惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

人人都是产品经理
人人都是产品经理
有赞技术团队
有赞技术团队
WordPress大学
WordPress大学
月光博客
月光博客
T
Tailwind CSS Blog
阮一峰的网络日志
阮一峰的网络日志
小众软件
小众软件
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Last Week in AI
Last Week in AI
大猫的无限游戏
大猫的无限游戏
S
SegmentFault 最新的问题
罗磊的独立博客
Jina AI
Jina AI
酷 壳 – CoolShell
酷 壳 – CoolShell
宝玉的分享
宝玉的分享
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
博客园 - 三生石上(FineUI控件)
量子位
雷峰网
雷峰网
Apple Machine Learning Research
Apple Machine Learning Research
美团技术团队
博客园 - 聂微东
V
V2EX

Watermelonabc的Blog

又一个黑客模拟游戏 又一个黑客模拟游戏 家庭辅导一晚,有点感想 家庭辅导一晚,有点感想 福州大学单片机原理与应用(跨学科)复习 福州大学单片机原理与应用(跨学科)复习 福州大学毛概期末复习 福州大学毛概期末复习 x86 汇编语言详解 - 2 x86 汇编语言详解 -2 CCB 2026 Half-Final Guangzhou CCB 2026 Half-Final Guangzhou 视频也可以含恶意代码吗 视频也可以含恶意代码吗 Hello,2026 Hello,2026 2025 福州大学算法与数据结构复习 2025 福州大学算法与数据结构复习 2025 福州大学习概期末复习 2025 福州大学习概期末复习 Frida 入门 Frida 入门 记一场贴吧交流 记一场贴吧交流 虚拟机保护 虚拟机保护 2025 强网杯 S9 Reverse 复现 你如何在 FZU 取到快递 你如何在 FZU 取到快递 2025 福州大学离散数学笔记
2025 强网杯 S9 Reverse 复现
Watermelonabc · 2025-10-25 · via Watermelonabc的Blog
// saw, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// Saw
using System;
using System.Diagnostics;
using System.Net;
using System.Net.Sockets;
using System.Reflection;
using System.Security.Cryptography;
using System.Text;
using System.Threading;
using System.Threading.Tasks;

private static async Task Main(string[] args)
{
	if (args.Length != 1)
	{
		Console.WriteLine("Usage: dotnet saw.dll [input]");
		Console.WriteLine("  where input is 16 hexa bytes (eg abe74e3a9c375b3428bf31d1f8fa49c1)");
		Environment.Exit(1);
	}
	man.BlockSize = 128;
	man.Mode = CipherMode.CBC;
	man.Padding = PaddingMode.PKCS7;
	k = SHA256.Create().ComputeHash(Encoding.ASCII.GetBytes(typeof(Saw).Assembly.FullName));
	s[1023] = 3207972492L;
	s[1024] = 1190065579L;
	s[1025] = 4165979424L;
	s[1026] = 2693353696L;
	s[1027] = 3628337899L;
	s[1028] = 1707638109L;
	s[1029] = 1003779598L;
	s[1030] = 2653425729L;
	s[1031] = 795752593L;
	s[1032] = 2469382657L;
	long[] array = new long[16];
	Array.Copy(s, 1017, array, 0, 16);
	iv = Array.ConvertAll(array, (long x) => (byte)x);
	TcpListener tcpListener = new TcpListener(IPAddress.Loopback, 0);
	tcpListener.Start();
	Process p = Process.Start(new ProcessStartInfo("python3", "-m saw " + ((IPEndPoint)tcpListener.LocalEndpoint).Port)
	{
		Environment = {
		{
			"PYTHONPATH",
			Assembly.GetEntryAssembly().Location
		} }
	});
	client = tcpListener.AcceptTcpClient();
	await Hack();
	await Track();
	int rr = 0;
	while (true)
	{
		Console.Error.Write(".");
		await Shreck();
		if (rr == 0)
		{
			s[32] = Convert.ToInt64(args[0].Substring(0, 8), 16);
			s[33] = Convert.ToInt64(args[0].Substring(8, 8), 16);
			s[34] = Convert.ToInt64(args[0].Substring(16, 8), 16);
			s[35] = Convert.ToInt64(args[0].Substring(24, 8), 16);
		}
		else if (rr % 2 == 1)
		{
			if (rr != 1)
			{
				await Stop(await Crack(new byte[32]
				{
					34, 38, 13, 204, 106, 91, 87, 35, 115, 198,
					124, 92, 83, 151, 127, 227, 60, 108, 237, 212,
					71, 88, 37, 39, 222, 28, 237, 242, 207, 61,
					89, 65
				}));
			}
			else
			{
				await Stop(await Crack(new byte[32]
				{
					54, 26, 153, 43, 207, 163, 66, 102, 1, 251,
					172, 137, 133, 103, 252, 200, 133, 6, 227, 185,
					100, 190, 49, 220, 132, 230, 14, 201, 184, 28,
					84, 127
				}));
				sp += 3;
			}
			long[] array2 = s;
			array2[2] = await Stop(await Crack(new byte[16]
			{
				132, 17, 89, 19, 158, 87, 26, 91, 138, 184,
				20, 203, 22, 142, 33, 67
			}));
			array2 = s;
			array2[3] = await Stop(await Crack(new byte[16]
			{
				98, 124, 165, 114, 4, 73, 122, 239, 35, 224,
				182, 58, 230, 239, 169, 171
			}));
			if (rr == 1)
			{
				s[4] = 1038097261L;
			}
			else
			{
				s[4] ^= s[3];
			}
		}
		else
		{
			sp -= 27;
			await Stop(await Crack(new byte[32]
			{
				181, 158, 168, 62, 5, 218, 108, 22, 225, 44,
				69, 4, 169, 112, 225, 186, 212, 234, 186, 217,
				245, 102, 219, 46, 107, 236, 2, 37, 80, 8,
				162, 183
			}));
			await Stop(await Crack(new byte[32]
			{
				71, 166, 143, 191, 134, 170, 65, 147, 11, 69,
				123, 125, 140, 156, 32, 225, 68, 85, 198, 59,
				6, 58, 62, 75, 142, 62, 22, 169, 7, 21,
				26, 177
			}));
			for (int ii = 0; ii < 4; ii++)
			{
				await Stop(await Crack(new byte[32]
				{
					88, 244, 228, 34, 209, 136, 53, 33, 174, 103,
					199, 211, 90, 244, 91, 46, 98, 141, 50, 45,
					70, 160, 34, 209, 131, 19, 95, 66, 187, 185,
					87, 236
				}));
				await Stop(await Crack(new byte[32]
				{
					59, 134, 219, 11, 168, 34, 42, 6, 142, 30,
					47, 12, 175, 97, 187, 166, 191, 165, 206, 91,
					56, 92, 35, 91, 63, 232, 2, 235, 246, 41,
					249, 60
				}));
				await Stop(await Crack(new byte[32]
				{
					30, 47, 78, 72, 232, 144, 186, 158, 145, 46,
					78, 42, 66, 78, 48, 177, 201, 84, 194, 246,
					32, 77, 153, 26, 204, 139, 24, 149, 70, 89,
					23, 50
				}));
				await Stop(await Crack(new byte[32]
				{
					88, 244, 228, 34, 209, 136, 53, 33, 174, 103,
					199, 211, 90, 244, 91, 46, 98, 141, 50, 45,
					70, 160, 34, 209, 131, 19, 95, 66, 187, 185,
					87, 236
				}));
				await Stop(await Crack(new byte[32]
				{
					59, 134, 219, 11, 168, 34, 42, 6, 142, 30,
					47, 12, 175, 97, 187, 166, 191, 165, 206, 91,
					56, 92, 35, 91, 63, 232, 2, 235, 246, 41,
					249, 60
				}));
				await Stop(await Crack(new byte[32]
				{
					30, 47, 78, 72, 232, 144, 186, 158, 145, 46,
					78, 42, 66, 78, 48, 177, 201, 84, 194, 246,
					32, 77, 153, 26, 204, 139, 24, 149, 70, 89,
					23, 50
				}));
				await Stop(await Crack(new byte[32]
				{
					88, 244, 228, 34, 209, 136, 53, 33, 174, 103,
					199, 211, 90, 244, 91, 46, 98, 141, 50, 45,
					70, 160, 34, 209, 131, 19, 95, 66, 187, 185,
					87, 236
				}));
				await Stop(await Crack(new byte[32]
				{
					59, 134, 219, 11, 168, 34, 42, 6, 142, 30,
					47, 12, 175, 97, 187, 166, 191, 165, 206, 91,
					56, 92, 35, 91, 63, 232, 2, 235, 246, 41,
					249, 60
				}));
				await Stop(await Crack(new byte[32]
				{
					30, 47, 78, 72, 232, 144, 186, 158, 145, 46,
					78, 42, 66, 78, 48, 177, 201, 84, 194, 246,
					32, 77, 153, 26, 204, 139, 24, 149, 70, 89,
					23, 50
				}));
				await Stop(await Crack(new byte[32]
				{
					47, 110, 238, 143, 41, 255, 113, 160, 229, 92,
					84, 132, 31, 128, 72, 253, 98, 154, 102, 114,
					68, 165, 121, 194, 102, 210, 191, 221, 49, 209,
					210, 215
				}));
				await Stop(await Crack(new byte[32]
				{
					59, 134, 219, 11, 168, 34, 42, 6, 142, 30,
					47, 12, 175, 97, 187, 166, 68, 235, 237, 14,
					9, 156, 105, 253, 49, 93, 204, 138, 86, 162,
					159, 183
				}));
				await Stop(await Crack(new byte[32]
				{
					59, 134, 219, 11, 168, 34, 42, 6, 142, 30,
					47, 12, 175, 97, 187, 166, 191, 165, 206, 91,
					56, 92, 35, 91, 63, 232, 2, 235, 246, 41,
					249, 60
				}));
				await Stop(await Crack(new byte[32]
				{
					30, 47, 78, 72, 232, 144, 186, 158, 145, 46,
					78, 42, 66, 78, 48, 177, 201, 84, 194, 246,
					32, 77, 153, 26, 204, 139, 24, 149, 70, 89,
					23, 50
				}));
			}
			await Stop(await Crack(new byte[32]
			{
				164, 53, 148, 8, 250, 208, 160, 70, 126, 59,
				160, 104, 222, 18, 194, 130, 172, 224, 232, 3,
				9, 43, 214, 128, 13, 213, 251, 91, 231, 216,
				221, 212
			}));
			long[] array2 = s;
			long num = s[1];
			array2[32] = num ^ await Stop(await Crack(new byte[16]
			{
				132, 17, 89, 19, 158, 87, 26, 91, 138, 184,
				20, 203, 22, 142, 33, 67
			}));
			array2 = s;
			num = s[2];
			array2[33] = num ^ await Stop(await Crack(new byte[16]
			{
				98, 124, 165, 114, 4, 73, 122, 239, 35, 224,
				182, 58, 230, 239, 169, 171
			}));
			array2 = s;
			num = s[3];
			array2[34] = num ^ await Stop(await Crack(new byte[16]
			{
				41, 105, 145, 250, 243, 41, 66, 60, 57, 250,
				209, 67, 192, 42, 111, 95
			}));
			array2 = s;
			num = s[4];
			array2[35] = num ^ await Stop(await Crack(new byte[16]
			{
				46, 125, 65, 197, 84, 64, 181, 17, 52, 236,
				114, 213, 42, 180, 217, 142
			}));
		}
		if (rr == 22)
		{
			await blient.GetStream().WriteAsync(new byte[15]
			{
				0, 0, 0, 15, 0, 0, 0, 1, 0, 1,
				10, 0, 0, 0, 0
			}, default(CancellationToken));
			p.Kill();
			_ = new byte[16];
			for (int num2 = 0; num2 < 4; num2++)
			{
				byte[] bytes = BitConverter.GetBytes((uint)s[32 + num2]);
				Array.Reverse(bytes);
				Console.Write(BitConverter.ToString(bytes).Replace("-", ""));
			}
			Environment.Exit(0);
		}
		await Breck();
		await client.GetStream().WriteAsync(BitConverter.GetBytes(0), default(CancellationToken));
		while (await Hack())
		{
		}
		bool flag = true;
		while (flag)
		{
			flag = await Horror();
		}
		rr++;
	}
}