{"id":269,"date":"2024-04-26T16:34:34","date_gmt":"2024-04-26T08:34:34","guid":{"rendered":"http:\/\/xiyu12.top\/?p=258"},"modified":"2024-04-26T16:34:34","modified_gmt":"2024-04-26T08:34:34","slug":"spydersec","status":"publish","type":"post","link":"http:\/\/www.xiyu12.top\/?p=269","title":{"rendered":"SPYDERSEC"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u4e00\u3001\u5728\u5f53\u524d\u7f51\u9875\u641c\u7d22\u53ef\u7591\u6587\u4ef6<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6309F12     \u67e5\u770b\u5f53\u524d\u9875\u9762\u52a0\u8f7d\u7684\u56fe\u7247  \u7136\u540e\u4e0b\u8f7d\u770b\u4e00\u4e0b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/image-17-1024x558.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/image-17-1024x558.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-259\"\/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>wget http:\/\/192.168.1.137\/Challenge.png\nexiftool   challenge.png  \u53ef\u4ee5\u770b\u5230\u6709\u53ef\u4ee5\u5b57\u7b26\u4e32\n35:31:3a:35:33:3a:34:36:3a:35:37:3a:36:34:3a:35:38:3a:33:35:3a:37:31:3a:36:34:3a:34:35:3a:36:37:3a:36:61:3a:34:65:3a:37:61:3a:34:39:3a:33:35:3a:36:33:3a:33:30:3a:37:38:3a:34:32:3a:34:66:3a:33:32:3a:36:37:3a:33:30:3a:34:61:3a:35:31:3a:33:64:3a:33:64\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ExifTool Version Number         : 12.76\nFile Name                       : Challenge.png\nDirectory                       : .\nFile Size                       : 85 kB\nFile Modification Date\/Time     : 2015:09:01 14:25:59+08:00\nFile Access Date\/Time           : 2024:04:26 16:32:24+08:00\nFile Inode Change Date\/Time     : 2024:04:26 16:32:24+08:00\nFile Permissions                : -rw-r--r--\nFile Type                       : PNG\nFile Type Extension             : png\nMIME Type                       : image\/png\nImage Width                     : 540\nImage Height                    : 540\nBit Depth                       : 8\nColor Type                      : RGB with Alpha\nCompression                     : Deflate\/Inflate\nFilter                          : Adaptive\nInterlace                       : Noninterlaced\nBackground Color                : 255 255 255\nPixels Per Unit X               : 2835\nPixels Per Unit Y               : 2835\nPixel Units                     : meters\nComment                         : 35:31:3a:35:33:3a:34:36:3a:35:37:3a:36:34:3a:35:38:3a:33:35:3a:37:31:3a:36:34:3a:34:35:3a:36:37:3a:36:61:3a:34:65:3a:37:61:3a:34:39:3a:33:35:3a:36:33:3a:33:30:3a:37:38:3a:34:32:3a:34:66:3a:33:32:3a:36:37:3a:33:30:3a:34:61:3a:35:31:3a:33:64:3a:33:64\nImage Size                      : 540x540\nMegapixels                      : 0.292\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5904\u7406\u4e00\u4e0b \u8fd9\u4e9b\u5b57\u7b26 \u9996\u5148\u5224\u65ad\u662f \u5341\u516d\u8fdb\u5236\u6570  \u53ef\u4ee5\u5c1d\u8bd5\u8f6c\u5341\u8fdb\u5236  \u7136\u540e\u8f6c\u5b57\u7b26<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4ee5\u4f7f\u7528 <a href=\"https:\/\/ctf.mzy0.com\/CyberChef3\/\">https:\/\/ctf.mzy0.com\/CyberChef3\/<\/a>  cyberchef \u5728\u7ebf\u8f6c\u6362<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e5f\u53ef\u4ee5\u5c1d\u8bd5\u4f7f\u7528ipython3 <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\nf=\"35:31:3a:35:33:3a:34:36:3a:35:37:3a:36:34:3a:35:38:3a:33:35:3a:37:31:3a:36:34:3a:34:35:3a:36:37:3a:36:61:3a:34:65:3a:37:61:3a:34:39:3a:33:35:3a:36:33:3a:33:30:3a:37:38:3a:34:32:3a:34:66:3a:33:32:3a:36:37:3a:33:30:3a:34:61:3a:35:31:3a:33:64:3a:33:64\"\nf1=f.split(':')\ndata=''.join( &#91; chr(int(i,16))  for i in f1 ])\nprint(data)  51:53:46:57:64:58:35:71:64:45:67:6a:4e:7a:49:35:63:30:78:42:4f:32:67:30:4a:51:3d:3d\ndata1=''.join( &#91; chr(int(i,16))  for i in data.split(':') ])\nprint(data1)\nQSFWdX5qdEgjNzI5c0xBO2g0JQ==\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u7834\u89e3\u51fa\u6765\u4e00\u4e2abase64\u7f16\u7801\u7684\u5b57\u7b26\u4e32  \u89e3\u7801 \u5f97\u5230  A!Vu~jtH#729sLA;h4%<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e8c\u3001\u67e5\u770b\u9875\u9762\u6e90\u4ee3\u7801<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4ee5\u770b\u5230 \u5b58\u5728\u4e00\u4e2ajs\u4ee3\u7801\u5757   \u62ff\u51fa\u6765\u8fd0\u884c\u4e00\u4e0b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE-2024-04-26-170119-1024x354.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE-2024-04-26-170119-1024x354.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-262\"\/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(\/^\/,String)){while(c--){d&#91;c.toString(a)]=k&#91;c]||c.toString(a)}k=&#91;function(e){return d&#91;e]}];e=function(){return'\\\\w+'};c=1};while(c--){if(k&#91;c]){p=p.replace(new RegExp('\\\\b'+e(c)+'\\\\b','g'),k&#91;c])}}return p}('7:0:1:2:8:6:3:5:4:0:a:1:2:d:c:b:f:3:9:e',16,16,'6c|65|72|27|75|6d|28|61|74|29|64|62|66|2e|3b|69'.split('|'),0,{}))<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE-2024-04-26-170258.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE-2024-04-26-170258.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-263\"\/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd0\u884c\u62a5\u9519\u4e86  \u770b\u7740\u50cf\u662f\u88ab\u6df7\u6dc6\u4e86  \u53cd\u6df7\u6dc6\u4e00\u4e0b   <a href=\"https:\/\/www.itutool.com\/tools\/javascript-deobfuscator\">\u5728\u7ebfJS\u53cd\u6df7\u6dc6\u89e3\u5bc6\u8fd8\u539f\u5de5\u5177 &#8211; \u7231\u56fe\u5de5\u5177\u7bb1 (itutool.com)<\/a><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>61:6c:65:72:74:28:27:6d:75:6c:64:65:72:2e:66:62:69:27:29:3b\nalert('mulder.fbi');\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e09\u3001F12\u67e5\u770b\u54cd\u5e94\u5305\u7684\u5185\u5bb9<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4ee5\u770b\u5230  cookie\u4e2d\u6709\u4e00\u4e2aurl  <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cookie   URI=%2Fv%2F81JHPbvyEQ8729161jd6aKQ0N4%2F<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u76f4\u63a5\u8bbf\u95ee\u4e0d\u4e86  \u52a0\u4e0a\u4e0a\u9762\u7684mulder.fbi \u53ef\u4ee5\u4e0b\u8f7d\u4e00\u4e2amp4\u6587\u4ef6<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE-2024-04-26-170916-1024x801.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"http:\/\/xiyu12.top\/wp-content\/uploads\/2024\/04\/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE-2024-04-26-170916-1024x801.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-264\"\/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>wget <a href=\"http:\/\/192.168.1.137\/\">http:\/\/192.168.1.137\/<\/a>v\/81JHPbvyEQ8729161jd6aKQ0N4\/mulder.fbi<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001\u5728\u5f53\u524d\u7f51\u9875\u641c\u7d22\u53ef\u7591\u6587\u4ef6 \u6309F12 \u67e5\u770b\u5f53\u524d\u9875\u9762\u52a0\u8f7d\u7684\u56fe\u7247 \u7136\u540e\u4e0b\u8f7d\u770b\u4e00\u4e0b \u5904\u7406\u4e00\u4e0b \u8fd9\u4e9b\u5b57\u7b26 \u9996\u5148\u5224\u65ad\u662f  [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[29,41,104,117],"class_list":["post-269","post","type-post","status-publish","format-standard","hentry","category-target-aircraft","tag-exiftool","tag-js","tag-104","tag-117"],"_links":{"self":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts\/269","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=269"}],"version-history":[{"count":0,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts\/269\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=269"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}