Open the file using 010 Editor and find a ZIP header at the end:
Extract it and open it to find no password, just a string of base64:
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 to get:
你这苹果怎么这么大大个儿才值钱你要不要这桃子怎么这么硬硬是因为新鲜你要软的还是糯的这西瓜能吃吗看起来有点不熟不熟的西瓜怎么可能你这就是等着吃甜的你这柚子这么小小巧的才好吃你要大个的还是好吃的这橙子怎么这么酸酸才是正宗的橙子你要是甜的去别家看这香蕉有点弯弯的香蕉更甜你不懂你这梨子是不是有点硬硬是因为新鲜吃着有口感这葡萄怎么这么小小的葡萄更浓缩甜味At the same time, it is found that there is still part of unrecognized data at the end of the exported zip:
Based on the 1A 9E 97 BA 2A, it can be inferred that this is OurSecret steganography. Open it with the OurSecret tool and find that a password is required. Try the password shuiguo to extract a txt file:
你这柚子这么小你这柚子这么小你这柚子这么小你这梨子是不是有点硬你这柚子这么小大个儿才值钱你要不要你这柚子这么小小巧的才好吃你要大个的还是好吃的小巧的才好吃你要大个的还是好吃的弯的香蕉更甜你不懂硬是因为新鲜你要软的还是糯的硬是因为新鲜你要软的还是糯的你这柚子这么小不熟的西瓜怎么可能你这就是等着吃甜的硬是因为新鲜你要软的还是糯的这桃子怎么这么硬硬是因为新鲜你要软的还是糯的不熟的西瓜怎么可能你这就是等着吃甜的硬是因为新鲜你要软的还是糯的酸才是正宗的橙子你要是甜的去别家看硬是因为新鲜你要软的还是糯的你这柚子这么小硬是因为新鲜你要软的还是糯的你这苹果怎么这么大你这柚子这么小大个儿才值钱你要不要硬是因为新鲜你要软的还是糯的小巧的才好吃你要大个的还是好吃的硬是因为新鲜你要软的还是糯的酸才是正宗的橙子你要是甜的去别家看你这柚子这么小这西瓜能吃吗看起来有点不熟你这柚子这么小这桃子怎么这么硬你这柚子这么小硬是因为新鲜你要软的还是糯的硬是因为新鲜你要软的还是糯的你这柚子这么小硬是因为新鲜你要软的还是糯的酸才是正宗的橙子你要是甜的去别家看你这柚子这么小这桃子怎么这么硬硬是因为新鲜你要软的还是糯的你这柚子这么小硬是因为新鲜你要软的还是糯的小巧的才好吃你要大个的还是好吃的硬是因为新鲜你要软的还是糯的这西瓜能吃吗看起来有点不熟你这柚子这么小硬是因为新鲜你要软的还是糯的你这柚子这么小这西瓜能吃吗看起来有点不熟硬是因为新鲜你要软的还是糯的这西瓜能吃吗看起来有点不熟你这柚子这么小不熟的西瓜怎么可能你这就是等着吃甜的你这柚子这么小硬是因为新鲜你要软的还是糯的硬是因为新鲜你要软的还是糯的你这柚子这么小硬是因为新鲜你要软的还是糯的小巧的才好吃你要大个的还是好吃的你这柚子这么小大个儿才值钱你要不要硬是因为新鲜你要软的还是糯的小巧的才好吃你要大个的还是好吃的硬是因为新鲜你要软的还是糯的这桃子怎么这么硬你这柚子这么小硬是因为新鲜你要软的还是糯的硬是因为新鲜你要软的还是糯的你这柚子这么小硬是因为新鲜你要软的还是糯的这桃子怎么这么硬小巧的才好吃你要大个的还是好吃的硬是因为新鲜吃着有口感It is found that this corresponds one-to-one with the previously extracted statements. Since there are 16 statements extracted earlier, it is speculated that they represent hexadecimal digits, corresponding to 0-f respectively. Then, map the OurSecret decrypted content to hexadecimal numbers to obtain: 666c61677b33653235393630613739646263363962363734636434656336376137326336327d.
Write a Python script to convert the hexadecimal string to ASCII characters in groups of two:
hex_string = "666c61677b33653235393630613739646263363962363734636434656336376137326336327d"ascii_string = ''.join([chr(int(hex_string[i:i+2], 16)) for i in range(0, len(hex_string), 2)])print(ascii_string)Get the Flag: flag{3e25960a79dbc69b674cd4ec67a72c62}