Howy_why-CSDN博客

原创 The Travelling Customer (Coding, Training)

The Travelling Customer (Coding, Training)题目描述In this programming challenge you need to solve the following problem:You are represented a pricelist, an itemamount and a sum, as well as the stock parameter.Your job is to select itemamount items which w

2021-09-09 14:30:21 261

原创 Training: RegexMini (Training, Regex)

Training: RegexMini (Training, Regex)题目描述We are trying hard to make a secure site.So far, we got a secure definition of a username.Unless you prove otherwise.Again you are given the source, also as highlighted version.我们正在尝试努力打造一个安全的网站到目前为止，我们得到一

2021-09-09 10:59:30 303

原创 Training: Bacon Returns (Stegano, Encoding, Crypto, Training)

Training Bacon Returns (Stegano, Encoding, Crypto, Training)题目描述Mr. Bacon is back and wants to challenge you again.This time it is way harder to decode. I have changed the encoder after researching the baconian chiffre on the interwebs.Note one: We st

2021-09-08 14:34:03 247

原创 Zebra (Training, Encoding, Stegano)

Zebra (Training, Encoding, Stegano)题目描述Help! A zebra escaped from its enclosure. But where is it now?求助！一只斑马从围栏里逃了出来。但他现在在哪？解又是一道隐写，刚开始没思路，还以为要在网页上做手脚，后来去搜了搜发现是条形码，仔细一看原来斑马逃出围栏是这个意思，不得不佩服出题人的脑洞。将条形码还原即可。在到网页在线解码即可Online Barcode Scanner | Barco

2021-09-07 22:14:28 317

原创 Stegano Attachment (Stegano, Image, Training)

Stegano Attachment (Stegano, Image, Training)题目描述Hello challenger,You got mail and a nice attachment.Your unique solution which is bound to your session is in there too.Enjoy!你好挑战者，你得到了邮件和一个不错的附件.你的唯一的solution和你的session绑定享受吧！解一道很简单的隐写题，标题也很

2021-09-07 21:57:57 399

原创 Training: Crypto - Substitution II (Crypto, Training)

Training: Crypto - Substitution II (Crypto, Training)题目描述I have created an advanced version of the simple substitution cipher.It can now use chars in range from 0-255, but that should not stop you.The ciphertext is in the language of this text, and us

2021-09-07 21:40:56 249

原创 AUTH me (HTTP, Training)

AUTH me (HTTP, Training)题目描述A coworker has uploaded a weird apache.conf to secure a server, and now nobody can connect anymore.He is on holidays right now, but he said that we surely can connect to the box, as everything required is available online.W

2021-06-03 22:39:59 503 2

原创 Training: LSB (Stegano, Image, Training)

Training: LSB (Stegano, Image, Training)Training LSB (Stegano, Image, Training)题目描述This is a very simple, yet spectacular trick.Can you see the hidden solution?Note: The solution is bound to your session ID and consists of twelve letters.Hidden Hint

2021-05-31 23:19:23 194

原创 Training GPG (Crypto, Training)

Training GPG (Crypto, Training)题目描述In this challenge your goal is to setup gpg encryption for your emails.To do so, generate your keypairs locally and store your public key on wechall.Then all your mails sent by wechall are encrypted.To enable GPG en

2021-05-30 01:01:56 213

原创 Training: Baconian (Stegano, Encoding, Crypto, Training)

Training: Baconian (Stegano, Encoding, Crypto, Training)题目描述Encodings - BaconianIn this training challenge you have to reveal a hidden message inside another message.It is known that the message is hidden via Bacon cipher.Again the solution changes f

2021-05-24 21:34:14 497

原创 Training: Math Pyramid (Math, Training)

Training: Math Pyramid (Math, Training)题目描述This is the first release of a math challenge.You have to come up with the shortest solution (9 chars or less) for a geometric function.And the story goes like:Pharao momo wants a square-based pyramid, where

2021-05-09 22:30:23 308

原创 Training: Register Globals (Exploit, PHP, Training)

Training: Register Globals (Exploit, PHP, Training)题目描述This challenge is a relict of old PHP times, where register globals has been enabled by default, which often lead to security issues.Again, your job is to login as admin, and you are given the sour

2021-05-09 21:10:42 384

原创 Training: MySQL II (MySQL, Exploit, Training)

Training: MySQL II (MySQL, Exploit, Training)题目描述This one is the same as MySQL1, but you have to come up with a more advanced injection to trick this authentication.Your mission is again: Login yourself as admin.Again you are given the sourcecode, als

2021-04-10 15:40:04 414 6

原创 Training: MySQL I (MySQL, Exploit, Training)

Training: Crypto - Digraphs (Crypto, Training)题目描述This one is the classic mysql injection challenge.Your mission is easy: Login yourself as admin.Again you are given the sourcecode, also as highlighted version.Enjoy!这是经典的mysql注入挑战。您的任务很简单：以管理员身份登

2021-04-10 00:43:30 280

原创 Training: Crypto - Digraphs (Crypto, Training)

Training: Crypto - Digraphs (Crypto, Training)题目描述This time I am using a digraph crypto scheme to encrypt one letter into two characters.With only 26 different letters I am able to encrypt up to 26*26 different characters.The big problem again is shar

2021-03-28 20:04:49 277

原创 Training: Crypto - Caesar II (Crypto, Training)

Training: Crypto - Caesar II (Crypto, Training)题目描述I guess you are done with Caesar I, aren’t you?The big problem with caesar is that it does not allow digits or other characters.I have fixed thi...

2020-09-14 23:39:47 382

原创 Training: Crypto - Substitution I (Crypto, Training)

Training: Crypto - Substitution I (Crypto, Training)题目Oh dear, I guess you have cracked the two caesar cryptos…This one is more difficult. Although a simple substitution is easily cracked…Again t...

2020-05-02 18:47:57 472

原创 Training: Crypto - Transposition I (Crypto, Training)

Training: Crypto - Transposition I (Crypto, Training)== 题目描述==It seems that the simple substitution ciphers are too easy for you.From my own experience I can tell that transposition ciphers are mo...

2020-02-07 23:14:09 570

原创 PHP 0817 (PHP, Exploit)

PHP 0817 (PHP, Exploit)题目描述I have written another include system for my dynamic webpages, but it seems to be vulnerable to LFI.Here is the code:GeSHi`ed PHP code<?phpif (isset($_GET['which'...

2019-11-09 20:10:10 482

原创 WeChall Training部分

我的WeChall之旅？？！Training: Get SourcedTraining: Stegano I (Training, Stegano)Training: Crypto - Caesar I (Crypto, Training)To be continued记录以在wechall上完成的所有Challenges以便于以后学习查看，同时完成写blog的任务。Training: Get...

2019-11-09 19:58:02 1632

原创 Training: PHP LFI (Exploit, PHP, Training)

Training: PHP LFI (Exploit, PHP, Training)题目描述Your mission is to exploit this code, which has obviously an LFI vulnerability:您的任务是利用此代码，它显然具有LFI漏洞：GeSHi`ed PHP code$filename = 'pages/'.(isset($...

2019-10-14 21:06:11 793

原创 Training: Regex (Training, Regex)

Training: Regex (Training, Regex)题目描述Your objective in this challenge is to learn the regex syntax.Regular Expressions are a powerful tool in your way to master programming, so you should be able ...

2019-09-14 13:27:55 1490 1

原创 Training: Programming 1 (Training, Coding)

Training: Programming 1 (Training, Coding)题目描述When you visit this link you receive a message.Submit the same message back to http://www.wechall.net/challenge/training/programming1/index.php?answer...

2019-07-24 17:48:46 772

原创 Training: Encodings I (Training, Encoding)

Training: Encodings I (Training, Encoding)题目描述We intercepted this message from one challenger to another, maybe you can find out what they were talking about.To help you on your progress I coded a...

2019-07-24 17:15:48 528 1

原创 Prime Factory (Training, Math)

题目描述Your task is simple:Find the first two primes above 1 million, whose separate digit sums are also prime.As example take 23, which is a prime whose digit sum, 5, is also prime.The solution is ...

2019-07-15 17:41:53 604

原创 Training: Get Sourced

（wechall）Training: Get Sourced题目描述The solution is hidden in this pageUse View Sourcecode to get it解决答案隐藏在此页面中使用查看网页源代码获取解：获取网页源代码f12得到答案You are looking for this password ：html_sourcecode...

2019-07-06 01:45:48 359

原创 Training: Stegano I (Training, Stegano)

Training: Stegano I (Training, Stegano)题目描述This is the most basic image stegano I can think of.这是我能想到的最基本的隐秘图像。解:从图片入手看看…下载之后打开是这样的…我们需要的是password,也就是一串字符,试试用文本的方式打开…看看16进制编辑显示了什么得到关键信息 p...

2019-07-06 01:45:41 604

原创 Training: Crypto - Caesar I (Crypto, Training)

Training: Crypto - Caesar I (Crypto, Training)题目描述As on most challenge sites, there are some beginner cryptos, and often you get started with the good old caesar cipher.I welcome you to the WeChal...

2019-07-06 01:45:36 551

原创 Training: WWW-Robots (HTTP, Training)

Training: WWW-Robots (HTTP, Training)题目描述In this little training challenge, you are going to learn about the Robots_exclusion_standard.The robots.txt file is used by web crawlers to check if they ...

2019-07-06 01:45:30 1723

原创 Training: ASCII (Training, Encoding)

Training: ASCII (Training, Encoding)题目描述In a computer, you can only work with numbers.In this challenge you have to decode the following message, which is in ASCII.84, 104, 101, 32, 115, 111, 108...

2019-07-06 01:45:23 395

原创 Encodings: URL (Training, Encoding)

Encodings: URL (Training, Encoding)题目描述Your task is to decode the following:（您的任务是解码以下内容）%59%69%70%70%65%68%21%20%59%6F%75%72%20%55%52%4C%20%69%73%20%63%68%61%6C%6C%65%6E%67%65%2F%74%72%61%69%6E%6...

2019-07-06 01:45:17 588

原创 SWUST OJ 942 逆置顺序表

逆置顺序表建立长度为n的顺序表，然后将表中的数据元素逆置，即若表中原来的数据元素序列为（a0，a1，a2，…，an），则逆置后的数据元素序列为（an，an-1，an-2，…，a1，a0）。（数据类型为字符型）输入第一行为顺序表的长度n；第二行为顺序表中的数据元素.输出输出为逆置后的顺序表.样例输入7 ABCDEFG样例输出G F E D C B A代码实现...

2019-05-04 19:58:11 2329

原创欢迎使用Markdown编辑器

这里写自定义目录标题欢迎使用Markdown编辑器新的改变功能快捷键合理的创建标题，有助于目录的生成如何改变文本的样式插入链接与图片如何插入一段漂亮的代码片生成一个适合你的列表创建一个表格设定内容居中、居左、居右SmartyPants创建一个自定义列表如何创建一个注脚注释也是必不可少的KaTeX数学公式新的甘特图功能，丰富你的文章UML 图表FLowchart流程图导出与导入导出导入欢迎使用Ma...

2019-05-03 14:51:49 149

原创 Markdown 欢迎页

Markdown 欢迎页@[TOC](这里写自定义目录标题)# 欢迎使用Markdown编辑器你好！这是你第一次使用 **Markdown编辑器** 所展示的欢迎页。如果你想学习如何使用Markdown编辑器, 可以仔细阅读这篇文章，了解一下Markdown的基本语法知识。## 新的改变我们对Markdown编辑器进行了一些功能拓展与语法支持，除了标准的Markdown编辑器功...

2019-05-03 14:43:19 292

Howie‘s Blog