R3的题还是太顶了,题量大但只会签到(

Forensics

The R3 Pig Problem

打开可以看到很多tcp流,这些tcp流的时间戳存在规律

image-20250706142646509

提取出来,计算时间差,接近0.02的记为0,接近0.1的记为1

image-20250706142756381
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
def classify_time_diff(diff):
if abs(diff - 0.02) < abs(diff - 0.1):
return '0'
else:
return '1'
def process_file(filename):
with open(filename, 'r') as f:
lines = f.readlines()

result = []

i = 1
while i < len(lines)-1:
try:
current = float(lines[i+2].strip())
previous = float(lines[i].strip())
diff = current - previous
bit = classify_time_diff(diff)
result.append(bit)
except ValueError:
print(f"跳过无效行: 第 {i+1} 行")
i += 2

return ''.join(result)

if __name__ == '__main__':
input_file = 'output.txt'
binary_string = process_file(input_file)
print(binary_string)

cyberchef转换一下

image-20250706143021382

Misc

一个签到一个签退就不写了(

R3GIRL In Paris

不难找到这个地方在巴黎的china town

image-20250706143424357
image-20250706143449758

在这些网站上都能找到艺术家名称

https://www.tripadvisor.fr/ShowUserReviews-g187147-d16881390-r661798726-Fresque_De_tous_pays_viendront_tes_enfants-Paris_Ile_de_France.html

https://www.trompe-l-oeil.info/Murspeints/details.php?image_id=9303

R3CTF{Eglise-Notre-Dame-de-Chine-Cyril-David}