攻防世界misc——311

下载附件&＃xff0c;得到图片

010跑一下模板&＃xff0c;正常&＃xff0c;没问题

送进Stegsolve&＃xff0c;发现lsb隐写&＃xff0c;数据分析发现zip文件

保存二进制文件为压缩包&＃xff0c;解压&＃xff0c;得到flag.txt

iVBORw0KGgoAAAANSUhEUgAAAPoAAAD6CAYAAACI7Fo9AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAAEnQAABJ0Ad5mH3gAAAVqSURBVHhe7d1bTuRGAEDRIftfK1tIxgNRJNINbpff9xzJmvlpP6q5KpeB5u3v334Bt/bX57/AjQkdAoQOAUKHAKFDgNAhQOgQIHQIEDoECB0ChA4BQocLe39///zf9/xSCwSY0SFA6BAgdAgQOgQIHQKEDgGLv7329vb2&＃43;b/1PDqVZ8dZ67uCe13HV1sc95GRcRo9x7XeI8aZ0SFA6BAgdAgQOgR4GLdw/99d/5xz2/q61jD6Hp/pWuo2CX3NN3jrIJbuf/T6t76uNVzhHJnHrTsECB0ChM6fW/RHG/chdAgQOgQIHQJO8330Z6fx7DhrfYtni7XonHPb&＃43;rpe8eoYHHGOjDGjX9AU5twNJkLnzwz9aOM&＃43;hA4BQocAoUOA0CHAb68N7P&＃43;o1z7zaJ9r72&＃43;y1tizHzM6BAgdAoQOAZddo8/107mMrEO3eO3aRt6Lrcee/ZjRIUDoECB0CBA6BAgdAhY/dQeuw4wOAUKHAKFDgNAhQOgQIHQIEDoECB0ChA4BQocAoUOA0CFA6BAgdAgQOgQIHQKEDgFChwAfJcVDI3&＃43;cgvMZCv3RF8PaXwhb/7WQO/81kpFY5772u/E789jUuHWHAKFDgNAhQOgQcMmHcWseY/Sh09rXexaj4zK569hckRmdIVPMzzbOQ&＃43;gQIHQIEPqNTevnRxs9t/7JuDnnssUX/lnWp8&＃43;ubY9xOcsY8MGMDgFChwChQ4DQIeD0D&＃43;PmWnouIw&＃43;sJmcag69Gr22uM48BH8zoECB0CBA6BKy&＃43;Rp/rLOvEkWt45izr09E1&＃43;lbv75L9nmVMr&＃43;rUoY9GuMcxHnllSJcef&＃43;Ta5p7fVu/vkv2&＃43;Mqb8n1t3CBA6BAgdAoTO7qb19qsbY4YexgHXYEaHAKFDgNAhQOgQIHQIEDoECB0ChA4BQocAoUOA0CFA6BAgdAgQOgT4NdWTOeoz7I46Lvswo0OA0CFA6BBw6jX62uvGK6wZrdHZwmF/wGHy06GFvo451/3suCPv0RXGu0LoJ3NUOEK/N2t0CBA6BAgdAlZfo6&＃43;5LhvZ/9bntpWj1rzPjvvTMY86X15jRocAoUOAW/eT&＃43;e5WeImR8Rp1hfGuMKNDwOqhTzPDnA3YjxkdAoQOAUKHAKFDwC6/j/7o4ducwy593WTktUf67kHlluf/7LhL36fJFca7wowOAUKHAKFDwOVCn9aDczbgP4sfxo3GNPKQZ6mfjrnW8UYeQu19zf96dtyR92lkHFiXW3cIEDoECB0ChA4Bu/xk3FJHPZiCuzl16MA63LpDgNAhQOgQIHQIEDoECB0ChA4BQocAoUOA0CFA6BAgdAgQOgQIHQKEDgFChwChQ8DQJ8yMftTTWT7c5tF1rH1uI2PlQ4AYdckZfYrm6wY859YdAoQOAUKHgNUfxu3x4Gjt4&＃43;5xHSPPEfYYU&＃43;5N6L8ddR2PnOlcuA&＃43;37hcwxf91g1cIHQKEDgGH/WTcmdbUa&＃43;9vxNwxPer8uKbbhL42oXMnbt0hQOgXMM3eXzd4hdAhYGiNPtfaD7tqa3QzOKMuGfpcV4xG6GzBrTsECB0ChA4Bi9foow/ESmv0K4wV92ZGhwChQ4DQIUDoELDLD8wcxcM4&＃43;HDr0IEPbt0hQOgQIHQIEDoECB0ChA4BQocAoUOA0CFA6BAgdAgQOgQIHQKEDgFChwChQ4DQIUDoECB0CBA6BAgdAoQOAUKHAKFDgNAhQOgQIHQIEDoECB0ChA4BQocAoUOA0CFA6BAgdAgQOgQIHQKEDgFChwChQ4DQIUDoECB0CBA6BAgdAoQOAUKHAKFDgNAhQOgQIHQIEDoECB0ChA4BQocAoUOA0CFA6BAgdAgQOgQIHQKEDgFChwChw&＃43;39&＃43;vUPmuaZZgm&＃43;XxcAAAAASUVORK5CYII&＃61;

看到开头iVBORw0KGgoAA……猜测base64的png图片编码&＃xff0c;直接解码&＃xff0c;报错
找一张png图片转成编码看看&＃xff0c;差了前面关键的几个字符

补上&＃xff0c;再试试&＃xff0c;得到flag

总结&＃xff1a;不能光积累各种文件16进制标识符&＃xff0c;还要适当积累各种总文件base64或其它格式编码后的标识符