{"id":299,"date":"2015-09-27T14:16:45","date_gmt":"2015-09-27T05:16:45","guid":{"rendered":"http:\/\/emeth.jp\/diary\/?p=299"},"modified":"2024-08-10T14:40:52","modified_gmt":"2024-08-10T05:40:52","slug":"trend-micro-ctf-2015-writeup","status":"publish","type":"post","link":"https:\/\/emeth.jp\/diary\/2015\/09\/trend-micro-ctf-2015-writeup\/","title":{"rendered":"Trend Micro CTF 2015 Writeup #TrendCTF #TrendCTF2015"},"content":{"rendered":"

Trend Micro CTF Asia Pacific & Japan 2015\u306b\u53c2\u52a0\u3057\u305f\u3002
\n\u30c1\u30fc\u30e0\u3068\u3057\u3066\u306f1400\u70b9\u7372\u5f97\u3002
\n\u81ea\u5206\u306f200\u70b9\u554f\u984c\u30923\u554f\u89e3\u3044\u305f\u306e\u3067\u66f8\u3044\u3066\u3044\u304f\u3002
\n\uff08\u554f\u984c\u6587\u7b49\u306e\u78ba\u4fdd\u3092\u3057\u3066\u306a\u304b\u3063\u305f\u306e\u3067\u305d\u306e\u8fba\u306f\u9069\u5f53\u3002\u5f8c\u307b\u3069\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u304d\u308c\u3070\u3059\u308b\uff09<\/p>\n

<\/p>\n

Programming 200<\/h2>\n

\u554f\u984c\u6587<\/h3>\n
\n\uff08\u30b5\u30fc\u30d0\u306b\u63a5\u7d9a\u3057\u3066\u8a08\u7b97\u3057\u308d\u3001\u307f\u305f\u3044\u306a\u611f\u3058\uff09\n<\/pre>\n
\u6307\u5b9a\u3055\u308c\u305f\u30b5\u30fc\u30d0\u306b\u63a5\u7d9a\u3059\u308b\u3068\u3001\u6570\u5f0f\u304c\u9001\u3089\u308c\u3066\u304f\u308b\u306e\u3067\u305d\u306e\u8a08\u7b97\u7d50\u679c\u3092\u7b54\u3048\u308c\u3070\u3088\u3044\u3002
\n\u5408\u3063\u3066\u3044\u308b\u3068\u6b21\u306e\u554f\u984c\u304c\u9001\u3089\u308c\u3066\u304d\u3066\u3001\u9593\u9055\u3063\u3066\u3044\u308b\u3068\u7d42\u4e86\u3059\u308b\u3002<\/p>\n
\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u6570\u5f0f\u304c\u9001\u3089\u308c\u3066\u304f\u308b\u3002<\/p>\n
\n3 + 2 =\n84 * 2 - 6 =\n475 - 70 + 68 - 998 =\n2 + 31 * 5963 + 1 - 3 =\n7 + 3 * 83 - 4644 * 4 + 955 =\n3 + 65 - 1 * 84 - 50 * 382 + 58 =\n864654 + 418931 - 1183 * 80 - 139 + 43880 * 3565349 - 8 =\n56530727 + 2 * 43742511 - 62 + 9519096 * 4448117 - 695 * 9101222 + 30650349 =\n89030 + 753588 - 385686849 * 78763 - 4994684 * 929289070 - 4 + 27825 * 884073534 + 4942 =\n8 + 4506226779 - 0 + 566 * 613603 + 820264 * 690 - 2 * 7 - 75996 + 6029293421 =\n<\/pre>\n
10\u554f\u30671\u30bb\u30c3\u30c8\u306b\u306a\u3063\u3066\u3044\u308b\u3088\u3046\u3067\u300110\u554f\u6b63\u7b54\u3059\u308b\u305f\u3073\u306b\u8868\u73fe\u304c\u8c4a\u304b\u306b\u306a\u3063\u3066\u3044\u304f\u3002<\/p>\n
    \n
  1. 1\uff5e10\u554f\u76ee\uff1a\u6570\u5b57\u3068\u6f14\u7b97\u5b50(+, -, *)\u306e\u307f<\/li>\n
  2. 11\uff5e20\u554f\u76ee\uff1a1.\u306b\u52a0\u3048\u3066\u62ec\u5f27\u304c\u5897\u3048\u308b<\/li>\n
  3. 21\uff5e30\u554f\u76ee\uff1a2.\u306b\u52a0\u3048\u3066\u30014\u6841\u4ee5\u4e0a\u306e\u6570\u5b57\u306b\u30ab\u30f3\u30de\u304c\u5165\u308b\u3088\u3046\u306b\u306a\u308b\uff08\u5165\u3089\u306a\u3044\u5834\u5408\u3082\u3042\u308b\uff09<\/li>\n
  4. 31\uff5e40\u554f\u76ee\uff1a3.\u306b\u52a0\u3048\u3066\u30ed\u30fc\u30de\u6570\u5b57\u3067\u306e\u8868\u73fe\u304c\u5897\u3048\u308b<\/li>\n
  5. 41\uff5e50\u554f\u76ee\uff1a3.\u306b\u52a0\u3048\u3066\u6570\u5b57\u304c\u82f1\u8a9e\u3067\u8868\u73fe\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308b<\/li>\n
  6. 51\u554f\u76ee\uff5e\uff1a\u5168\u90e8\u5165\u308a<\/li>\n<\/ol>\n
    \u3053\u3093\u306a\u611f\u3058\u3002<\/p>\n
    \n1: 2 + 31 * 5963 + 1 - 3 =\n2: 350262 * 7 - 255439 * ( 86 - 3 ) + 30536 - 1984619 * 381 =\n3: 2 - 42,296 + 7 * ( 43,919 - 91,057 ) + 1,913 =\n4: ( 71904 + XC ) * LXVII + 5680 - 6089 + CMLXXIX =\n5: 83,025 + 8,604 - sixty one thousand, five hundred forty one * ( four - 4 ) + one =\n6: ( LXIV + 6014 ) * ( 268 - 9042 ) * five hundred forty seven + 817 =\n<\/pre>\n
    \u57fa\u672c\u65b9\u91dd\uff1abc\u306b\u4e38\u6295\u3052<\/strong>
    \nLinux\u306b\u306fbc\u3068\u3044\u3046\u4fbf\u5229\u306a\u30b3\u30de\u30f3\u30c9\u304c\u3042\u3063\u3066\u3001\u8907\u96d1\u306a\u6570\u5f0f\u3067\u3082\u3061\u3083\u3093\u3068\u89e3\u91c8\u3057\u3066\u7b54\u3048\u3092\u51fa\u3057\u3066\u304f\u308c\u308b\u3002
    \n\u3055\u3059\u304c\u306b\u30ed\u30fc\u30de\u6570\u5b57\u3084\u82f1\u8a9e\u8868\u73fe\u306b\u306f\u5bfe\u5fdc\u3057\u3066\u306a\u3044\u306e\u3067\u3001\u305d\u306e\u8fba\u306f\u4e8b\u524d\u306b\u81ea\u5206\u3067\u51e6\u7406\u3057\u3066\u3084\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002
    \n\u30ed\u30fc\u30de\u6570\u5b57\u306b\u3064\u3044\u3066\u306f\u3001python\u306broman\u3068\u3044\u3046\u305d\u306e\u3082\u306e\u30ba\u30d0\u30ea\u306a\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u3042\u3063\u305f\u306e\u3067\u305d\u308c\u3092\u6d3b\u7528\u3002
    \n\u82f1\u8a9e\u306b\u3064\u3044\u3066\u306f\u3057\u3087\u3046\u304c\u306a\u3044\u306e\u3067\u81ea\u5206\u3067\u30d1\u30fc\u30b9\u3057\u305f\u3002
    \n\u4ee5\u4e0b\u30bd\u30fc\u30b9\u3002<\/p>\n
    \n#!\/usr\/bin\/python\n# -*- coding:utf-8 -*-\nimport socket, struct, telnetlib\nimport subprocess\nimport roman\nimport re\n\n# --- common funcs ---\ndef sock(remoteip, remoteport):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; s.connect((remoteip, remoteport))\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; return s, s.makefile('rw', bufsize=0)\n\ndef read_until(f, delim='\\n'):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; data = ''\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; while not data.endswith(delim):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; c = f.read(1)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if len(c) == 0:\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; break\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; data += c\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; return data\n\ndef shell(s):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t = telnetlib.Telnet()\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t.sock = s\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t.interact()\n\ndef p(a): return struct.pack(&quot;&amp;amp;amp;lt;I&quot;,a)\ndef u(a): return struct.unpack(&quot;&amp;amp;amp;lt;I&quot;,a)[0]\n\n# --- main ---\ndic = {\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;zero&quot;: &quot;0&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;one&quot;: &quot;+1&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;two&quot;: &quot;+2&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;three&quot;: &quot;+3&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;four&quot;: &quot;+4&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;five&quot;: &quot;+5&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;six&quot;: &quot;+6&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;seven&quot;: &quot;+7&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;eight&quot;: &quot;+8&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;nine&quot;: &quot;+9&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;ten&quot;: &quot;+10&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;eleven&quot;: &quot;+11&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;twelve&quot;: &quot;+12&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;thirteen&quot;: &quot;+13&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;fourteen&quot;: &quot;+14&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;fifteen&quot;: &quot;+15&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;sixteen&quot;: &quot;+16&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;seventeen&quot;: &quot;+17&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;eighteen&quot;: &quot;+18&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;nineteen&quot;: &quot;+19&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;twenty&quot;: &quot;+20&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;thirty&quot;: &quot;+30&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;forty&quot;: &quot;+40&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;fifty&quot;: &quot;+50&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;sixty&quot;: &quot;+60&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;seventy&quot;: &quot;+70&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;eighty&quot;: &quot;+80&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;ninety&quot;: &quot;+90&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;hundred&quot;: &quot;*100&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;thousand&quot;: &quot;*1000&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;million&quot;: &quot;*1000000&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;billion&quot;: &quot;*1000000000&quot;,\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; &quot;trillion&quot;: &quot;*1000000000000&quot;\n}\n\ns, f = sock(&quot;ctfquest.trendmicro.co.jp&quot;, 51740)&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; # \u63a5\u7d9a\np = subprocess.Popen(&quot;bc&quot;, stdin = subprocess.PIPE, stdout = subprocess.PIPE)\n\nwhile True:\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; q = read_until(f, '=')\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; print q\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if q.find(&quot;=&quot;) == -1:\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; break\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; q_bc = q\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; q_bc = q_bc.replace(&quot;=&quot;, &quot;&quot;)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; q_bc = q_bc.replace(&quot;,&quot;, &quot;&quot;)\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; delim = r'([\\\\*()+-\/])'\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t = re.split(delim, q_bc)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; for i in range(len(t)):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t[i] = t[i].strip()\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if t[i] == &quot;&quot;:\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; continue\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; # operator\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if re.match(delim, t[i]) is not None:\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; continue\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; # roman\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if roman.romanNumeralPattern.match(t[i]):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t[i] = str(roman.fromRoman(t[i]))\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; continue\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; # digit\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if t[i].isdigit():\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; continue\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; # else\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; delim2 = r&quot;(thousand|million|billion|trillion)&quot;\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t2 = re.split(delim2, t[i])\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; for j in range(len(t2)):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if re.match(delim2, t2[j]) is not None:\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; continue\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t3 = t2[j].split(&quot; &quot;)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; for k in range(len(t3)):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if t3[k] in dic.keys():\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t3[k] = dic[t3[k]]\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t2[j] = &quot;&quot;.join(t3)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t2[j] = t2[j].lstrip(&quot;+&quot;)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t2[j] = &quot;+(&quot; + t2[j] + &quot;)&quot;\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; for j in range(len(t2)):\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; if t2[j] in dic.keys():\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t2[j] = dic[t2[j]]\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t[i] = &quot;&quot;.join(t2)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t[i] = t[i].lstrip(&quot;+&quot;)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; t[i] = &quot;(&quot; + t[i] + &quot;)&quot;\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; q_bc = &quot;&quot;.join(t)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; print &quot;&amp;amp;amp;nbsp; q to bc: %s&quot; % q_bc\n\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; p.stdin.write(&quot;%s\\n&quot; % q_bc)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; a = read_until(p.stdout)\n&amp;amp;amp;nbsp;&amp;amp;amp;nbsp;&amp;amp;amp;nbsp; f.write(a)\n<\/pre>\n
    \u7121\u4e8b100\u554f\u6b63\u7b54\u3059\u308b\u3068\u30d5\u30e9\u30b0\u304c\u9001\u3089\u308c\u3066\u304f\u308b\u3002<\/p>\n
    \nCongratulations!\nThe flag is TMCTF{U D1D 17!}\n<\/pre>\n
    Crypto 200<\/h2>\n
    \u554f\u984c\u6587<\/h3>\n
    \n\uff08\u4e00\u90e8\u304c\u96a0\u3055\u308c\u305f\u30d7\u30ed\u30b0\u30e9\u30e0\u3068\u305d\u306e\u5b9f\u884c\u7d50\u679c\u304b\u3089\u4f7f\u308f\u308c\u3066\u3044\u308bAES\u306eIV\u3092\u6c42\u3081\u3088\uff09\n<\/pre>\n
    \uff08\u5f8c\u3067\u66f8\u304f\uff09<\/p>\n
    Analysis Defensive 200<\/h2>\n
    \u554f\u984c\u6587<\/h3>\n
    \n\uff08\u30d5\u30a1\u30a4\u30eb\u3092\u89e3\u6790\u3057\u3066\u30d5\u30e9\u30b0\u3092\u63a2\u305b\uff09\n<\/pre>\n
    \uff08\u5f8c\u3067\u66f8\u304f\uff09<\/p>\n","protected":false},"excerpt":{"rendered":"
    Trend Micro CTF Asia Pacific & Japan 2015\u306b\u53c2\u52a0\u3057\u305f\u3002 \u30c1\u30fc\u30e0\u3068\u3057\u3066\u306f1400\u70b9\u7372\u5f97\u3002 \u81ea\u5206\u306f200\u70b9\u554f\u984c\u30923\u554f\u89e3\u3044\u305f\u306e\u3067\u66f8\u3044\u3066\u3044\u304f\u3002 \uff08\u554f\u984c\u6587\u7b49\u306e\u78ba\u4fdd\u3092\u3057\u3066\u306a\u304b\u3063\u305f\u306e\u3067\u305d […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"cybocfi_hide_featured_image":"","footnotes":""},"categories":[14],"tags":[8],"class_list":["post-299","post","type-post","status-publish","format-standard","hentry","category-ctf","tag-ctf"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts\/299","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/comments?post=299"}],"version-history":[{"count":10,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts\/299\/revisions"}],"predecessor-version":[{"id":979,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/posts\/299\/revisions\/979"}],"wp:attachment":[{"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/media?parent=299"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/categories?post=299"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/emeth.jp\/diary\/wp-json\/wp\/v2\/tags?post=299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}