-
-
[原创]第一题 writeup
-
发表于: 2017-10-24 20:25 1890
-
IDA打开后查找字符串
发现:请输入pass!
于是通过字符串跟踪到相关代码
int __thiscall handle(CWnd *this) { struct CString *v1; // ST08_4@1 CWnd *v2; // eax@1 int v3; // eax@1 int result; // eax@2 char *Str; // [sp+4Ch] [bp-8h]@1 CWnd *v6; // [sp+50h] [bp-4h]@1 v6 = this; v1 = (CWnd *)((char *)this + 100); v2 = CWnd::GetDlgItem(this, 1002); CWnd::GetWindowTextA(v2, v1); v3 = sub_4018D0((char *)v6 + 100); Str = CString::GetBuffer((CWnd *)((char *)v6 + 100), v3); if ( strlen(Str) ) { if ( !strcmp(Str, "WelcomeToKanXueCtf2017") ) result = sub_401770(); else result = sub_4017B0(); } else { result = CWnd::MessageBoxA(v6, "请输入pass!", 0, 0); } return result; }
找到 flag:WelcomeToKanXueCtf2017
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
看原图
赞赏
雪币:
留言: