banner
lca

lca

真正的不自由,是在自己的心中设下牢笼。

Industrial Internet Security Technology Skills Competition Writeup

wallhaven-d6drmj

I solved a few questions, but couldn't solve the others -_-|

modbus#

The question provided a modbus.pcapng traffic file.

image

Open it with Wireshark, analyze the packets, and search for 666c. The hex decoding of 666c is the hexadecimal encoding of the flag. Export the packet analysis results as plain text.

image

Use grep to extract characters.

image

Remove the preceding "Data: 2400" and the repeated characters at the end, resulting in:

image

Decode the hex to obtain:

image

s7error#

The question provides a hint.

image

According to the hint, it is speculated that S7Error needs to find the packet with an error, and the hint suggests that a resource exception is needed. Therefore, find the packet with the resource exception error code.

Use Wireshark to filter out packets with err code not equal to 0x00 (no error):

((s7comm) && (s7comm.header.rosctr == 3)) && (s7comm.header.errcod != 0x00)

image

The error code is 0x83.

image

Therefore, it is speculated that the number is in the line 213056, so the flag is:

flag{213056}

The Secret of the Project#

When opened, it is a PNG image. Use LSB steganography. Open it with Stegsolve to obtain a compressed file. Extract it to get the cmp file. Open the cmp file with GX Works2.

image

Install GX Works2. It requires version 7.0 or above.

image

After installation, restore the project.

image

After successful restoration, the flag is located at the traffic light.

image

Malicious Instruction#

Open with IDA and decompile using F5.

image

ASCII encoding.

image

Encrypted Project#

Likon

Install the demo version.

Requires version 7.1, as version 7.2 cannot restore the project.

Click on "Restore" and select the PCZ file.

image

Import successful.

image

Click on "Development".

image

The software prompts that it cannot be opened due to encryption and that there may be a problem with the software installation. I have downloaded 3 or 4 versions of this software, but it still doesn't work.

Reference: Writeup written by a great person.

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.