Only partially Wp
About the original title, sweep the two-dimensional code extracting passwords and other parts have to refer to other blog, when I run into a wall of the problem-solving part of the record on this blog only.
base64 and rar
View Gold by 010editor 6 years .mp4, drag to the bottom found a need base64 decoded.
Base64 decoding carried out in kali and treated
hexdump -Cin hexadecimal format and the output screen ascii code
echo "UmFyIRoHAQAzkrXlCgEFBgAFAQGAgADh7ek5VQIDPLAABKEAIEvsUpGAAwAIZmxhZy50eHQwAQAD Dx43HyOdLMGWfCE9WEsBZprAJQoBSVlWkJNS9TP5du2kyJ275JzsNo29BnSZCgMC3h+UFV9p1QEf JkBPPR6MrYwXmsMCMz67DN/k5u1NYw9ga53a83/B/t2G9FkG/IITuR+9gIvr/LEdd1ZRAwUEAA==" | base64 -d|hexdump -C
It can be seen this is a rar file.
Next, I try to go through all kinds of half an hour, make sure that only get this hex is completely correct, in order to save the correct rar file, you must use this hex, and the base64 decoded ascii code into 010editor in the resulting hex coding will be wrong. In short we are using a variety of ways to decode and generate documents, have failed. As a last resort against output kali after the new hex file 010editor in the manual input into, before they get the right rar file.
Breakthrough 1: cut, pipe usage of linux, screen output to be cut, remove the front useless ascii code address and later, only the remaining portion of the hex.
echo "UmFyIRoHAQAzkrXlCgEFBgAFAQGAgADh7ek5VQIDPLAABKEAIEvsUpGAAwAIZmxhZy50eHQwAQAD Dx43HyOdLMGWfCE9WEsBZprAJQoBSVlWkJNS9TP5du2kyJ275JzsNo29BnSZCgMC3h+UFV9p1QEf JkBPPR6MrYwXmsMCMz67DN/k5u1NYw9ga53a83/B/t2G9FkG/IITuR+9gIvr/LEdd1ZRAwUEAA==" | base64 -d|hexdump -C|cut -c 11-58
Breakthrough 2: Import Hex learned
if only the last step is to copy and paste to get the hex in 010editor, will be recognized as ascii code rather than hex code, a big problem. I searched for ctf question about rar learned a method can be used Import Hex will text recognition with hex-encoded format. Thus the first in a new 010editorNew Text File, hex coded into the paste.
And then to Import Heximport just the way the File, Save As .rarformat, that is, get the right rar file.
reference
CTF archive encryption cracking summary
RoarCTF2019-misc- six gold wp