{"id":318,"date":"2022-12-25T21:32:50","date_gmt":"2022-12-25T13:32:50","guid":{"rendered":"https:\/\/shangwendada.co\/?p=318"},"modified":"2022-12-25T22:32:01","modified_gmt":"2022-12-25T14:32:01","slug":"reverse2022%e5%b9%b4%e6%98%a5%e7%a7%8b%e6%9d%afgodeep","status":"publish","type":"post","link":"https:\/\/blog.shangwendada.top\/index.php\/2022\/12\/25\/reverse2022%e5%b9%b4%e6%98%a5%e7%a7%8b%e6%9d%afgodeep\/","title":{"rendered":"[Reverse]2022\u5e74\u6625\u79cb\u676fgodeep"},"content":{"rendered":"

2022\u5e74\u6625\u79cb\u676fgodeep<\/h1>\n

\u9898\u76ee\u4e0b\u8f7d:godeep<\/a><\/h2>\n

\u5206\u6790<\/h2>\n

\"file\"<\/div>
\n\u770b\u5230\u4e3b\u51fd\u6570\u6ca1\u6709\u53d1\u73b0\u4ec0\u4e48\u7279\u522b\u7684\u4e1c\u897f\uff0c\u4e8e\u662f\u51b3\u5b9a\u52a8\u6001\u8c03\u8bd5\u5206\u6790
\n
\"file\"<\/div>
\n\u968f\u4fbf\u8f93\u5165\u4e00\u4e2a123123
\n\u8fdb\u5165\u7b2c\u4e00\u4e2agoddeeptree\u7684\u65f6\u5019\u53ef\u4ee5\u53d1\u73b0
\n
\"file\"<\/div>
\n\u4ed6\u9700\u8981\u5224\u65ad\u4e00\u4e2av4\u624d\u80fd\u8fdb\u5165\u4e0b\u4e00\u4e2a\u6587\u4ef6,\u770b\u770bv4\u91cc\u9762\u662f\u4ec0\u4e48
\n
\"file\"<\/div>
\n\u53d1\u73b0\u662f\u4e00\u5806\u4e8c\u8fdb\u5236\u7684\u6570\u636e
\n
\"file\"<\/div>
\n\u6b38\uff0c\u53d1\u73b0\u6b63\u597d\u662f123123\uff0c\u90a3\u4e48\u903b\u8f91\u5c31\u662f\u5f88\u660e\u663e\u4e86\uff0c\u5c31\u662f\u628a\u6211\u4eec\u8f93\u5165\u7684\u4e1c\u897f\u53d8\u6210\u4e8c\u8fdb\u5236\uff0c\u7136\u540e\u901a\u8fc7\u4e8c\u8fdb\u5236\u91cc\u9762\u768401\u6765\u5224\u65ad\u8fdb\u5165if\u91cc\u9762\u7684\u4e0a\u9762\u7684\u51fd\u6570\u8fd8\u662f\u4e0b\u9762\u7684\u51fd\u6570
\n\u6700\u7ec8\u53ef\u4ee5\u8d70\u5230\u8f93\u51faright\u7684\u51fd\u6570\u3002
\n\u90a3\u4e48\u6211\u4eec\u76f4\u63a5\u4eceright\u51fd\u6570\u4e00\u6b65\u6b65\u56de\u63a8\u4ea4\u53c9\u5f15\u7528\u5c31\u53ef\u4ee5\u5f97\u5230\u6700\u7ec8\u7684\u4e8c\u8fdb\u5236\u5bc6\u6587\u4e86<\/p>\n

\u9898\u89e3<\/h2>\n

\"file\"<\/div>
\n\u4e3b\u51fd\u6570\u91cc\u53d1\u73b0\u4e86\u4e00\u4e2ahint\uff0c\u544a\u8bc9\u6211\u4eec\u5982\u679c\u6211\u4eec\u6210\u529f\u4e86\u5c31\u4f1a\u8f93\u51fa\u4e00\u4e2aright
\n\u6211\u4eec\u76f4\u63a5\u641c\u7d22right
\n
\"file\"<\/div>
\n\u53d1\u73b0\u8fd9\u4e2a\u5c31\u662f\u8f93\u51faright\u7684\u51fd\u6570
\n\u6211\u4eec\u4ea4\u53c9\u5f15\u7528\u8fd9\u4e2a\u51fd\u6570
\n
\"file\"<\/div>
\n\u8fd9\u5c31\u662f\u6700\u540e\u4e00\u4e2a\u5224\u65ad\u51fd\u6570\u4e86
\n\u770b\u5230\u51fd\u6570\u7a97\u53e3\u53d1\u73b0\u6709\u51e0\u5343\u4e2a\u51fd\u6570\uff0c\u4e00\u4e2a\u4e2a\u6765\u4f1a\u6b7b\u6389\u53bb\u3002\u90a3\u4e48\u6211\u4eec\u9700\u8981\u7528\u5230idapython\u8fd9\u4e2a\u63d2\u4ef6\u6765\u5229\u7528\u811a\u672c\u76f4\u63a5\u8fdb\u884c\u4ea4\u53c9\u5f15\u7528
\n\u6211\u4eec\u53ef\u4ee5\u53d1\u73b0\u5f15\u7528\u56de\u6765\u7684\u51fd\u6570\uff0c\u5728\u4e0a\u9762\u5c31\u662f1\u5728\u4e0b\u9762\u5c31\u662f0\uff0c\u90a3\u4e48\u6211\u4eec\u53ef\u4ee5\u53d1\u73b0\u51fd\u6570\u5934\u5730\u5740\u51cf\u53bb\u5f15\u7528\u70b9\u7684\u5730\u5740\u5982\u679c\u5c0f\u4e8e111\u90a3\u4e48\u51fd\u6570\u5c31\u662f\u5728\u4e0a\u9762\u7684\uff0c\u7136\u540e\u6211\u4eec\u5c31\u901a\u8fc7idapython\u6765\u8fdb\u884c\u5224\u65ad\u7136\u540e\u8f93\u51fa
\n\u6211\u7684\u65b9\u6848\u5982\u4e0b:<\/p>\n
import idautils\nimport idautils\nimport idaapi\n\ndef get_function_address(function_name):\n    # \u904d\u5386\u6240\u6709\u51fd\u6570\n    for function in idautils.Functions():\n        # \u83b7\u53d6\u51fd\u6570\u540d\u79f0\n#        print(idaapi.get_name(function))\n        name = idaapi.get_name(function)\n        if name == function_name:\n            # \u5982\u679c\u540d\u79f0\u5339\u914d\uff0c\u5219\u8fd4\u56de\u51fd\u6570\u5730\u5740\n            return function\n    # \u5982\u679c\u6ca1\u6709\u627e\u5230\u51fd\u6570\uff0c\u5219\u8fd4\u56de BADADDR\n    return idc.BADADDR\n\ndef fun(xef):\n    #print(hex(xef))\n    func_name = get_func_name(xef)\n    #print(func_name)\n    #print(hex(xef))\n    func_addr = get_function_address(func_name)\n    #print(hex(func_addr))\n    #print(0x65aa50 - 0x65A9C0)\n    #print(xef-func_addr)\n    if(xef-func_addr<=111):\n        print('1',end='')\n    else:\n        print('0',end='')\n    refs = CodeRefsTo(func_addr,0)\n    for ref in refs:\n        xef= ref\n        break\n    if(xef!=0x6D3006): \n        return fun(xef)\n    else:\n        print()\n        return 0\n\nxef = get_func_name(0x65AAB8)#0x65AAB8\u662f\u7b2c\u4e00\u4e2a\u5f15\u7528\u7684\u5730\u5740\nfunction_addr = get_function_address(xef)<\/code><\/pre>\n
\"file\"<\/div>
\n\u53d1\u73b0\u8f93\u51fa\u4e86\u6211\u4eec\u60f3\u8981\u7684\u4e8c\u8fdb\u5236\u6570\u636e\uff0c\u4e0d\u8fc7\u53ef\u80fd\u662f\u6211\u7684\u811a\u672c\u592a\u70c2\u4e86
\n\u5bfc\u81f4\u540e\u9762\u8f93\u51fa\u7684\u90fd\u662f0
\n\u5c31\u4e0d\u77e5\u9053\u6700\u540e\u9700\u8981\u53d6\u51e0\u4e2a\u4e86\uff0c\u6211\u4eec\u53ef\u4ee5\u5168\u90fd\u590d\u5236\u4e0b\u6765\u7136\u540e\u770b\u770b\u6709\u591a\u5c11\u4e2a\u6570\u5b57\uff0c\u5230\u6700\u540e\u4e00\u4e2a1\u6211\u8fd9\u91cc\u53d1\u73b0\u662f287\u4e2a\uff0c\u6211\u4eec\u53ef\u4ee5\u53d1\u73b0\u4e00\u4e2a\u5b57\u7b26\u662f\u4e24\u4e2a\u5b57\u8282\u4e5f\u5c31\u662f8\u4e2a\u4e8c\u8fdb\u5236\u4f4d\uff0c\u90a3\u4e48287%8\u4f597\u90a3\u4e48\u6211\u4eec\u53ea\u9700\u8981\u8865\u4e00\u4e2a0 \u5c31\u53ef\u4ee5\u5b8c\u7f8e\u8f93\u51fa\u4e86
\n\u7531\u4e8e\u6211\u4eec\u662f\u4ece\u540e\u5f80\u524d\u5224\u65ad\u7684\uff0c\u6240\u4ee5\u5b57\u7b26\u9700\u8981\u8fdb\u884c\u5012\u7f6e,\u811a\u672c\u5982\u4e0b:<\/p>\n
#include<iostream>\n#include<algorithm>\n#include<cstdio>\n#include<cmath>\n#include<map>\n#include<vector>\n#include<queue>\n#include<stack>\n#include<set>\n#include<string>\n#include<cstring>\n#include<list>\n#include<stdlib.h>\nusing namespace std;\ntypedef int status;\ntypedef int selemtype;\n\/*\n                   _ooOoo_\n                  o8888888o\n                  88" . "88\n                  (| -_- |)\n                  O\\  =  \/O\n               ____\/`---'\\____\n            .'  \\\\|     |\/\/  `.\n            \/  \\\\|||  :  |||\/\/  \\\n           \/  _||||| -:- |||||-  \\\n           |   | \\\\\\  -  \/\/\/ |   |\n           | \\_|  ''\\---\/''  |   |\n           \\  .-\\__  `-`  ___\/-. \/\n         ___`. .'  \/--.--\\  `. . __\n      ."" '<  `.___\\_<|>_\/___.'  >'"".\n     | | :  `- \\`.;`\\ _ \/`;.`\/ - ` : | |\n     \\  \\ `-.   \\_ __\\ \/__ _\/   .-` \/  \/\n======`-.____`-.___\\_____\/___.-`____.-'======\n                   `=---='\n^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n    \u4f5b\u7956\u4fdd\u4f51       \u6c38\u4e0d\u5b95\u673a     \u6c38\u65e0BUG\n*\/\n\nchar a[]="100001100000110001000110110011000010011010101100001011001110110011000110010001100001110011101100101101001110110000011100100111000001110010110100011001101001110010001100001011001011010001000110111011000110011001100110101101001110110010011100001001100100011011001100000011001100011001100110";\nint main ()\n{\n    strrev(a);\n    cout<<a;\n}\n<\/code><\/pre>\n
\u4e8c\u8fdb\u5236\u8f6c\u4e3a\u5b57\u7b26\u7f51\u7ad9:https:\/\/coding.tools\/cn\/binary-to-text<\/a>
\n
\"file\"<\/div><\/p>\n","protected":false},"excerpt":{"rendered":"
2022\u5e74\u6625\u79cb\u676fgodeep \u9898\u76ee\u4e0b\u8f7d:godeep \u5206\u6790 \u770b\u5230\u4e3b\u51fd\u6570\u6ca1\u6709\u53d1\u73b0\u4ec0\u4e48\u7279\u522b\u7684\u4e1c\u897f\uff0c\u4e8e\u662f\u51b3\u5b9a\u52a8\u6001\u8c03\u8bd5 […]<\/p>\n","protected":false},"author":1,"featured_media":157,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-318","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts\/318","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/comments?post=318"}],"version-history":[{"count":5,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts\/318\/revisions"}],"predecessor-version":[{"id":333,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/posts\/318\/revisions\/333"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/media\/157"}],"wp:attachment":[{"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/media?parent=318"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/categories?post=318"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.shangwendada.top\/index.php\/wp-json\/wp\/v2\/tags?post=318"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}