[分享]iOS writeup-10）第2届移动安全挑战（MSC）-看雪-安全社区|安全招聘|kanxue.com

[分享]iOS writeup

2015-10-20 13:17 2580

[分享]iOS writeup

liumuqing

2015-10-20 13:17

2580

第一题就是比手快啊。。。IDA打开直接看到onClick函数，然后直接写代码就可以了。。

#!/usr/bin/env python
# encoding: utf-8

import string
from hashlib import sha256
from Crypto.Cipher import AES

def caesar(s, k):
	r = ''
	for c in s:
		if c in string.uppercase:
			r += chr((ord(c)-ord('A')-k) % 26 + ord('A'))
		elif c in string.lowercase:
			r += chr((ord(c)-ord('a')-k) % 26 + ord('a'))
		else:
			r += c
	return r


key = 'ZGlhb2RhX2ppYW5rYW5nCg=='
c = 'mrMZAbjtZozDOGI9UeeH6g0iLHNnTNsFyzS0tYca4R3KkaQ0doxdDVuxZ7HoqYOcxFhgDiEvdGKix95VJNEUP8rdox4cm7GHVkbVcTJPmrTtH7hompW+xjTgGg2zQhs0tUGQ8lCggev2SNoWcaUOUU=='
for k in xrange(4, -1, -1):
	t = caesar(c, k)
	aes = AES.new(sha256(key).digest(), AES.MODE_CBC, IV='\x00'*16)
	c = aes.decrypt(t.decode('base64'))
	c = c[:len(c)-ord(c[-1])]

print c

第二题
首先在这里找到了struct cdevsw的定义