{"id":313,"date":"2022-12-25T15:35:25","date_gmt":"2022-12-25T07:35:25","guid":{"rendered":"https:\/\/shangwendada.co\/?p=313"},"modified":"2026-01-08T16:50:03","modified_gmt":"2026-01-08T08:50:03","slug":"reverse2022%e5%b9%b4%e6%98%a5%e7%a7%8b%e6%9d%afeasy_python","status":"publish","type":"post","link":"https:\/\/blog.shangwendada.top\/index.php\/2022\/12\/25\/reverse2022%e5%b9%b4%e6%98%a5%e7%a7%8b%e6%9d%afeasy_python\/","title":{"rendered":"[Reverse]2022\u5e74\u6625\u79cb\u676feasy_python"},"content":{"rendered":"

2022\u5e74\u6625\u79cb\u676feasy_python<\/h1>\n

\u65b9\u6cd5\u4e00<\/h2>\n

\u76f4\u63a5\u770b\u5230\u9898\u76ee\u6587\u4ef6<\/p>\n

  3           0 LOAD_CONST               1 (204)\n              3 LOAD_CONST               2 (141)\n              6 LOAD_CONST               3 (44)\n              9 LOAD_CONST               4 (236)\n             12 LOAD_CONST               5 (111)\n             15 LOAD_CONST               6 (140)\n             18 LOAD_CONST               6 (140)\n             21 LOAD_CONST               7 (76)\n             24 LOAD_CONST               3 (44)\n             27 LOAD_CONST               8 (172)\n             30 LOAD_CONST               9 (7)\n             33 LOAD_CONST               9 (7)\n             36 LOAD_CONST              10 (39)\n             39 LOAD_CONST              11 (165)\n             42 LOAD_CONST              12 (70)\n             45 LOAD_CONST               9 (7)\n             48 LOAD_CONST              10 (39)\n             51 LOAD_CONST              13 (166)\n             54 LOAD_CONST              11 (165)\n             57 LOAD_CONST              14 (134)\n             60 LOAD_CONST              14 (134)\n             63 LOAD_CONST               6 (140)\n             66 LOAD_CONST               1 (204)\n             69 LOAD_CONST              11 (165)\n             72 LOAD_CONST               9 (7)\n             75 LOAD_CONST              10 (39)\n             78 LOAD_CONST              15 (230)\n             81 LOAD_CONST               6 (140)\n             84 LOAD_CONST              11 (165)\n             87 LOAD_CONST              12 (70)\n             90 LOAD_CONST               3 (44)\n             93 LOAD_CONST               8 (172)\n             96 LOAD_CONST              16 (102)\n             99 LOAD_CONST              17 (6)\n            102 LOAD_CONST               6 (140)\n            105 LOAD_CONST               1 (204)\n            108 LOAD_CONST              15 (230)\n            111 LOAD_CONST              15 (230)\n            114 LOAD_CONST               7 (76)\n            117 LOAD_CONST              18 (198)\n            120 LOAD_CONST              19 (38)\n            123 LOAD_CONST              20 (175)\n            126 BUILD_LIST              42\n            129 STORE_FAST               0 (flag)\n\n  4         132 SETUP_LOOP              54 (to 189)\n            135 LOAD_GLOBAL              0 (range)\n            138 LOAD_CONST              21 (42)\n            141 CALL_FUNCTION            1\n            144 GET_ITER            \n        >>  145 FOR_ITER                40 (to 188)\n            148 STORE_FAST               1 (i)\n\n  5         151 LOAD_FAST                0 (flag)\n            154 LOAD_FAST                1 (i)\n            157 BINARY_SUBSCR       \n            158 LOAD_CONST              22 (5)\n            161 BINARY_RSHIFT       \n            162 LOAD_FAST                0 (flag)\n            165 LOAD_FAST                1 (i)\n            168 BINARY_SUBSCR       \n            169 LOAD_CONST              23 (3)\n            172 BINARY_LSHIFT       \n            173 BINARY_OR           \n            174 LOAD_CONST              24 (255)\n            177 BINARY_AND          \n            178 LOAD_FAST                0 (flag)\n            181 LOAD_FAST                1 (i)\n            184 STORE_SUBSCR        \n            185 JUMP_ABSOLUTE          145\n        >>  188 POP_BLOCK           \n        >>  189 LOAD_CONST               0 (None)\n            192 RETURN_VALUE        \n<\/code><\/pre>\n
\u663e\u7136\u8fd9\u662f\u4e00\u6bb5python\u6587\u4ef6\u7684\u5b57\u8282\u7801,\u770b\u5230129\u884c\u4e4b\u524d\u7684\u4e00\u8fde\u4e32\u7684\u8d4b\u503c\u8bed\u53e5\uff0c\u52a0\u4e0a\u6570\u7ec4\u540d\u5b57\u53eb\u505aflag\u6211\u4eec\u53ef\u4ee5\u77e5\u9053\u8fd9\u4e2a\u5c31\u662f\u6211\u4eec\u9700\u8981\u89e3\u5bc6\u7684\u660e\u6587\uff0c\u90a3\u4e48\u6211\u4eec\u518d\u770b\u63a5\u4e0b\u6765\u7684\u52a0\u5bc6\u90e8\u5206
\n132 SETUP_LOOP              54 (to 189)
\n\u770b\u5230\u8fd9\u4e2a\u6307\u4ee4\uff0c\u5c31\u662f\u8fdb\u884c\u4e00\u4e2a\u5faa\u73af\uff0c\u4e5f\u5c31\u662f189-54=135
\n\u90a3\u4e48\u5c31\u662f135\u884c\u5230189\u884c\u8bbe\u7f6e\u4e86\u4e00\u4e2a\u5faa\u73af,\u8fed\u4ee3\u5668\u662f0-42
\n
\"file\"<\/div>
\n\u53ef\u4ee5\u770b\u5230\u5faa\u73af\u7684\u4e3b\u8981\u5185\u5bb9\u5c31\u662f\uff0c\u9996\u5148\u62ff\u5230flag[i]\u7684\u503c\u7136\u540e\u53f3\u79fb5\u4f4d
\n\u7136\u540e\u518d\u53d6flag[i]\u7684\u503c\uff0c\u7136\u540e\u5de6\u79fb3\u4f4d,\u7136\u540e\u5c06\u4e24\u4e2a\u503c\u8fdb\u884c\u4f4d\u6216\u8fd0\u7b97\u4e4b\u540e\u518d\u4e0e255\u518d\u5b58\u5165flag[i]<\/p>\n
\u65b9\u6cd5\u4e8c<\/h2>\n
\u76f4\u63a5\u8bf7ai
\n
\"file\"<\/div><\/p>\n
exp<\/h1>\n
python:<\/h2>\n
flag = [204, 141, 44, 236, 111, 140, 140, 76, 44, 172, 7, 7, 39, 165, 70, 7, 39, 166, 165, 134, 134, 140, 204, 165, 7, 39, 230, 140, 165, 70, 44, 172, 102, 6, 140, 204, 230, 230, 76, 198, 38, 175]\n\nfor i in range(42):\n    flag[i] = (flag[i] >> 5) | (flag[i] << 3) & 255\n    print(chr(flag[i]),end='')\n<\/code><\/pre>\n
C++<\/h2>\n
#include<iostream>\nusing namespace std;\nint main()\n{\n    int enc[] = {\n        204, 141, 44, 236, 111, 140, 140, 76, 44, 172, 7, 7,\n        39, 165, 70, 7, 39, 166, 165, 134, 134, 140, 204, 165,\n        7, 39, 230, 140, 165, 70, 44, 172, 102, 6, 140, 204,\n        230, 230, 76, 198, 38, 175\n    };\n    for(int i =  0 ; i < 42 ; i ++ )\n    {\n        printf("%c",(enc[i]>>5|enc[i]<<3)%0xFFF);\n    }\n}<\/code><\/pre>\n
<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
2022\u5e74\u6625\u79cb\u676feasy_python \u65b9\u6cd5\u4e00 \u76f4\u63a5\u770b\u5230\u9898\u76ee\u6587\u4ef6 3 0 LOAD_CONST 1 (204) […]<\/p>\n","protected":false},"author":1,"featured_media":153,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts\/313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/comments?post=313"}],"version-history":[{"count":3,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts\/313\/revisions"}],"predecessor-version":[{"id":1588,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts\/313\/revisions\/1588"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/media\/153"}],"wp:attachment":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/media?parent=313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/categories?post=313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/tags?post=313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}