:::
vz1rKjG$:1325:0705f00d3ca03e94aad3b435b51404ee:963b8217dc8d80f12275c1a0754e1d74:::
yW1fMSd$:1326:104e1e570ba3356d1aa818381e4e281b:7ba0528b92f831cc6fc552eaa884b281:::
oR9C4h0$:1327:075967dc019448b3aad3b435b51404ee:52dfce71b33904b81e98434dab1a62a0:::
etiH3Lp$:1328:16c527ed26294b4aaad3b435b51404ee:1877e5aa6fe93838ec8e083f5bd0b4f7:::
j7GKOpy$:1329:4633631b9ea5eff4aad3b435b51404ee:9cda09c2bb7f71ba6bbc14fdbaf45f09:::
sLi0Y7X$:1330:c34fdbb36bb2fee0aad3b435b51404ee:e2e07569de0cc1b788201203bff71c4e:::
GBrLwut$:1331:49d58563113416eb72d3f90e28c9734d:ed356698adc4fcffe90c3e6d250fcf16:::
DmToclL$:1332:e9a4c36f64b540b8c6ebe8776a153feb:162e829be112225fedf856e38e1c65fe:::
VO2Asyu$:1333:0e6a7aaeba5a85241104594f8c2ef12b:5d57aaa097d7490bccd41360a94d9f8f:::
WSNJEXl$:1334:e15ae43dfc253554c81667e9d738c5d9:2e74b460fe1b482a341f9f51c41da769:::
j2VYqed$:1335:fa6499529a81d8f5c482c03f54cdb5d9:8ea5f8c44f6f7d146bd9416a4c71ddb9:::
Vf7WI3H$:1336:85f6c3b41dfb0b830bbfd49140063f69:78d5dbd7aa4f948a7510a778815cafb7:::
A3sS1wG$:1337:9f0684d2e7e52033e72c57ef50f76a05:3bc7a97bed22d1cc30aca85b748fb9fe:::
GUmQKdy$:1338:b1ddc1f6035fa511dd4218f5e59dd23a:f408b7150e6234e877c8cf816548ff73:::
gh19yMB$:1339:00db524f843b1845aad3b435b51404ee:562f0e091b1c7be2f3ab3e20fa64cb46:::
QPvV3pz$:1340:1865f771c356ad94aad3b435b51404ee:ce9fb40204587f0f343cdfbe7c007989:::
JTMB2qE$:1341:25bf6a6dd2700f96aad3b435b51404ee:114a90eadeb78697e8f5d14888324caf:::
jLsUExI$:1342:b5c4baf3496415c6aad3b435b51404ee:e5174abb80fa94aaca8332b121ad6b17:::
pgjmYIJ$:1343:b6948c946647b182aad3b435b51404ee:bbe56bc646e19f69b62a54a3ab0c03fe:::
wtC10nJ$:1344:89e9a788cca60193aad3b435b51404ee:8027c0952668b07531f1f8a99bb0a3bf:::
5AfHGx2$:1345:0182bd0bd4444bf8f0f1066cbb2ff147:483ec5ee50150bb171fccc8dc7b56eb1:::
VJr6uFg$:1346:4633631b9ea5eff4aad3b435b51404ee:9cda09c2bb7f71ba6bbc14fdbaf45f09:::
c7Hz9Pp$:1347:0f9f8dbb40720d3baad3b435b51404ee:700d50c788cb1d8222f602d6b49c5056:::
mhuJAts$:1348:7e3313e6fcdba43af1d170cc66c6502d:3675fb98099e3a48eb3a7bb109c3c1cd:::
wOdFUca$:1349:0f9d3dae7810e1c325ad3b83fa6627c7:61d503863ff8115432c5f43a3a6d4433:::
6jOc4eN$:1350:f52de6fb2fb87796f517f264cbe9141b:bfcce05afc41a41c6cefb38f275fdc9b:::
pNrAPQk$:1351:b1ddc1f6035fa511dd4218f5e59dd23a:f408b7150e6234e877c8cf816548ff73:::

可以爆破,导致平台卡到爆炸!
正解为导出注册表

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
❯ volatility -f 隐藏的秘密.vmem --profile=Win2003SP1x86 dumpregistry --dump-dir=./
Volatility Foundation Volatility Framework 2.6
**************************************************
Writing out registry: registry.0xe12fb260.no_name.reg

**************************************************
**************************************************
Writing out registry: registry.0xe1756200.SECURITY.reg

**************************************************
**************************************************
Writing out registry: registry.0xe101d008.system.reg

Physical layer returned None for index 8000, filling with NULL
Physical layer returned None for index c000, filling with NULL
Physical layer returned None for index e000, filling with NULL
Physical layer returned None for index 12000, filling with NULL
Physical layer returned None for index 4b000, filling with NULL
Physical layer returned None for index 4c000, filling with NULL
Physical layer returned None for index 50000, filling with NULL
Physical layer returned None for index 57000, filling with NULL
Physical layer returned None for index 59000, filling with NULL
Physical layer returned None for index 5a000, filling with NULL
Physical layer returned None for index 5b000, filling with NULL
Physical layer returned None for index 5c000, filling with NULL
Physical layer returned None for index 5e000, filling with NULL
Physical layer returned None for index 63000, filling with NULL
Physical layer returned None for index 65000, filling with NULL
Physical layer returned None for index 66000, filling with NULL
Physical layer returned None for index 67000, filling with NULL
Physical layer returned None for index 68000, filling with NULL
Physical layer returned None for index 6c000, filling with NULL
Physical layer returned None for index 6d000, filling with NULL
Physical layer returned None for index 70000, filling with NULL
Physical layer returned None for index 71000, filling with NULL
Physical layer returned None for index 72000, filling with NULL
Physical layer returned None for index 73000, filling with NULL
Physical layer returned None for index 75000, filling with NULL
Physical layer returned None for index 76000, filling with NULL
Physical layer returned None for index 77000, filling with NULL
Physical layer returned None for index d5000, filling with NULL
Physical layer returned None for index e4000, filling with NULL
Physical layer returned None for index e5000, filling with NULL
Physical layer returned None for index e6000, filling with NULL
Physical layer returned None for index f3000, filling with NULL
Physical layer returned None for index f4000, filling with NULL
Physical layer returned None for index f6000, filling with NULL
Physical layer returned None for index f7000, filling with NULL
Physical layer returned None for index 10f000, filling with NULL
Physical layer returned None for index 116000, filling with NULL
Physical layer returned None for index 11a000, filling with NULL
Physical layer returned None for index 11c000, filling with NULL
Physical layer returned None for index 131000, filling with NULL
Physical layer returned None for index 132000, filling with NULL
Physical layer returned None for index 13d000, filling with NULL
Physical layer returned None for index 13e000, filling with NULL
Physical layer returned None for index 151000, filling with NULL
Physical layer returned None for index 152000, filling with NULL
Physical layer returned None for index 153000, filling with NULL
Physical layer returned None for index 154000, filling with NULL
Physical layer returned None for index 155000, filling with NULL
Physical layer returned None for index 156000, filling with NULL
Physical layer returned None for index 157000, filling with NULL
Physical layer returned None for index 158000, filling with NULL
Physical layer returned None for index 159000, filling with NULL
Physical layer returned None for index 15a000, filling with NULL
Physical layer returned None for index 15b000, filling with NULL
Physical layer returned None for index 15c000, filling with NULL
Physical layer returned None for index 15d000, filling with NULL
Physical layer returned None for index 15e000, filling with NULL
Physical layer returned None for index 15f000, filling with NULL
Physical layer returned None for index 160000, filling with NULL
Physical layer returned None for index 161000, filling with NULL
Physical layer returned None for index 162000, filling with NULL
Physical layer returned None for index 163000, filling with NULL
Physical layer returned None for index 164000, filling with NULL
Physical layer returned None for index 165000, filling with NULL
Physical layer returned None for index 166000, filling with NULL
Physical layer returned None for index 167000, filling with NULL
Physical layer returned None for index 168000, filling with NULL
Physical layer returned None for index 169000, filling with NULL
Physical layer returned None for index 16a000, filling with NULL
Physical layer returned None for index 16b000, filling with NULL
Physical layer returned None for index 16c000, filling with NULL
Physical layer returned None for index 16d000, filling with NULL
Physical layer returned None for index 16e000, filling with NULL
Physical layer returned None for index 16f000, filling with NULL
Physical layer returned None for index 170000, filling with NULL
Physical layer returned None for index 171000, filling with NULL
Physical layer returned None for index 172000, filling with NULL
Physical layer returned None for index 173000, filling with NULL
Physical layer returned None for index 174000, filling with NULL
Physical layer returned None for index 175000, filling with NULL
Physical layer returned None for index 176000, filling with NULL
Physical layer returned None for index 177000, filling with NULL
Physical layer returned None for index 178000, filling with NULL
Physical layer returned None for index 179000, filling with NULL
Physical layer returned None for index 17a000, filling with NULL
Physical layer returned None for index 17f000, filling with NULL
Physical layer returned None for index 180000, filling with NULL
Physical layer returned None for index 181000, filling with NULL
Physical layer returned None for index 182000, filling with NULL
Physical layer returned None for index 183000, filling with NULL
Physical layer returned None for index 184000, filling with NULL
Physical layer returned None for index 185000, filling with NULL
Physical layer returned None for index 186000, filling with NULL
Physical layer returned None for index 187000, filling with NULL
Physical layer returned None for index 188000, filling with NULL
Physical layer returned None for index 189000, filling with NULL
Physical layer returned None for index 18a000, filling with NULL
Physical layer returned None for index 18b000, filling with NULL
Physical layer returned None for index 18c000, filling with NULL
Physical layer returned None for index 18d000, filling with NULL
Physical layer returned None for index 18e000, filling with NULL
Physical layer returned None for index 18f000, filling with NULL
Physical layer returned None for index 190000, filling with NULL
Physical layer returned None for index 191000, filling with NULL
Physical layer returned None for index 192000, filling with NULL
Physical layer returned None for index 193000, filling with NULL
Physical layer returned None for index 194000, filling with NULL
Physical layer returned None for index 195000, filling with NULL
Physical layer returned None for index 196000, filling with NULL
Physical layer returned None for index 197000, filling with NULL
Physical layer returned None for index 198000, filling with NULL
Physical layer returned None for index 199000, filling with NULL
Physical layer returned None for index 19a000, filling with NULL
Physical layer returned None for index 19b000, filling with NULL
Physical layer returned None for index 19c000, filling with NULL
Physical layer returned None for index 19d000, filling with NULL
Physical layer returned None for index 19e000, filling with NULL
Physical layer returned None for index 19f000, filling with NULL
Physical layer returned None for index 1a0000, filling with NULL
Physical layer returned None for index 1a1000, filling with NULL
Physical layer returned None for index 1a2000, filling with NULL
Physical layer returned None for index 1a3000, filling with NULL
Physical layer returned None for index 1a4000, filling with NULL
Physical layer returned None for index 1a5000, filling with NULL
Physical layer returned None for index 1a6000, filling with NULL
Physical layer returned None for index 1a7000, filling with NULL
Physical layer returned None for index 1a8000, filling with NULL
Physical layer returned None for index 1a9000, filling with NULL
Physical layer returned None for index 1aa000, filling with NULL
Physical layer returned None for index 1ab000, filling with NULL
Physical layer returned None for index 1ac000, filling with NULL
Physical layer returned None for index 1ad000, filling with NULL
Physical layer returned None for index 1ae000, filling with NULL
Physical layer returned None for index 1b3000, filling with NULL
Physical layer returned None for index 1b4000, filling with NULL
Physical layer returned None for index 1b5000, filling with NULL
Physical layer returned None for index 1b6000, filling with NULL
Physical layer returned None for index 1b7000, filling with NULL
Physical layer returned None for index 1b8000, filling with NULL
Physical layer returned None for index 1b9000, filling with NULL
Physical layer returned None for index 1ba000, filling with NULL
Physical layer returned None for index 1bb000, filling with NULL
Physical layer returned None for index 1bc000, filling with NULL
Physical layer returned None for index 1bd000, filling with NULL
Physical layer returned None for index 1be000, filling with NULL
Physical layer returned None for index 1bf000, filling with NULL
Physical layer returned None for index 1c0000, filling with NULL
Physical layer returned None for index 1c1000, filling with NULL
Physical layer returned None for index 1c2000, filling with NULL
Physical layer returned None for index 1c3000, filling with NULL
Physical layer returned None for index 1c4000, filling with NULL
Physical layer returned None for index 1c5000, filling with NULL
Physical layer returned None for index 1c6000, filling with NULL
Physical layer returned None for index 1c7000, filling with NULL
Physical layer returned None for index 1c8000, filling with NULL
Physical layer returned None for index 1c9000, filling with NULL
Physical layer returned None for index 1ca000, filling with NULL
Physical layer returned None for index 1cb000, filling with NULL
Physical layer returned None for index 1cc000, filling with NULL
Physical layer returned None for index 1cd000, filling with NULL
Physical layer returned None for index 1ce000, filling with NULL
Physical layer returned None for index 1cf000, filling with NULL
Physical layer returned None for index 1d0000, filling with NULL
Physical layer returned None for index 1d1000, filling with NULL
Physical layer returned None for index 1d2000, filling with NULL
Physical layer returned None for index 1d3000, filling with NULL
Physical layer returned None for index 1d4000, filling with NULL
Physical layer returned None for index 1d5000, filling with NULL
Physical layer returned None for index 1d6000, filling with NULL
Physical layer returned None for index 1d7000, filling with NULL
Physical layer returned None for index 1d8000, filling with NULL
Physical layer returned None for index 1d9000, filling with NULL
Physical layer returned None for index 1da000, filling with NULL
Physical layer returned None for index 1db000, filling with NULL
Physical layer returned None for index 1dc000, filling with NULL
Physical layer returned None for index 1dd000, filling with NULL
Physical layer returned None for index 1de000, filling with NULL
Physical layer returned None for index 1df000, filling with NULL
Physical layer returned None for index 1e0000, filling with NULL
Physical layer returned None for index 1e1000, filling with NULL
Physical layer returned None for index 1e2000, filling with NULL
Physical layer returned None for index 1e3000, filling with NULL
Physical layer returned None for index 1e4000, filling with NULL
Physical layer returned None for index 1e5000, filling with NULL
Physical layer returned None for index 1e6000, filling with NULL
Physical layer returned None for index 1e7000, filling with NULL
Physical layer returned None for index 1e8000, filling with NULL
Physical layer returned None for index 1e9000, filling with NULL
Physical layer returned None for index 1ea000, filling with NULL
Physical layer returned None for index 1eb000, filling with NULL
Physical layer returned None for index 1ec000, filling with NULL
Physical layer returned None for index 1ed000, filling with NULL
Physical layer returned None for index 1ee000, filling with NULL
Physical layer returned None for index 1ef000, filling with NULL
Physical layer returned None for index 1f0000, filling with NULL
Physical layer returned None for index 1f1000, filling with NULL
Physical layer returned None for index 1f2000, filling with NULL
Physical layer returned None for index 1f3000, filling with NULL
Physical layer returned None for index 1f4000, filling with NULL
Physical layer returned None for index 1f5000, filling with NULL
Physical layer returned None for index 1f6000, filling with NULL
Physical layer returned None for index 1f7000, filling with NULL
Physical layer returned None for index 1f8000, filling with NULL
Physical layer returned None for index 1f9000, filling with NULL
Physical layer returned None for index 1fa000, filling with NULL
Physical layer returned None for index 1fb000, filling with NULL
Physical layer returned None for index 1fc000, filling with NULL
Physical layer returned None for index 1fd000, filling with NULL
Physical layer returned None for index 1fe000, filling with NULL
Physical layer returned None for index 1ff000, filling with NULL
Physical layer returned None for index 200000, filling with NULL
Physical layer returned None for index 201000, filling with NULL
Physical layer returned None for index 202000, filling with NULL
Physical layer returned None for index 203000, filling with NULL
Physical layer returned None for index 204000, filling with NULL
Physical layer returned None for index 205000, filling with NULL
Physical layer returned None for index 206000, filling with NULL
Physical layer returned None for index 207000, filling with NULL
Physical layer returned None for index 208000, filling with NULL
Physical layer returned None for index 209000, filling with NULL
Physical layer returned None for index 20a000, filling with NULL
Physical layer returned None for index 20b000, filling with NULL
Physical layer returned None for index 20c000, filling with NULL
Physical layer returned None for index 20d000, filling with NULL
Physical layer returned None for index 20e000, filling with NULL
Physical layer returned None for index 20f000, filling with NULL
Physical layer returned None for index 210000, filling with NULL
Physical layer returned None for index 211000, filling with NULL
Physical layer returned None for index 212000, filling with NULL
Physical layer returned None for index 213000, filling with NULL
Physical layer returned None for index 214000, filling with NULL
Physical layer returned None for index 215000, filling with NULL
Physical layer returned None for index 216000, filling with NULL
Physical layer returned None for index 217000, filling with NULL
Physical layer returned None for index 218000, filling with NULL
Physical layer returned None for index 219000, filling with NULL
Physical layer returned None for index 21a000, filling with NULL
Physical layer returned None for index 21b000, filling with NULL
Physical layer returned None for index 21c000, filling with NULL
Physical layer returned None for index 21d000, filling with NULL
Physical layer returned None for index 21e000, filling with NULL
Physical layer returned None for index 21f000, filling with NULL
Physical layer returned None for index 220000, filling with NULL
Physical layer returned None for index 221000, filling with NULL
Physical layer returned None for index 222000, filling with NULL
Physical layer returned None for index 223000, filling with NULL
Physical layer returned None for index 224000, filling with NULL
Physical layer returned None for index 225000, filling with NULL
Physical layer returned None for index 226000, filling with NULL
Physical layer returned None for index 227000, filling with NULL
Physical layer returned None for index 228000, filling with NULL
Physical layer returned None for index 229000, filling with NULL
Physical layer returned None for index 22a000, filling with NULL
Physical layer returned None for index 22b000, filling with NULL
Physical layer returned None for index 22c000, filling with NULL
Physical layer returned None for index 22d000, filling with NULL
Physical layer returned None for index 22e000, filling with NULL
Physical layer returned None for index 22f000, filling with NULL
Physical layer returned None for index 230000, filling with NULL
Physical layer returned None for index 231000, filling with NULL
Physical layer returned None for index 232000, filling with NULL
Physical layer returned None for index 233000, filling with NULL
Physical layer returned None for index 234000, filling with NULL
Physical layer returned None for index 235000, filling with NULL
Physical layer returned None for index 236000, filling with NULL
Physical layer returned None for index 23f000, filling with NULL
Physical layer returned None for index 240000, filling with NULL
Physical layer returned None for index 241000, filling with NULL
Physical layer returned None for index 242000, filling with NULL
Physical layer returned None for index 243000, filling with NULL
Physical layer returned None for index 244000, filling with NULL
Physical layer returned None for index 245000, filling with NULL
Physical layer returned None for index 246000, filling with NULL
Physical layer returned None for index 247000, filling with NULL
Physical layer returned None for index 248000, filling with NULL
Physical layer returned None for index 249000, filling with NULL
Physical layer returned None for index 24a000, filling with NULL
Physical layer returned None for index 24b000, filling with NULL
Physical layer returned None for index 24c000, filling with NULL
Physical layer returned None for index 24d000, filling with NULL
Physical layer returned None for index 24e000, filling with NULL
Physical layer returned None for index 24f000, filling with NULL
Physical layer returned None for index 250000, filling with NULL
Physical layer returned None for index 251000, filling with NULL
Physical layer returned None for index 252000, filling with NULL
Physical layer returned None for index 257000, filling with NULL
Physical layer returned None for index 258000, filling with NULL
Physical layer returned None for index 259000, filling with NULL
Physical layer returned None for index 25a000, filling with NULL
Physical layer returned None for index 25b000, filling with NULL
Physical layer returned None for index 25c000, filling with NULL
Physical layer returned None for index 25d000, filling with NULL
Physical layer returned None for index 25e000, filling with NULL
Physical layer returned None for index 25f000, filling with NULL
Physical layer returned None for index 260000, filling with NULL
Physical layer returned None for index 261000, filling with NULL
Physical layer returned None for index 262000, filling with NULL
Physical layer returned None for index 267000, filling with NULL
Physical layer returned None for index 268000, filling with NULL
Physical layer returned None for index 269000, filling with NULL
Physical layer returned None for index 26a000, filling with NULL
Physical layer returned None for index 26b000, filling with NULL
Physical layer returned None for index 26c000, filling with NULL
Physical layer returned None for index 26d000, filling with NULL
Physical layer returned None for index 26e000, filling with NULL
Physical layer returned None for index 26f000, filling with NULL
Physical layer returned None for index 270000, filling with NULL
Physical layer returned None for index 271000, filling with NULL
Physical layer returned None for index 272000, filling with NULL
Physical layer returned None for index 282000, filling with NULL
Physical layer returned None for index 283000, filling with NULL
Physical layer returned None for index 284000, filling with NULL
Physical layer returned None for index 285000, filling with NULL
Physical layer returned None for index 286000, filling with NULL
Physical layer returned None for index 287000, filling with NULL
Physical layer returned None for index 288000, filling with NULL
Physical layer returned None for index 291000, filling with NULL
Physical layer returned None for index 29d000, filling with NULL
Physical layer returned None for index 29e000, filling with NULL
Physical layer returned None for index 29f000, filling with NULL
Physical layer returned None for index 2a0000, filling with NULL
Physical layer returned None for index 2a1000, filling with NULL
Physical layer returned None for index 2a2000, filling with NULL
Physical layer returned None for index 2a3000, filling with NULL
Physical layer returned None for index 2a4000, filling with NULL
Physical layer returned None for index 2a5000, filling with NULL
Physical layer returned None for index 2a6000, filling with NULL
Physical layer returned None for index 2a7000, filling with NULL
Physical layer returned None for index 2a8000, filling with NULL
Physical layer returned None for index 2a9000, filling with NULL
Physical layer returned None for index 2aa000, filling with NULL
Physical layer returned None for index 2ab000, filling with NULL
Physical layer returned None for index 2ac000, filling with NULL
Physical layer returned None for index 2ad000, filling with NULL
Physical layer returned None for index 2ae000, filling with NULL
Physical layer returned None for index 2af000, filling with NULL
Physical layer returned None for index 2b0000, filling with NULL
Physical layer returned None for index 2b1000, filling with NULL
Physical layer returned None for index 2b2000, filling with NULL
Physical layer returned None for index 2b7000, filling with NULL
Physical layer returned None for index 2b8000, filling with NULL
Physical layer returned None for index 2b9000, filling with NULL
Physical layer returned None for index 2ba000, filling with NULL
Physical layer returned None for index 2bb000, filling with NULL
Physical layer returned None for index 2bc000, filling with NULL
Physical layer returned None for index 2bd000, filling with NULL
Physical layer returned None for index 2be000, filling with NULL
Physical layer returned None for index 2bf000, filling with NULL
Physical layer returned None for index 2c0000, filling with NULL
Physical layer returned None for index 2c1000, filling with NULL
Physical layer returned None for index 2c2000, filling with NULL
**************************************************
**************************************************
Writing out registry: registry.0xe2460a80.UsrClassdat.reg

**************************************************
**************************************************
Writing out registry: registry.0xe174a008.UsrClassdat.reg

**************************************************
**************************************************
Writing out registry: registry.0xe1757860.SAM.reg

**************************************************
**************************************************
Writing out registry: registry.0xe2484008.UsrClassdat.reg

**************************************************
**************************************************
Writing out registry: registry.0xe233aa80.NTUSERDAT.reg

**************************************************
**************************************************
Writing out registry: registry.0xe24560b0.NTUSERDAT.reg

**************************************************
**************************************************
Writing out registry: registry.0xe1013008.no_name.reg

**************************************************
**************************************************
Writing out registry: registry.0xe1763008.default.reg

**************************************************
**************************************************
Writing out registry: registry.0xe13c9a80.software.reg

Physical layer returned None for index a3f000, filling with NULL
Physical layer returned None for index a40000, filling with NULL
Physical layer returned None for index a41000, filling with NULL
Physical layer returned None for index a42000, filling with NULL
Physical layer returned None for index a43000, filling with NULL
Physical layer returned None for index a44000, filling with NULL
Physical layer returned None for index a45000, filling with NULL
Physical layer returned None for index a46000, filling with NULL
Physical layer returned None for index a4b000, filling with NULL
Physical layer returned None for index a4c000, filling with NULL
Physical layer returned None for index a4d000, filling with NULL
Physical layer returned None for index a4e000, filling with NULL
Physical layer returned None for index a4f000, filling with NULL
Physical layer returned None for index a50000, filling with NULL
Physical layer returned None for index a51000, filling with NULL
Physical layer returned None for index a52000, filling with NULL
Physical layer returned None for index a53000, filling with NULL
Physical layer returned None for index a54000, filling with NULL
Physical layer returned None for index a55000, filling with NULL
Physical layer returned None for index a56000, filling with NULL
Physical layer returned None for index a57000, filling with NULL
Physical layer returned None for index a58000, filling with NULL
Physical layer returned None for index a59000, filling with NULL
Physical layer returned None for index a5a000, filling with NULL
Physical layer returned None for index a5b000, filling with NULL
Physical layer returned None for index a5c000, filling with NULL
Physical layer returned None for index a5d000, filling with NULL
Physical layer returned None for index a5e000, filling with NULL
**************************************************
**************************************************
Writing out registry: registry.0xe247c008.NTUSERDAT.reg

**************************************************

mitec windows registry recoveryregistry.0xe1757860.SAM.reg进行分析,可以发现除了AdministratorFHREhpe$Last logon记录,其他均没有



正确用户名密码为FHREhpe$:NIAIWOMA,md5加密得flag

1
8cf1d5b00c27cb8284bce9ccecb09fb7

crypto

LFSXOR

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
import numpy as np
from pylfsr import LFSR
from Crypto.Util.number import *
import random
import string
from secret import flag

assert flag[:6] == "DASCTF"

def xor(a,b):
return str(chr(a^b)).encode('latin1')


def encode(content,key):
tmp=b""
for i in range(len(content)):
tmp += xor(content[i],key[i%len(key)])
return tmp

def shuffle_str(s):
str_list = list(s)
random.shuffle(str_list)
return ''.join(chr(i) for i in str_list).encode('latin1')


ran_str = ''.join(chr(random.randint(1,256)) for _ in range(512)).encode()
content = ran_str+flag

L4 = LFSR(fpoly=[4,3],initstate ='random',verbose=True)
data = L4.runFullCycle()
k4 = b""
for _ in range(len(data)):
a = b''
for _ in range(8):
a += str(L4.next()).encode()
k4 += long_to_bytes(int(a,2))


L5 = LFSR(fpoly=[5,4,2,1],initstate ='random',verbose=True)
data = L5.runFullCycle()
k5 = b""
for _ in range(len(data)):
a = b''
for _ in range(8):
a += str(L5.next()).encode()
k5 += long_to_bytes(int(a,2))

k4 = shuffle_str(k4)
k5 = shuffle_str(k5)

enc2=encode(content,k5)
enc1=encode(content,k4)

print(enc1)
print(enc2)
#b'\xbb\xd3\x08\x15\xc6:\x08\xb2\xb2\x9f\xe4p\xc7\xec\x7f\xfd)\xf6f\x9c\xe4\xd12\xaeJ\x81\xb1\x88\xab\xa5V\xa9\x88\x14\xdf`~\xf6\xdbJ\xb4\x06S!0\xbb\xe4\x1a\xe6R\x8e\x84X\x19K\x95\x07C\xe8\xb2\'\xa9\x80\x15\xec\x8f\x8dY\nK\x85\x99\xb7!\x134\xa9\xb6\x15\xcf&\r\x9b\xe1\x99\xe4]3h~\xf0\xa9\xa5\x14\xee}\xd19l\x14h\x07v *a0\x12\x14\xfe\x0f\x05\xdem\x1d\xe4s2J\x7f\xc28\xf6RR\x8e\xba\xb2m\x18M\xf1\xef!4\x17\xa8\xb4\x14\xc2\x8f\xb9Y:K\xaa\x06T!\x1b\xbb\xfd\xf6Gv\x8e\x9a\xeb\xd9K\xbb\x06N\x9a\x82c\xa9\xa0\x14\xed!\x04\xdbm\x13\xe5w3B\x7f\xd0\xa9\xbf\xb7\x9c\xe3\xd00\x83K\x86\xab3\x7f\xc1\xbb\xfd\x11\x15\xdf\x8e\x80Y\x07\xd8\xe5]2m\xe9\xbb\xce`\x91o\x8f\x8cY!\x81\xe4J\x92\x8c\xa7T\x16E\x15\xf1WMY(\xb8[\x8e2y~\xcbM\x10\x15\xc7\x1fWY\x0cK\x87\xce\xe5 !b\xa8\x83\x14\xec6\xd1!\xc8\x905\xe52L\xf1\xba\xcf\n\x9d\x9d\xe7u\xadm\x06\xe4n2r\xd8\xba\xed\xf6\x7f\x9d\xd8\xd02m\x12G\x07Y\x89\x7f\xc0\xa8\xa4\x15\xe5\x043Y\x1eJ\xae\x07n\x94\x87\xbb\xcf_\x8d\x9d\xd1\x14Y,\x9e\xe5b\xd7\x8c\x7f\xf7\xa8\x8f\x14\xc7\x8f\xb3\xb6\xf1\x93\xe4O\xdd\xc4\xdb\xba\xf6!\x15\xfd.\xd1\x18\xcf\xf6\x03\xea2E\x7f\xe1\xa9\xa5\xfe\x9d\xc9\xd1;\xd9\xee\x05\x06z\xc8\xb2\xbb\xe2\xf7{JW4\xcdm\x1a\xe5U\x8d \x0f&\x14\x7f\xf6\x9d\xd4E\xbf\xc3\xdb\xe4L\xe1\xf7\x90\xbb\xdaZ\xf4\x9d\xd13\xb8m3\xe2D3o~\xf8H\xf6U*\x07lY\x03K\xab\x07~\xa3\x87\xbb\xc9\xf7sAQ\x08Y6J\x86\x07Y\xec\xf7\xbb\xc6s\x15\xc6\x7fEY\x02J\x95\x07Z \x11\xbb\xc6T\x15\xfc-\xd0\x06\xe6\x9f-\x07^ \x15\xbb\xccz\x14\xf3\x8f\x97\xd4l9t\x85\xe8\x8a\xbe\xbb\xf9\xf6f\x9d\xf2\xd19\xa2K\xb6\xcd\xcf\xf6~\xd5\xa9\xaa\x15\xd8\x8e\xb3\x81m9\xe4f\xb2!\x1e\xba\xd8s\xfd\x11\x08W\xa1l;\x01\x07_!\x11\xbb\xdd\xf6x\x9d\xf0\x17Y\x15\xfe\x02\xc7\xa0!.W\xa9\xa5\x8f\x9c\xe8\xd1\x12m\x04\xe5s3Q~\xdd\xa9\xa3\x15\xdb\x8f\xac\xaf\xec\xbb\x10\xde2_\xba\xba\xe8\xf6f.\x1e\xd1\x17l\x06\xe4U\xdd\xf0\xd6~\x0fA\x14\xcb\x8e\xb0Y\x1fJ\xb2\xe4\xb3!"\xba\xfeU\x14\xedY\xd0>l-~\x06P 1\xbb\xf2\xf6waD\xd1(m\x12`\x06@\xb6~\xfa\xa9\xb1\xb0\x9d\xfb\x18\xfbm&\xe4v2w\xce\xba\xcbo\xd5\x07\x11QX<J\xbd\xb22O\x7f\xd8x>\xc8\x9c\xd3\xd03\x9d\xb5\x1e\xd72S\xf2ry\xf1W\x9c\xc89Y\rK\x8f\xff\x8a\xe0\xb5{\xa9\xae\xb1\x9d\xdd\xd1=\xbeK\xa3\x06e!\x08\xba\xd2\xf6j\x9c\xf6\xd0\x0fl#\xe5o\xf5\xaa~\xc2\xa9\x99\x15\xea6\xd1:\xe7\xa8\xe4n\xbb \nV\xa9\x91\x14\xf9}\xd0!m/\xe5|2o\x81\xba\xf8\r\x14\xeb\tR\xc9\xec\xdd`\xbf\xc6\x81\xdfKXW\xb3o.%\xa9\xcd\xb9\x14\xfd\x97\x83\x8eO\n\x03\xb6iuu\xab\x9d\xbc\x15\xf4\xc3\xd6\xc1'
#b'p\xfd\x1ff\xcaB\xa5\xe6`\x87\xa8\x8ci\x855\x92O8P\xa5}^\xd8\xed\x1a\x88=c\xe0\x9f\xedq\xf8\xe1%\x7fX\xd2\xba\xbe\x03\xa8\x9a\x9c\x075\x98"\xca\xed\xa4C^\xc6.j\xec\xfa\x10\xa7\xd9\x01\x06\x87\x90f\xcc\xf6\x1b\x0c\xde\xcc,\xfb\xf0\xc74\x94\xcfj\x8ay\xd5\xd2`.@\xed\xc2\xd8!DSp\xf5\x12f\xf1\xf6#\x80\xbe\x16\xa8\xaeF\xd0\xd1\xd4\xad\xb9\xf7#\x16\x08\xb2[\x1a\x87\x8b\xa0\xfaEF\xbf\x86\x8b\x8c\x90\xa4\xd5\xfbcR\xe2W\x9c\n5\x8b\xcfQ"\xf2\x16\x10\xb2I\x1a\x88\x8b\x8cj\x16\xebp\xccS\xd2\x90\xa8|q\x05\xafq\xfa\xcaHE{\x1a\xba#\xfd\x17/\xb2L\x1a\x87\x8a\x90\xc9Dmp\xef\x0ef\xf2Z|S\x00R\xfc\x1c\x9d\n5\x84\xceS\xb0\xa4M_\xff\xb9\x1a\x8a\x1d\\\x98D\\p\xcb*f\xdcV\xd0\xd5Q\xec\x1a\xfa\xf0\x91\xa8\xd4\x8a\xca\x9c-\x17\x07\xb2_\xff\n\x8a\x83\xfb\xc2\x00\x10\x87\x83\xaeF\xf7#\xd4\xbe\'\xa9\x8a$IMp\x14\xe8\xc0\xa4z\xd1\xb2H\xe6e\x8b\xb0\xcf\xb1\x01<\x87\x88g\xc2Q|H\xbe9\xa9\xad\x9c#4\x8cl8I\x0c\x17$\xb3}\x1b\x94\x01:j7\x00;\x86\xbd\xd2i\xf6\x1a\xa4\'R\xf6?\x9c\x08\xe1\xd4\xab\xdd\x8f\xa4[_\xca/@\xed\xe86\xf7\x9c\x018i\x04\xc3\x90\xa8\xaa\x0c\xde\xf2\xa8\xba?\xf4\xd39\xce\\"\xfe\x16\x0cY/]\xed\xe9l\xce\xa5\x018o,g\xdb\xf7\x12\xdag\xb6=\xfa\xccHgk\xcfH\xbf\x18\x9e\xbd\xb3u\x8f\n$Hk\x0e\xd3\xa6i\xe1\x15=\x16}R]\xb3\xa8\x82\x9b\x0b4\x9a\xcf{\xc2\xa4V\xe8:\x93\x1a\x83\x8a\x97j\t\x82\x88\x86\x80f\xf6*\xa2\xd5\xbe\x08\xa9\x98\x9c#\xf8\\\xceV\xa7\xa5L\xae&/t\xec\xfb\xd9\x02Dnp\xe8Cf\xf0U}R4\x87a\xfb\xf0I_\xd4\xaa\xb4"\xca\x16\x18>/i}\t\x03\xc1\x84\x00!\x86\x93g\xed\xf7\x1d\xc3\xbf\x01c\x06KI[\xd5\x929g\xa4t\x87\xb2\\\x1b\x8d\x0b\xd9\x0bDp\xf5om\xe1\x16\x0e}|ZR\xc4\xfb\xf2H@\xd4\xa28\\c\x17&\x07\xc8\xda~\x8b\x88\x86DS\xeb\x87\x87f\xda\xf73\r\xcaS\xd9\xfa\xfaI`\xd5\x889^R\x97\xaeF\xf6\x1a\x92N\xd8*Er\xc3\x16\xe0)\x91\xba|_Q\x83\x00>;\xff5\x82\xceX"\xd7\x17\x08P\xae\x1a\xb1\x8a\x8f\xc9Ep\xa7\x86\x86g\xf6m|o\xbf\x1c\xa9\xa1\x9c+\xc9\x1e\xcfI#\xfc\x92^\xc1\xb8\x1b\xad\x8a\x9e\xceEu\xb8$\xe0\x0b\x90\x87}[\x0fS\xcab]\xd2\xaaU\xcfh"\xfc\xa2_\xdd/y<C\x05k\x18\x00\x1aw\x1e\x9cA\xf6\x0f\x80w\x83\xae\xb8\x9d\x0e\xdc\xd4\xaf9H\\\xaf\x9ey\xef\x1b\xb4.\xd99Dd\xa2\x87\xa7f\xc6\xf6\n\x0c\xc4R\xd7\xfa\xe4Hc\xd4\xa78Jc\x9c^\xca.u\xed\xfcak&\x8b\x92\x87\x88\xee\x90\x83\x90\x0c\xd9R\xcd\x08\x9c04\xb1\xceC"\xea\xe9^\xe3\xd4\x1a\x9a\x0c[\xfa\xc5\x97\xf5>\x15\xc71\x06\x8d\xac\x19\xa0\t\x0el\xe9\xc6%4\x9d\x80U\xe3\xfdF\x8d\xee\x17.+\x9b\xb3\xf0\x83w\x16\xd9'

exp

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
from Crypto.Util.number import *
import random

def xor(a,b):
return str(chr(a^b)).encode('latin1')

def encode(content,key):
tmp=b""
for i in range(len(content)):
tmp += xor(content[i],key[i%len(key)])
return tmp

enc1=b'\xbb\xd3\x08\x15\xc6:\x08\xb2\xb2\x9f\xe4p\xc7\xec\x7f\xfd)\xf6f\x9c\xe4\xd12\xaeJ\x81\xb1\x88\xab\xa5V\xa9\x88\x14\xdf`~\xf6\xdbJ\xb4\x06S!0\xbb\xe4\x1a\xe6R\x8e\x84X\x19K\x95\x07C\xe8\xb2\'\xa9\x80\x15\xec\x8f\x8dY\nK\x85\x99\xb7!\x134\xa9\xb6\x15\xcf&\r\x9b\xe1\x99\xe4]3h~\xf0\xa9\xa5\x14\xee}\xd19l\x14h\x07v *a0\x12\x14\xfe\x0f\x05\xdem\x1d\xe4s2J\x7f\xc28\xf6RR\x8e\xba\xb2m\x18M\xf1\xef!4\x17\xa8\xb4\x14\xc2\x8f\xb9Y:K\xaa\x06T!\x1b\xbb\xfd\xf6Gv\x8e\x9a\xeb\xd9K\xbb\x06N\x9a\x82c\xa9\xa0\x14\xed!\x04\xdbm\x13\xe5w3B\x7f\xd0\xa9\xbf\xb7\x9c\xe3\xd00\x83K\x86\xab3\x7f\xc1\xbb\xfd\x11\x15\xdf\x8e\x80Y\x07\xd8\xe5]2m\xe9\xbb\xce`\x91o\x8f\x8cY!\x81\xe4J\x92\x8c\xa7T\x16E\x15\xf1WMY(\xb8[\x8e2y~\xcbM\x10\x15\xc7\x1fWY\x0cK\x87\xce\xe5 !b\xa8\x83\x14\xec6\xd1!\xc8\x905\xe52L\xf1\xba\xcf\n\x9d\x9d\xe7u\xadm\x06\xe4n2r\xd8\xba\xed\xf6\x7f\x9d\xd8\xd02m\x12G\x07Y\x89\x7f\xc0\xa8\xa4\x15\xe5\x043Y\x1eJ\xae\x07n\x94\x87\xbb\xcf_\x8d\x9d\xd1\x14Y,\x9e\xe5b\xd7\x8c\x7f\xf7\xa8\x8f\x14\xc7\x8f\xb3\xb6\xf1\x93\xe4O\xdd\xc4\xdb\xba\xf6!\x15\xfd.\xd1\x18\xcf\xf6\x03\xea2E\x7f\xe1\xa9\xa5\xfe\x9d\xc9\xd1;\xd9\xee\x05\x06z\xc8\xb2\xbb\xe2\xf7{JW4\xcdm\x1a\xe5U\x8d \x0f&\x14\x7f\xf6\x9d\xd4E\xbf\xc3\xdb\xe4L\xe1\xf7\x90\xbb\xdaZ\xf4\x9d\xd13\xb8m3\xe2D3o~\xf8H\xf6U*\x07lY\x03K\xab\x07~\xa3\x87\xbb\xc9\xf7sAQ\x08Y6J\x86\x07Y\xec\xf7\xbb\xc6s\x15\xc6\x7fEY\x02J\x95\x07Z \x11\xbb\xc6T\x15\xfc-\xd0\x06\xe6\x9f-\x07^ \x15\xbb\xccz\x14\xf3\x8f\x97\xd4l9t\x85\xe8\x8a\xbe\xbb\xf9\xf6f\x9d\xf2\xd19\xa2K\xb6\xcd\xcf\xf6~\xd5\xa9\xaa\x15\xd8\x8e\xb3\x81m9\xe4f\xb2!\x1e\xba\xd8s\xfd\x11\x08W\xa1l;\x01\x07_!\x11\xbb\xdd\xf6x\x9d\xf0\x17Y\x15\xfe\x02\xc7\xa0!.W\xa9\xa5\x8f\x9c\xe8\xd1\x12m\x04\xe5s3Q~\xdd\xa9\xa3\x15\xdb\x8f\xac\xaf\xec\xbb\x10\xde2_\xba\xba\xe8\xf6f.\x1e\xd1\x17l\x06\xe4U\xdd\xf0\xd6~\x0fA\x14\xcb\x8e\xb0Y\x1fJ\xb2\xe4\xb3!"\xba\xfeU\x14\xedY\xd0>l-~\x06P 1\xbb\xf2\xf6waD\xd1(m\x12`\x06@\xb6~\xfa\xa9\xb1\xb0\x9d\xfb\x18\xfbm&\xe4v2w\xce\xba\xcbo\xd5\x07\x11QX<J\xbd\xb22O\x7f\xd8x>\xc8\x9c\xd3\xd03\x9d\xb5\x1e\xd72S\xf2ry\xf1W\x9c\xc89Y\rK\x8f\xff\x8a\xe0\xb5{\xa9\xae\xb1\x9d\xdd\xd1=\xbeK\xa3\x06e!\x08\xba\xd2\xf6j\x9c\xf6\xd0\x0fl#\xe5o\xf5\xaa~\xc2\xa9\x99\x15\xea6\xd1:\xe7\xa8\xe4n\xbb \nV\xa9\x91\x14\xf9}\xd0!m/\xe5|2o\x81\xba\xf8\r\x14\xeb\tR\xc9\xec\xdd`\xbf\xc6\x81\xdfKXW\xb3o.%\xa9\xcd\xb9\x14\xfd\x97\x83\x8eO\n\x03\xb6iuu\xab\x9d\xbc\x15\xf4\xc3\xd6\xc1'
enc2 = b'p\xfd\x1ff\xcaB\xa5\xe6`\x87\xa8\x8ci\x855\x92O8P\xa5}^\xd8\xed\x1a\x88=c\xe0\x9f\xedq\xf8\xe1%\x7fX\xd2\xba\xbe\x03\xa8\x9a\x9c\x075\x98"\xca\xed\xa4C^\xc6.j\xec\xfa\x10\xa7\xd9\x01\x06\x87\x90f\xcc\xf6\x1b\x0c\xde\xcc,\xfb\xf0\xc74\x94\xcfj\x8ay\xd5\xd2`.@\xed\xc2\xd8!DSp\xf5\x12f\xf1\xf6#\x80\xbe\x16\xa8\xaeF\xd0\xd1\xd4\xad\xb9\xf7#\x16\x08\xb2[\x1a\x87\x8b\xa0\xfaEF\xbf\x86\x8b\x8c\x90\xa4\xd5\xfbcR\xe2W\x9c\n5\x8b\xcfQ"\xf2\x16\x10\xb2I\x1a\x88\x8b\x8cj\x16\xebp\xccS\xd2\x90\xa8|q\x05\xafq\xfa\xcaHE{\x1a\xba#\xfd\x17/\xb2L\x1a\x87\x8a\x90\xc9Dmp\xef\x0ef\xf2Z|S\x00R\xfc\x1c\x9d\n5\x84\xceS\xb0\xa4M_\xff\xb9\x1a\x8a\x1d\\\x98D\\p\xcb*f\xdcV\xd0\xd5Q\xec\x1a\xfa\xf0\x91\xa8\xd4\x8a\xca\x9c-\x17\x07\xb2_\xff\n\x8a\x83\xfb\xc2\x00\x10\x87\x83\xaeF\xf7#\xd4\xbe\'\xa9\x8a$IMp\x14\xe8\xc0\xa4z\xd1\xb2H\xe6e\x8b\xb0\xcf\xb1\x01<\x87\x88g\xc2Q|H\xbe9\xa9\xad\x9c#4\x8cl8I\x0c\x17$\xb3}\x1b\x94\x01:j7\x00;\x86\xbd\xd2i\xf6\x1a\xa4\'R\xf6?\x9c\x08\xe1\xd4\xab\xdd\x8f\xa4[_\xca/@\xed\xe86\xf7\x9c\x018i\x04\xc3\x90\xa8\xaa\x0c\xde\xf2\xa8\xba?\xf4\xd39\xce\\"\xfe\x16\x0cY/]\xed\xe9l\xce\xa5\x018o,g\xdb\xf7\x12\xdag\xb6=\xfa\xccHgk\xcfH\xbf\x18\x9e\xbd\xb3u\x8f\n$Hk\x0e\xd3\xa6i\xe1\x15=\x16}R]\xb3\xa8\x82\x9b\x0b4\x9a\xcf{\xc2\xa4V\xe8:\x93\x1a\x83\x8a\x97j\t\x82\x88\x86\x80f\xf6*\xa2\xd5\xbe\x08\xa9\x98\x9c#\xf8\\\xceV\xa7\xa5L\xae&/t\xec\xfb\xd9\x02Dnp\xe8Cf\xf0U}R4\x87a\xfb\xf0I_\xd4\xaa\xb4"\xca\x16\x18>/i}\t\x03\xc1\x84\x00!\x86\x93g\xed\xf7\x1d\xc3\xbf\x01c\x06KI[\xd5\x929g\xa4t\x87\xb2\\\x1b\x8d\x0b\xd9\x0bDp\xf5om\xe1\x16\x0e}|ZR\xc4\xfb\xf2H@\xd4\xa28\\c\x17&\x07\xc8\xda~\x8b\x88\x86DS\xeb\x87\x87f\xda\xf73\r\xcaS\xd9\xfa\xfaI`\xd5\x889^R\x97\xaeF\xf6\x1a\x92N\xd8*Er\xc3\x16\xe0)\x91\xba|_Q\x83\x00>;\xff5\x82\xceX"\xd7\x17\x08P\xae\x1a\xb1\x8a\x8f\xc9Ep\xa7\x86\x86g\xf6m|o\xbf\x1c\xa9\xa1\x9c+\xc9\x1e\xcfI#\xfc\x92^\xc1\xb8\x1b\xad\x8a\x9e\xceEu\xb8$\xe0\x0b\x90\x87}[\x0fS\xcab]\xd2\xaaU\xcfh"\xfc\xa2_\xdd/y<C\x05k\x18\x00\x1aw\x1e\x9cA\xf6\x0f\x80w\x83\xae\xb8\x9d\x0e\xdc\xd4\xaf9H\\\xaf\x9ey\xef\x1b\xb4.\xd99Dd\xa2\x87\xa7f\xc6\xf6\n\x0c\xc4R\xd7\xfa\xe4Hc\xd4\xa78Jc\x9c^\xca.u\xed\xfcak&\x8b\x92\x87\x88\xee\x90\x83\x90\x0c\xd9R\xcd\x08\x9c04\xb1\xceC"\xea\xe9^\xe3\xd4\x1a\x9a\x0c[\xfa\xc5\x97\xf5>\x15\xc71\x06\x8d\xac\x19\xa0\t\x0el\xe9\xc6%4\x9d\x80U\xe3\xfdF\x8d\xee\x17.+\x9b\xb3\xf0\x83w\x16\xd9'
x=encode(enc2,enc1)[:465]
for i in range(256):
k=0
e2=[0 for i in range(31)]
while k<465:
e2[k%31]=xor(i,x[k])
k+=15
e=b''
for j in e2:
e=e+j
now=encode(enc2,e)
if(i==120):
print(now.decode())
1
7cc33bd1c63b029fa27a6a78f1253024

古典美++

维吉尼亚爆破,得到key为ORDERBY

1
SZWLVSRVVZICMUOJYIIZBSVSSITFSWHPCWCFPVPFXJMWRVJICVRGTCFLHPRJKJKSRVWYFUSEWHFXLHFOSFLYPFXXYFPOEGXFXMBUHVNIYHNDWXPGBXWSYBNDVQRVYRTZUWKTFSKUMVERCCRSBEMKEDRUNYYVRYKXFOKVLVXYGTRQZOEHFEYKJRKRVXFPBOINXFTCSRQCKIGBXWLVOQVVOSFLCRRWXYFQWUHWFGRVVZICMYBUQSKJASUWLRURVVBAVSCTZOPVEUWKKGLQZCRUHJBLRSRSBTFSCYIJICFVDRUUFSIHWYFQONPEGTYBUSMTUSFVVLLOEIGRRGFEGJKIKPMYURAEBHOIIVFNMBVRJKICGYHPMFQOJVLVQYGJHHZUUOJOESFJZVGSIBLUVPEINYZRGISVRHFKIIHPSRWHZTYDGRMEUKSEWMKXYGVPTKZQVVGMUOMHCLOVUMRIRTKICXRUJFSDSRUSWLGZCLRXTMAVESUZQCDDRRHCRKRTLUGHZQXFPLSFIXYFAIGESRSBGRVWYFDSCOTRTRWKZICMRVFXKYUYZZFIKPFSIVICGYTKHVJVAVRIECMYGKKMJJQVROPKIGBBQSKIGBXRJKVKPCLRXEMKEVXRJPGYRASSYJVWLVZJZROPKIGBBPIRUFCDHAYZGKFXPUORGRBEEZRVZQKRCMIKLXVWCBZIMWFJZFIJKICHFSSWUFSYRYJFUVZFLNBQJVUCCJISCBXIVCRFZRUPUBURAEXMICGXYFDOCORVWCFTRQVUMOEHRUJUCEGIIIMKDDRPNGZVVMMFDOCOIECWHYLWKJKSJKIJBGRROSLEGALVXSFESKWMEHQCDHAYFPSEHEIUFSTHRKSCCWWLVFYFKKPVUKSJHIKIYHNRYCEZSWRYIUFCLVEEEKWCHWUPUBZWLZOITFUCFVQSVDPZDCVRGPVBPBKVIMFPOCWLZOEGFIXYJQGFUXZOFSIOIJTMBJLRKICGTKSFMPCFPEEERVFXKYUFWJZEJOMHRYIIZECFGSGQMFKXRZUWTFUWYPUWEJSWGFSINRFXJSUJIRTRVVUINBQBFRRVUMZZVXVORCYHVJUGZCLXNBQUFRHGSYQKLGVUMGRBMKPTSIBIJUFOKVESPSHKKIIJEVKGMJUYBTHFLURVVQMNPLRVUAYBRZRWMKVBSFUPFOEWKXHVJTSXRXKPYZZFIYBBBFLHVBUVRWPRUGHLGINBQCIOSEHGHLGIVJRVVUFLURVFXKYURVVBAVSCBZFIXSYBUZSIEQHFVEPQPSJHRKMWGYHFVHYBRJEZOGKFQHVSGTZVLRMJTROPIJEVKWLIPSUYWLVFYFKKLFXDIEQCZUJZJHIDUMQFPIFVRODRRXUFSGHSGMCHYDXNBJYNLXYUFSZULVBBGURAEXYFUWLVBLHZSEKIGSJLXYJLYJKINBQFRWLVSEZRGXYFPSNDWEPMBVOMJUCBZQKKIGGKLQVBQWKGMUORGFXRUBROCOXYFPWXKXNPPRSXXZTFOCOLRWCHFDWBUFSDZLRURVVQEDFMTKKITPSBKUCZTWCLNRFXNZVDWVNYODLWKIGGEHAQFYZRQHFSYIJWVRMGORQHJICHILIUUMQLUXJFWOJVLVTNCBHJROAMTXVKTCMZQKRTWCLUIWBJZZQKKIPCLJLKICOZUHFZMIKKMELWCLFSLMBARQEXFGHRQHNIYHRQMXOMFRQXCJRHCHKZSJGYHPCUFWENQVGMFRVOZOEBFLXCMLSMHVUPRCRVOGFPVRSWZTFOCOWVFGHNUMKUCBLSWFNCKYHVV


md5加密得flag

1
c82bbc1ac4ab644c0aa81980ed2eb25b

web

web1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
<?php
error_reporting(0);

//I heard you are good at PHPINFO+LFI, flag is in flag.php, find it my dear noob vegetable hacker.
if ( isset($_GET['file']) ) {
$file = $_GET['file'];

if ( $file === "phpinfo" ) {
phpinfo();
exit;
}

if ( preg_match('/proc/i' , $file) ) {
die("private");
}

$file = "/var/www/html/" . $file;
$content = file_get_contents($file);

if ( !$content ) {
die("nothing");
}

if ( preg_match("/script|<\?/i", $content) ) {
die("bypass me");
}

include_once $file;

} else {
highlight_file(__FILE__);
}

结束后其他师傅告诉我直接在phpinfo就可以看flag,服气!

NewWebsite

找到注入点,sqlmap跑

1
sqlmap -u 'http://47.111.104.169:57800/?r=content&cid=15' -D xh --dump-all

看到个webshell

连上,盲猜密码cmd,拿到flag

其他小伙伴做的时候发现不能连,不知是不是公共靶机,其他的人的shell,sqlmap我们看到了用户名admin,及密码admin的md5,尝试访问http://47.111.104.99:51400/admin,自动跳转到http://47.111.104.99:51400/admin/?r=login,登录。
http://47.111.104.99:51400/admin/?r=newwz发表文章界面存在图片上传

传马,在http://47.111.104.99:51400/upload/找到路径连

1
b0c6adbdc82f02ed38669d0ea43469f8