2023新年谜题总结 - 秋实-Allenyou的小窝

谜题简介

谜题从 dinnzs.ozzsbmci.kobu 开始。

提示：似乎中间那一段和秋实的某个常用 ID 有关呢……想想秋实的博客是什么吧

解谜情况

2023.1.22 04:07 @Cont_08 拿下首杀

答案

flag{I_DONT_WANT_TO_DO_SO_MUCH_HOMEWORK_AAAAAAAA_BY_A_Y}

题解

第一步：凯撒移位

看到dinnzs.ozzsbmci.kobu里面几个点，第一反应应该是某个类似域名的东西吧。

再看提示里面的“中间那一段和秋实的常用 ID 相关”，知道中间一段对应的应该是秋实、秋实-Allenyou、Allenyou中的一个，结合长度推测是Allenyou

同时，提示中“想想秋实的博客是什么吧”也提示我们可能与这个博客的域名有关（allenyou.wang和后面的长度刚好对应），后面ozzsbmci.kobu与allenyou.wang对应。

简单列一个字母表不难看出这是一个简单的凯撒移位，移位位数是 14

解密后得到puzzle.allenyou.wang

第二步：DNS TXT Record

这是一个域名，但是扔进浏览器里打不开。

此时试着用nslookup查询一下 DNS 记录，发现是 TXT 类型记录，得到网址https://www.allenyou.wang/fuck/so/much/homework/puzzle.html

第三步：Base58

这里打开网址发现下面这些东西：

57jNiXU5p9CRKxvnFZ4xbhxRJfaWN7SKYfbZcsezkkGFbWjXyLWegiUQMNJBWUD6gM46MGoAd6H9oky8NLYFShZ1hMojFvNmLy1m6Hc3UBkcr6rdyiFXuUumT15ax5jTGgetdszdmGLRjzGSC5ottCnj3rm7ywrPJaaYVgakMDc58PSrvFtKkr8LCeMA2DDETKqqnvEUY3SowLe3scmmwpUucvA7QhvchHQkPv57qVvzPXDmQUMMG5o5P4qDi6Mdm4fhRE8yYbH4ftBTzoWvNBHNCNerc2muUEiRoWWP42jnqFPVxNfQa6p8Uicdm6TRtrz3NZnn9HkUTApRTHuTvbRcjVmyzTx2xiEFkX21Th4LP5Xo1p1wxZcmQMTkkJagpzyp1eaXwPwdUn4pLKsS8JKF66X8DQLPqQuUPLHEsKkCsy8Xyue2NYqTw4iavzuuqDBSnyDFkHyHuBaA79c92FJ85Y6kxmvECEaCPDEEEJqF6pS4WSk55GVgfXfZQ44mxaDqdHTLKVaXtR9t1J8LBPuk6AySHJSZkZzB1cmy7PRc6WwVoVqyQsuZfjWhHiVXoJtvtkSndfJnCxNowBc3kM4cuGd6V6Jc7JxKz1r62U4FQSjuuiVu9hKaB68SUzyzNMesA5Lj4hho1wNGPRSGDUHgKkzMwgVW3E8CoLQJFPTycZBD3jpqUDQ652dCMruA87cCukdq7KzbKt5RhSKf88CNEhjEb4GYagDp7WFaXBnRhWtoDXEysCSzZcNDb9jfmPn1NKwmus1tS1HAsN8ATo7NeQbnpEgP8dNbVdSfT9pLAzUTscBenQCGUbaWFjHSARbmmDrBNdBneXCR3JY6uSqPvKgUdekW9xDNbbcuGNHzgyHkWTReJ3fH9JNotKFo2LgfigdRkNYVuqE2tkjMc9tz6XFVuQVHC9yH88gQDbV6a1tyswbYwbAMvfYoYVXHpZhKMX7DgATu8L7EiVJ1vjvrTiQqn2XCJQSaFPuXLXeBduxEQU8gEBCmWLFzAXwLfre9cfCm5TfXCLvFRP8M7XYVfoC7Z8jK6d5kPkAuNxfC2ECjUCMdhJ5coBB9kt3UwuYmcyMJQVFJ5X6BrqJ2kyScwYNynPCcFYSm6iz11zzGUqhUgdrMvTvdqqTFpp8sGc44ShdE82tBxBHcXjWuVZ2Z3YY2hYh7jfTjA3jupWQSaL5spLv9WpY5Qp8Ytpz3cAp2UbF5W4RFEt2zvYy76gML5r6ybASg1Hf7a7emveDcL6RbXNGBop3stCKeug3EEvqDqzLVRC1PsrKRmV7UivqbSeUamBvnpE56VtSDGiz5jueBthMoWjDZSTsdpfdonY7L42FrZeSvGdnxrdmGq7ENjybyUVKd1L8Cwg5b3fXM9ES42VDpxyu8JZzB4FtBKwcLW6nBxCEFwSdF2HfJM5b9pixxbmuc1G4JUACqtGQAi8KThQVZeysn3fcWN8nmznD1SqXZsqcT41Vi3yc2yXKTjwiusxEhPkct6sT7QR7YQowgwBAt9oKk6a9JpD7vtYDPHK9D8zScdwnYSRxxi8LPb2LNEuB2GBM3PLQYGVzRmQm6978xrCJS7AiqmuxLuAee4eq3i9JioGnPqdq1qq1iHGXvSGnBrqgprmhN4tqkweDfLoZ6bcP6R5ceyHyK1UDfywZJNJiBZaHWCHbjEhpNabZVCWh5NRtvYVWFA5CZwFBwNcamN2rvWf6frcbLZFPKhx7f48wshiF2EZHnNaCp4brKU6KuZ19jGpRLS2WRHp38hyNh1wQ7vUdmkREsYc2QH92NnNRaeg7YogLnafCpteV76ZVXMMv7TPbPBW3X16bawf9958Fu67rtF4YwgTCbWCsrWBdiD3nCeidK3z3b47Ubs4okZoyAoWmp3jWKbZ7nx81nmDBs3hYaJNHpQjChEbwc9ZpcCfhkG8cF2BsncHCvpPRAYUi9gC6L7nzaMmxD82DycNkc79HEBGaWy8bgQ6dyqDnjLXaDBvLzKUGF2TbVzk9UU5moD1WqPfHjmAQJHWLHmAfggnUGvd4oXkxuKy46fGgkLyKx9FM3ejouJ2VBRbHHBEF21P5MPi83EN2YTok6KBUr1ocuXt5pLTQSwJsdqH1nYtagbHqnYkMPA8WfqHEds4QwPuY4Ju47PwojD6rz3nUoBZWFTqWuvcNByVAeuFDLPvs14atzSZj9FbQKDN79Nu3NGR9tqHZZQggKRQ8MwHWFowGkiFZ164iYLYKmp6GTmHWFF8S4Vo6j2254z1KAEHHXcsLKdFX7qBBrMn2JmauLmwkUVRdhARw1MpdWCYCm88g7djRu59eQw5PfdAvYMfMPypsocp5quC7qmAwYRFh29omPjXpd1DXGBo8VBxgcr4fEZpV3D1cdwgviut8Uu2CENfjqbRN9mkuLuKyZNTjvHEpWqfAoW9bZtjFDRS8PSdrGBfmhGnuvfzdkFn9nZEY6cJN6GQ74tZoaDx7GrnLNHrXEtgQxCM6VKSbnTCxEgdxf6ZzvNNkw9KYtJvA2JEoPWhhPFVggQUVLmrDeixYJuBG5KyYYCnzKurcieYBVJqQh75HYNKw326CZurvYKqw6pVKTwpcXZecbYd3YsPM451aUd444jKP5rj3HQR5AYNPJ9N7iExbNFfG8mYBenRHTLWU1JZCna4jQ9BkL7hRm43gMKXJTNFeAg3EP1yXnHsLDfRXSicAPBfQHWUbrjy6MWsu1HpqJpybAHpktsS7vkg3ssVxP4zk7GBHj3HVoppW5jqAgjFyx1BnxzGoXjcfkqNe67GXZD14deAxVCXLtnH7MSp4KXtbcpXK74bj89dvR4D8F1nWLP7oa9xd7RX547N1fNuid9yPDPK12YfcaR5yQ5bz5KDFmnAPn9GYnitCVm9QafYPPARSrySWRCoEz1H69XxiJthbo8E2iWdRv5qnwFF9PQwWeyDS9wk74KLDuf4kyNLAyS4WcsMYpimTKNuo6LgeH4VpKc5YGhXEHJxidkykMLmqirx8HhSGC7QUn3D3RAGr11sc2ZCM4UhSXNucSm3ehxXv8i5Mw9gYgMeaY93PCEwG3hSVrCPeRSf9KyDMjJeHpgWXEP38TPk4itnH7bPzXWnMJMp15rJctApCx4rR8pyAK23gv6PKg3CzvUjuzBVJegdYtQ334v3qPEi5K9xgKrT6yvQUBqcUQCQzpn7oG3YWHasbTMNFjSk2za9aotMDfheYhJ7cfG9eLPmgQtbsuNPRhQpyc3mNa8uHvVfgQsjbnar56hWxb6RDNXXudggoyEwmEySTr5exYJzrQ34zJNUBfyc8qMbE7VxNxxZRx7mor1GuBmKYfq4dWMRH6njue6mb3k4mmRjoE4XDA9xeBDXLRCTLWWbDBFJbTVzHp8BKp9Edn1WBwXwqizHKweqjg9QTDw1ydeKucz2byFbRFV19cWA1EYKYwg1bphvzyUNNwwQqqg9nixjq1myGEN2zmjyQV1AzPVpnxF4JrMoSXaD87NSSq8CgghFL37GKsXzKDGx9KJdMF14pmnDsDasDYFj1BU4zrv7ZLG9aNYMkUK748HadNxnxNZvbV7C7UoqeBh6Uot5HtjtnJ32P2qRLUgxZRsjnW5fDQUcRHT3hkSgQhg9qt5QHNrcYtRmZghkrKcJWcTn85oottVh4RqtsyXiJfVUi663uYj26qdGRiTn6cv9ccc38atzGuVDPowtTa7atEdHczFqDrBehduc4RY4Qstiq8v1hnBCedYjsPKt65uJcESg2xLXP2ibsqWrWJqPN15ZyFyD8GQZb3SJoHeBwRP3sa6RxLnyjPkxpWpT3y4bKMw452pM5Y9XjweNjEhEbugfeY32gxmBbdLQC4bwkdXLoYbxPJ4UQEDKceWzXtUfGRRLsBUZtwn1bBYRFm1WGv89huKM8w8YNneEVktsWGe7Lv2dqrqqTezAagk4WSNWnbnwRoQyqdVMxw6

这种编码看起来很像 Base 系列编码，但是没有+，也没有0和o这种字符，猜测是 Base58，解码后得到下一步信息。

第四步：JSFuck

上一步解码得到的信息是：

[!+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	([][
		(![] + [])[+[]] +
			([![]] + [][[]])[+!+[] + [+[]]] +
			(![] + [])[!+[] + !+[]] +
			(![] + [])[!+[] + !+[]]
	] + [])[!+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	([][
		(!![] + [])[!+[] + !+[] + !+[]] +
			([][[]] + [])[+!+[]] +
			(!![] + [])[+[]] +
			(!![] + [])[+!+[]] +
			([![]] + [][[]])[+!+[] + [+[]]] +
			(!![] + [])[!+[] + !+[] + !+[]] +
			(![] + [])[!+[] + !+[] + !+[]]
	]() + [])[!+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(!![] + [])[!+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(!![] + [])[!+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	([][[]] + [])[!+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	([][[]] + [])[!+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	([][
		(!![] + [])[!+[] + !+[] + !+[]] +
			([][[]] + [])[+!+[]] +
			(!![] + [])[+[]] +
			(!![] + [])[+!+[]] +
			([![]] + [][[]])[+!+[] + [+[]]] +
			(!![] + [])[!+[] + !+[] + !+[]] +
			(![] + [])[!+[] + !+[] + !+[]]
	]() + [])[!+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[]] +
	[+!+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	(![] + [])[+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	[!+[] + !+[] + !+[] + !+[] + !+[] + !+[] + !+[]] +
	([][[]] + [])[!+[] + !+[]];

这时候应该有人能猜出这是 JSFuck 了，直接扔进任何一个能运行 JavaScript 的地方都行，得到666c61677b495f444f4e545f57414e545f544f5f444f5f534f5f4d5543485f484f4d45574f524b5f41414141414141415f42595f415f597d

第五步：Hex to Text

显然，这是一段十六进制的文本。

转换成文本就是答案flag{I_DONT_WANT_TO_DO_SO_MUCH_HOMEWORK_AAAAAAAA_BY_A_Y}

总结

其实这次出题只用了我不到一小时（汗），还出现了中途换题的尴尬，好在没有阻止 DALAO 们暴杀这道题。

可以看出，从 Flag 到题目里的网址全都体现着我对作业的喜爱怨念（笑）

这次总的来说难度还是比较低的，明年我会尽量给大家带来更有意思的谜题的。

最后还是祝大家新年快乐！