game1

平台   WEB   已通过

题目作者: Aman

一　　血: ‌‌‌‌‌犬来八荒

一血奖励: 3金币

解　　决: 8176

提　　示:

描　　述: game1

站长题解:

先玩一局，抓包得到

curl 'http://114.67.175.224:18743/score.php?score=425&ip=120.230.124.132&sign=zMNDI1==' \
  -H 'Accept: */*' \
  -H 'Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,zh-TW;q=0.7' \
  -H 'Cookie: PHPSESSID=j727v1en6laqp0gho7acsbo3l0; isview=12468; Hm_lvt_c1b044f909411ac4213045f0478e96fc=1715999415; Hm_lpvt_c1b044f909411ac4213045f0478e96fc=1715999415; _ga=GA1.1.980539842.1715999415; _gid=GA1.1.1687216020.1715999415; _gat=1; _ga_F3VRZT58SJ=GS1.1.1715999416.1.0.1715999416.0.0.0' \
  -H 'Proxy-Connection: keep-alive' \
  -H 'Referer: http://114.67.175.224:18743/' \
  -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36' \
  --insecure

查看页面源码，得到 sign = Base64.encode(score.toString());

所以，f12，开启控制台，var score=5000；Base64.encode(score.toString());  得到 'zMNTAwMA===='，修改上面curl里url中的score和sign值，发送请求，得到flag

去做题