ctfshow-misc

misc 1

Open the picture directly flag

misc 2

yes txt file , A bunch of random code , But there are similar PNG Things that are （ It can also be opened winhex see ）, Change the suffix to png

misc 3

Yes suffix yes bpg（ I haven't seen it before , Specially checked , It's really a picture suffix , Then I changed the suffix to png, Then modify the file header , Want to use png The way to open , But it doesn't work ）, Downloaded a view bpg Software for bpgviewer

misc 4

1.txt It should be changed to 1.png, In this way , Other suffixes are also changed , That's all right. （ At first, I thought I wanted to merge files ）

misc 5

Open the picture

  use winhex open

misc 6

use winhex open , There is no... At the bottom flag, Search for , Found in the middle  

 misc 7

Same as question 6 , Direct search ctfshow

misc 8

(74 Bar message ) MISC Picture hidden file separation _When you collect everything, you understand nothing.-CSDN Blog _misc File separation

use winhex Can't find flag, Properties and so on , Look at other people's wp

use binwalk View and find hidden pictures （ There are two files in total ）

Reuse foremost Separate pictures

 

misc 9

Law 1 ：

direct winhex search ctfshow

Law two （ It doesn't help ）：

It looks a bit like the website , Change the suffix to html

misc 10

alike , The previous way didn't work , Keep using binwalk see , Found to have zlib file （ Compressed files ） 

  use -e Command can extract files （binwalk -e It will automatically attempt to decompress the extracted compressed package ）

(74 Bar message ) Binwalk Detailed instructions for using the tool _ Confucius said Xiao Jiu's blog -CSDN Blog _binwalk

 10E5 Are there in flag

misc 11（ Didn't understand ）

flag In another picture

use tweakpng Open the picture , Delete the first IDAT, Open the picture again and you will see flag 

misc 12

Before deleting 8 individual IDAT

misc 13

Prompt the end of the picture , Elongated picture does not appear

I saw wp,flag There should be , But it was separated , But I don't know what works and what doesn't （ ok , In fact, one is useful and the other is useless ）

misc 14

Make sure there is another picture in the picture , But with binwalk -e perhaps foremost All useless

And then manually in winhex Middle search JFIF Copy until the last new jpg file （ But I still can't get it out ）

misc 15

misc 16

First use binwalk -e Take a look at it , Find out DD4 That's it （foremost Tried the , of no avail ） 

misc 17

misc 18 

Just look in the attributes one by one

 misc 19

use exiftool Read

misc 20

use exiftool Read , Find comments （ Then homophonic ）