Slagman

Misc签到题是张图片，binwalk，得到压缩包，压缩包打开里面还有压缩包，压缩包名字还是递减的数字，显然是循环解压，找脚本跑 123456789101112import zipfilenumber=232for i in range(232,1,-1): path="C:\\Users\\一只小唐尼OvO\\Desktop\\232\\"+str(number)+".zip" zip_file=zipfile.ZipFile(path) zip_list=zip_file.namelist() for f in zip_list: zip_file.extract(f,"C:\\Users\\一只小唐尼OvO\\Desktop\\232") number=number-1 if number==1: breakzip_file.close() 跑完了，用7z打开1.zip得到一个流量包，流量包一看就和国赛一模一样，直接上wp tshark -r keyboard.pcap -T fields -e usb.capdat ...

f04257d268fc2c733b46de524965db8cd8e13dc35b442c10df7ca66d90189c8e88302ac002b1d701b65979f5b007bef6f937e50c9e586df055b1cedef509e5782da1ad5ad74637369dc8be75f51aabf780a05cd5e0eef0f4512b1461191710d1b423ce048d73007b70c9d629a6e17db93f6cd3720750f25654cb0fc34e70222f2204f36dafff8b47583b0754b70b276929d43471d87bfef8acd2449cb8037b29783698aaff2e35c5bcb8e39f896cabc8960cc4f6ef58162f7a991a3590e91edb57e290de11af407e61b4d2f81bd2a2bbfc82f16d2d311496dbf8a0b055c86216ffbda60f2a8409673e22302b3ed5f4242c15ced4cc16d9127 ...