BUUCTF：[BJDCTF 2nd]EasyBaBa

Title address: https://buuoj.cn/challenges#[BJDCTF%202nd]EasyBaBa

binwalkAnalysis, foremostseparation

Unzip the compressed package to get里面都是出题人.jpg

010 EditorAnalyze, do not recognize the prefix, search for it

Then this file should be a video file, no wonder it is so big, modify the suffix to .avi, the video has 4.13sflashed information quickly, I use kinoveaanimation design software here

Official website: https://www.kinovea.org/

Looking at it frame by frame, four two-dimensional codes were found, and the 交错last two-dimensional code could not be recognized because of the existence of the video. You can get a clear picture kinoveaby 图像->反交错clicking on it.

Scan the QR code to get

6167696E5F6C

PS C:\Users\Administrator> php -r "echo hex2bin('6167696E5F6C');"
agin_l

6F76655F59

PS C:\Users\Administrator> php -r "echo hex2bin('6F76655F59');"
ove_Y

424A447B696D

PS C:\Users\Administrator> php -r "echo hex2bin('424A447B696D');"
BJD{
    
    im

The picture here seems to have no problem, but it can’t be recognized. PSJust cut it off and adjust the brightness and contrast.

316E677D

PS C:\Users\Administrator> php -r "echo hex2bin('316E677D');"
1ng}

Spliced ​​together

BJD{
    
    imagin_love_Y1ng}

Finally submit the flag

flag{
    
    imagin_love_Y1ng}