7/22 から開催されていた ImaginaryCTF 2023 に 0nePadding で参加し、80 位/ 880 チームでした。
今回はあまり時間が取れず軽めの参加だったのもあり順位が振るわずでしたが、簡単に Writeup を書いていきます。
もくじ
chaos(Rev)
Can you find order in the midst of chaos?
問題バイナリとして以下の難読化された Python スクリプトが与えられました。
inp = input("What is the flag? ").encode().zfill(51)
if [n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65s").__dict__.__getitem__("\x66\x72\x6fm\x68e\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79t\x65\x73"),"\x36\x37\x20\x36\x63\x206\x66\x20\x36\x32\x2061\x20\x36\x63 \x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("bytes").__dict__.__getitem__("fromhex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("bytes"),"\x35f\x20\x35f \x362 \x375\x2069 6\x63\x20\x374\x206\x39\x206e\x207\x33\x20\x35f\x20\x35\x66").decode()).__dict__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74e\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x31 \x36\x63\x20\x36\x63").decode())([[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(17106^17105).__pow__(8).__eq__(11716593810022656),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(27097^27083).__pow__(24).__eq__(32353447101972729728913030683994293212890625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(34026^34017).__pow__(46).__eq__(9446824413773783721646626909963562851135776704278099454808312884779297746717929840087890625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(63699^63729).__pow__(73).__eq__(3848329407410063966449821610084142775235723300303676033059406926388218957230170383178174198012821574964995892819168434088598247206551552),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(19642^19614).__pow__(116).__eq__(99453466295769991497930584904635827609127067259139567866356325844880559213675005735941118931591926469923175003563264921621620270586414500654150782386695821390343819044273345442678033943156922419726982739685408239580854488870825230336),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(23117^23115).__pow__(43).__eq__(666454163935483494165986073535521413339908119119439689887653437787720225729135378569),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(22834^22817).__pow__(100).__eq__(279125119937476769711218039717323941184780697208075426033790125935558757770607551692800947835186940401831368051935139459092824653082333036363632761532652883447140730780926539009118491968618626309427482853376),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(63619^63651).__pow__(77).__eq__(14774235820095264004498794573921235350758313964623449966161598941405119454882112300765336770281511027492774636711848411946648949240160971642785234944),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(46423^46430).__pow__(103).__eq__(2854896728399152791501132019657741211254110875185643687171299493879837284627932797677994094488293012716816857642547064999482966108800130770400087515961592245860476713903985973402562210059666101039),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(45770^45807).__pow__(81).__eq__(15154451684337032471180877896715528289578404766894843944101258135758218479588478910835485639300034416425654688319551372515107152957800448),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(7845^7816).__pow__(93).__eq__(152765413313863335891876650232228590636250322599805199887699889155122653736313839970609248122516106082640356845647993746493975270361464407009917660338486004656821831684909457479206699008),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(17069^17077).__pow__(119).__eq__(3322971292068586945001375443001494973926450995421185933704074187872339304713790839588476655936816080094232588371678021671011954902402082880837534931228172997419786114403571789661045242053742017701253343153755537286997423507273197174072265625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(1919^1896).__pow__(49).__eq__(8099471081759297818346776746930009699492536551830435520066277259587650405592285096645355224609375),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(60735^60714).__pow__(86).__eq__(15701091733911005039058018134515591100230024516717081888584305795418262516795142712396701976283136741150049062868709289366652374855096750702527661176436773532505121),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(63287^63283).__pow__(15).__eq__(22313961097670283270314823109107),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(33028^33054).__pow__(7).__eq__(69833729609375),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(19552^19569).__pow__(84).__eq__(429889013523893846517224806489583669713060303148081760017486582803791784190577550623785359784398305368779194132465078850291607165748639598349926675909535416694850851601),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(37067^37090).__pow__(12).__eq__(540360087662636962890625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(62715^62688).__pow__(62).__eq__(2041105095068520949608886499704812731055009299025497759896142376700593881360024455303422742986506865665182180923408384),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(54720^54745).__pow__(65).__eq__(54963705560933635277952993342472339302063424186821498970895216297884264422272899437483338452342942688676763803346334166793043),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(14087^14082).__pow__(20).__eq__(96462930932749340835590504792099626418176),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(22869^22868).__pow__(46).__eq__(62982363120323251233150548690344397272388328521683052596132450587358969755035127763330345401),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(63517^63506).__pow__(29).__eq__(949270512908903998086528065053936636111328026544003052270597),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(40718^40730).__pow__(91).__eq__(36507346762698022672229947186425564061671647922171034852241452332588206602097091150839365421846414898500447897136445343628072917352273365998214114455637040252668778245977),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(62436^62444).__pow__(68).__eq__(143968364924561562974552731434596494012559606399312856181339379510991356456528667994770416197404697432075362606752512560583016461354663936),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(15680^15715).__pow__(70).__eq__(2758369043677505509670918061256140775824469482504900073864113562384680896531951362608474132392098222832377274471582495607435703277587890625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(49618^49632).__pow__(126).__eq__(1624282775882015502895375715731547869967116063808701172227878605593265086649151663316740754595701943186985338276960573341825325659163921089779652068912755058200778559830844842804901645227676036378209809395699655072884990216798561935007683132425881922245025634765625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(14155^14183).__pow__(89).__eq__(2675784431388739822912479195873535006777575546428377894186361016610060132844501148420511053019793063406241229031720237861254267757764404192017148214449),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(8596^8585).__pow__(96).__eq__(7268856709612756787225346499677774289512802614190641289146375658956020349643783943847809231604499765439814143733504245364357174482782079478652842983478488125825833776616491377353668212890625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(56324^56367).__pow__(110).__eq__(29877972010972253192833071731693415365652202298871181558777888425605465225468139159773124416544534747536455303762752108499734678488854585192233276174396159856142083921750940280030953940651129665938997431598127754379961001),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(50544^50519).__pow__(25).__eq__(27738957312183406810942176067977845668792724609375),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(24933^24906).__pow__(76).__eq__(5961195753983995303484560285190290682733463583595335304528058156325433562658524929707243203762512477786151879240818694539888378801),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(43674^43664).__pow__(24).__eq__(9849732675807611094711841000000000000000000000000),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(34191^34239).__pow__(126).__eq__(12123322046368026766845555284174734862143220839547136182936923801262519994579258895086695136012612784629964133807779629268912272729929064102563562351571134115669020914817314628448682040928343513644325889562377257420914618199293475950013761897362635096064),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(17618^17631).__pow__(6).__eq__(885842380864),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(9740^9746).__pow__(33).__eq__(179553522959388241739349798537554631708787040879135341103130317),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(7975^7979).__pow__(35).__eq__(385748510274670890320797750420430050708201357023753748717210749529398351),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(59041^59008).__pow__(49).__eq__(300376071024635284156087943212436719239375530813650294861384068083525481611313395070377347),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(15126^15143).__pow__(79).__eq__(5177422397434133943104921319391337172187409135061853455150624631814434849075662045692827869398608558750724406518789785253043723750457037193),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(57935^57936).__pow__(93).__eq__(3875350235281664831660960617580349420579089722213274181469314776019545119245476575202268153511388261695333783650094408887882026903201446197283128996238502920192),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(7010^7008).__pow__(55).__eq__(350904879621892686078282166981617097988227698061554148933088288827825374792856539625950879204483697093639537688576),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(20335^20345).__pow__(102).__eq__(9854837658709009902840423788263103930870230691677351986711027186635648340217172558000699787158395409325616057120782122954632368861884637638021078801194044407273135355605978370906978064829251584),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(58025^57987).__pow__(33).__eq__(8787599130086200747642212647740199161191191975177869536057),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(1800^1812).__pow__(30).__eq__(273676256864057658169979465205184816551174365773824),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(22479^22472).__pow__(71).__eq__(377152712136764226850902319141752255855581394522141919528596649522051505994415819394593995263291702335322867016097574358377280544383250363282620416),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(29858^29836).__pow__(32).__eq__(2328306436538696289062500000000000000000000000000000000),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(14363^14387).__pow__(52).__eq__(21368996953242526153442455912292983336597584898817192469907377729843034330770024098455905914306640625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(52117^52147).__pow__(56).__eq__(15369922400447804050857106809882557886535430378970772864323994847940248511226147412103978681078289133898040067751936),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(24068^24068).__pow__(30).__eq__(4321942375150662009157288198886473341473378241062164306640625),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(12340^12346).__pow__(95).__eq__(19244817692775379254742950967455327011704665906495063967001221701622487413797394300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000),[n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68ex")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x37\x20\x36\x63\x20\x36\x66\x20\x36\x32\x20\x36\x31\x20\x36\x63\x20\x37\x33").decode())().__getitem__([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73").__dict__.__getitem__("\x66\x72\x6f\x6d\x68\x65\x78")([n for n in ().__class__.__base__.__subclasses__() if "rni" in n.__name__ and n.__name__ == n.__name__.lower()][0]()._module.__builtins__.__getitem__("\x62\x79\x74\x65\x73"),"\x36\x39\x20\x36\x65\x20\x37\x30").decode()).__getitem__(37143^37127).__pow__(39).__eq__(698305725136602387487529275219403181042627701878718020159538228622689033147)]):
print("Correct!")
else:
print("Wrong!")input で受け取った入力値に対して何らかの検証を行っているようです。
先頭から順番に難読化を解除していくと、最終的に以下のコードを実行していることがわかりました。
inp.__getitem__(17106^17105).__pow__(8).__eq__(11716593810022656),
inp.__getitem__(27097^27083).__pow__(24).__eq__(32353447101972729728913030683994293212890625),
inp.__getitem__(34026^34017).__pow__(46).__eq__(9446824413773783721646626909963562851135776704278099454808312884779297746717929840087890625),
inp.__getitem__(63699^63729).__pow__(73).__eq__(3848329407410063966449821610084142775235723300303676033059406926388218957230170383178174198012821574964995892819168434088598247206551552),
inp.__getitem__(19642^19614).__pow__(116).__eq__(99453466295769991497930584904635827609127067259139567866356325844880559213675005735941118931591926469923175003563264921621620270586414500654150782386695821390343819044273345442678033943156922419726982739685408239580854488870825230336),
inp.__getitem__(23117^23115).__pow__(43).__eq__(666454163935483494165986073535521413339908119119439689887653437787720225729135378569),
inp.__getitem__(22834^22817).__pow__(100).__eq__(279125119937476769711218039717323941184780697208075426033790125935558757770607551692800947835186940401831368051935139459092824653082333036363632761532652883447140730780926539009118491968618626309427482853376),
inp.__getitem__(63619^63651).__pow__(77).__eq__(14774235820095264004498794573921235350758313964623449966161598941405119454882112300765336770281511027492774636711848411946648949240160971642785234944),
inp.__getitem__(46423^46430).__pow__(103).__eq__(2854896728399152791501132019657741211254110875185643687171299493879837284627932797677994094488293012716816857642547064999482966108800130770400087515961592245860476713903985973402562210059666101039),
inp.__getitem__(45770^45807).__pow__(81).__eq__(15154451684337032471180877896715528289578404766894843944101258135758218479588478910835485639300034416425654688319551372515107152957800448),
inp.__getitem__(7845^7816).__pow__(93).__eq__(152765413313863335891876650232228590636250322599805199887699889155122653736313839970609248122516106082640356845647993746493975270361464407009917660338486004656821831684909457479206699008),
inp.__getitem__(17069^17077).__pow__(119).__eq__(3322971292068586945001375443001494973926450995421185933704074187872339304713790839588476655936816080094232588371678021671011954902402082880837534931228172997419786114403571789661045242053742017701253343153755537286997423507273197174072265625),
inp.__getitem__(1919^1896).__pow__(49).__eq__(8099471081759297818346776746930009699492536551830435520066277259587650405592285096645355224609375),
inp.__getitem__(60735^60714).__pow__(86).__eq__(15701091733911005039058018134515591100230024516717081888584305795418262516795142712396701976283136741150049062868709289366652374855096750702527661176436773532505121),
inp.__getitem__(63287^63283).__pow__(15).__eq__(22313961097670283270314823109107),
inp.__getitem__(33028^33054).__pow__(7).__eq__(69833729609375),
inp.__getitem__(19552^19569).__pow__(84).__eq__(429889013523893846517224806489583669713060303148081760017486582803791784190577550623785359784398305368779194132465078850291607165748639598349926675909535416694850851601),
inp.__getitem__(37067^37090).__pow__(12).__eq__(540360087662636962890625),
inp.__getitem__(62715^62688).__pow__(62).__eq__(2041105095068520949608886499704812731055009299025497759896142376700593881360024455303422742986506865665182180923408384),
inp.__getitem__(54720^54745).__pow__(65).__eq__(54963705560933635277952993342472339302063424186821498970895216297884264422272899437483338452342942688676763803346334166793043),
inp.__getitem__(14087^14082).__pow__(20).__eq__(96462930932749340835590504792099626418176),
inp.__getitem__(22869^22868).__pow__(46).__eq__(62982363120323251233150548690344397272388328521683052596132450587358969755035127763330345401),
inp.__getitem__(63517^63506).__pow__(29).__eq__(949270512908903998086528065053936636111328026544003052270597),
inp.__getitem__(40718^40730).__pow__(91).__eq__(36507346762698022672229947186425564061671647922171034852241452332588206602097091150839365421846414898500447897136445343628072917352273365998214114455637040252668778245977),
inp.__getitem__(62436^62444).__pow__(68).__eq__(143968364924561562974552731434596494012559606399312856181339379510991356456528667994770416197404697432075362606752512560583016461354663936),
inp.__getitem__(15680^15715).__pow__(70).__eq__(2758369043677505509670918061256140775824469482504900073864113562384680896531951362608474132392098222832377274471582495607435703277587890625),
inp.__getitem__(49618^49632).__pow__(126).__eq__(1624282775882015502895375715731547869967116063808701172227878605593265086649151663316740754595701943186985338276960573341825325659163921089779652068912755058200778559830844842804901645227676036378209809395699655072884990216798561935007683132425881922245025634765625),
inp.__getitem__(14155^14183).__pow__(89).__eq__(2675784431388739822912479195873535006777575546428377894186361016610060132844501148420511053019793063406241229031720237861254267757764404192017148214449),
inp.__getitem__(8596^8585).__pow__(96).__eq__(7268856709612756787225346499677774289512802614190641289146375658956020349643783943847809231604499765439814143733504245364357174482782079478652842983478488125825833776616491377353668212890625),
inp.__getitem__(56324^56367).__pow__(110).__eq__(29877972010972253192833071731693415365652202298871181558777888425605465225468139159773124416544534747536455303762752108499734678488854585192233276174396159856142083921750940280030953940651129665938997431598127754379961001),
inp.__getitem__(50544^50519).__pow__(25).__eq__(27738957312183406810942176067977845668792724609375),
inp.__getitem__(24933^24906).__pow__(76).__eq__(5961195753983995303484560285190290682733463583595335304528058156325433562658524929707243203762512477786151879240818694539888378801),
inp.__getitem__(43674^43664).__pow__(24).__eq__(9849732675807611094711841000000000000000000000000),
inp.__getitem__(34191^34239).__pow__(126).__eq__(12123322046368026766845555284174734862143220839547136182936923801262519994579258895086695136012612784629964133807779629268912272729929064102563562351571134115669020914817314628448682040928343513644325889562377257420914618199293475950013761897362635096064),
inp.__getitem__(17618^17631).__pow__(6).__eq__(885842380864),
inp.__getitem__(9740^9746).__pow__(33).__eq__(179553522959388241739349798537554631708787040879135341103130317),
inp.__getitem__(7975^7979).__pow__(35).__eq__(385748510274670890320797750420430050708201357023753748717210749529398351),
inp.__getitem__(59041^59008).__pow__(49).__eq__(300376071024635284156087943212436719239375530813650294861384068083525481611313395070377347),
inp.__getitem__(15126^15143).__pow__(79).__eq__(5177422397434133943104921319391337172187409135061853455150624631814434849075662045692827869398608558750724406518789785253043723750457037193),
inp.__getitem__(57935^57936).__pow__(93).__eq__(3875350235281664831660960617580349420579089722213274181469314776019545119245476575202268153511388261695333783650094408887882026903201446197283128996238502920192),
inp.__getitem__(7010^7008).__pow__(55).__eq__(350904879621892686078282166981617097988227698061554148933088288827825374792856539625950879204483697093639537688576),
inp.__getitem__(20335^20345).__pow__(102).__eq__(9854837658709009902840423788263103930870230691677351986711027186635648340217172558000699787158395409325616057120782122954632368861884637638021078801194044407273135355605978370906978064829251584),
inp.__getitem__(58025^57987).__pow__(33).__eq__(8787599130086200747642212647740199161191191975177869536057),
inp.__getitem__(1800^1812).__pow__(30).__eq__(273676256864057658169979465205184816551174365773824),
inp.__getitem__(22479^22472).__pow__(71).__eq__(377152712136764226850902319141752255855581394522141919528596649522051505994415819394593995263291702335322867016097574358377280544383250363282620416),
inp.__getitem__(29858^29836).__pow__(32).__eq__(2328306436538696289062500000000000000000000000000000000),
inp.__getitem__(14363^14387).__pow__(52).__eq__(21368996953242526153442455912292983336597584898817192469907377729843034330770024098455905914306640625),
inp.__getitem__(52117^52147).__pow__(56).__eq__(15369922400447804050857106809882557886535430378970772864323994847940248511226147412103978681078289133898040067751936),
inp.__getitem__(24068^24068).__pow__(30).__eq__(4321942375150662009157288198886473341473378241062164306640625),
inp.__getitem__(12340^12346).__pow__(95).__eq__(19244817692775379254742950967455327011704665906495063967001221701622487413797394300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000),
inp.__getitem__(37143^37127).__pow__(39).__eq__(698305725136602387487529275219403181042627701878718020159538228622689033147)というわけで、pow 関数で逆算して Flag を取得しました。
ちなみに、累乗根を取るときに小数が発生してしまうので、ceil と floor のそれぞれの結果を取得し、検算していく方式で正しい値を特定しています。
import math
flag = ""
c = math.ceil(pow(4321942375150662009157288198886473341473378241062164306640625,1/30))
f = math.floor(pow(4321942375150662009157288198886473341473378241062164306640625,1/30))
if pow(c,30) == 4321942375150662009157288198886473341473378241062164306640625:
flag += chr(c)
elif pow(f,30) == 4321942375150662009157288198886473341473378241062164306640625:
flag += chr(f)
c = math.ceil(pow(62982363120323251233150548690344397272388328521683052596132450587358969755035127763330345401,1/46))
f = math.floor(pow(62982363120323251233150548690344397272388328521683052596132450587358969755035127763330345401,1/46))
if pow(c,46) == 62982363120323251233150548690344397272388328521683052596132450587358969755035127763330345401:
flag += chr(c)
elif pow(f,46) == 62982363120323251233150548690344397272388328521683052596132450587358969755035127763330345401:
flag += chr(f)
c = math.ceil(pow(350904879621892686078282166981617097988227698061554148933088288827825374792856539625950879204483697093639537688576,1/55))
f = math.floor(pow(350904879621892686078282166981617097988227698061554148933088288827825374792856539625950879204483697093639537688576,1/55))
if pow(c,55) == 350904879621892686078282166981617097988227698061554148933088288827825374792856539625950879204483697093639537688576:
flag += chr(c)
elif pow(f,55) == 350904879621892686078282166981617097988227698061554148933088288827825374792856539625950879204483697093639537688576:
flag += chr(f)
c = math.ceil(pow(11716593810022656,1/8))
f = math.floor(pow(11716593810022656,1/8))
if pow(c,8) == 11716593810022656:
flag += chr(c)
elif pow(f,8) == 11716593810022656:
flag += chr(f)
c = math.ceil(pow(22313961097670283270314823109107,1/15))
f = math.floor(pow(22313961097670283270314823109107,1/15))
if pow(c,15) == 22313961097670283270314823109107:
flag += chr(c)
elif pow(f,15) == 22313961097670283270314823109107:
flag += chr(f)
c = math.ceil(pow(96462930932749340835590504792099626418176,1/20))
f = math.floor(pow(96462930932749340835590504792099626418176,1/20))
if pow(c,20) == 96462930932749340835590504792099626418176:
flag += chr(c)
elif pow(f,20) == 96462930932749340835590504792099626418176:
flag += chr(f)
c = math.ceil(pow(666454163935483494165986073535521413339908119119439689887653437787720225729135378569,1/43))
f = math.floor(pow(666454163935483494165986073535521413339908119119439689887653437787720225729135378569,1/43))
if pow(c,43) == 666454163935483494165986073535521413339908119119439689887653437787720225729135378569:
flag += chr(c)
elif pow(f,43) == 666454163935483494165986073535521413339908119119439689887653437787720225729135378569:
flag += chr(f)
c = math.ceil(pow(377152712136764226850902319141752255855581394522141919528596649522051505994415819394593995263291702335322867016097574358377280544383250363282620416,1/71))
f = math.floor(pow(377152712136764226850902319141752255855581394522141919528596649522051505994415819394593995263291702335322867016097574358377280544383250363282620416,1/71))
if pow(c,71) == 377152712136764226850902319141752255855581394522141919528596649522051505994415819394593995263291702335322867016097574358377280544383250363282620416:
flag += chr(c)
elif pow(f,71) == 377152712136764226850902319141752255855581394522141919528596649522051505994415819394593995263291702335322867016097574358377280544383250363282620416:
flag += chr(f)
c = math.ceil(pow(143968364924561562974552731434596494012559606399312856181339379510991356456528667994770416197404697432075362606752512560583016461354663936,1/68))
f = math.floor(pow(143968364924561562974552731434596494012559606399312856181339379510991356456528667994770416197404697432075362606752512560583016461354663936,1/68))
if pow(c,68) == 143968364924561562974552731434596494012559606399312856181339379510991356456528667994770416197404697432075362606752512560583016461354663936:
flag += chr(c)
elif pow(f,68) == 143968364924561562974552731434596494012559606399312856181339379510991356456528667994770416197404697432075362606752512560583016461354663936:
flag += chr(f)
c = math.ceil(pow(2854896728399152791501132019657741211254110875185643687171299493879837284627932797677994094488293012716816857642547064999482966108800130770400087515961592245860476713903985973402562210059666101039,1/103))
f = math.floor(pow(2854896728399152791501132019657741211254110875185643687171299493879837284627932797677994094488293012716816857642547064999482966108800130770400087515961592245860476713903985973402562210059666101039,1/103))
if pow(c,103) == 2854896728399152791501132019657741211254110875185643687171299493879837284627932797677994094488293012716816857642547064999482966108800130770400087515961592245860476713903985973402562210059666101039:
flag += chr(c)
elif pow(f,103) == 2854896728399152791501132019657741211254110875185643687171299493879837284627932797677994094488293012716816857642547064999482966108800130770400087515961592245860476713903985973402562210059666101039:
flag += chr(f)
c = math.ceil(pow(9849732675807611094711841000000000000000000000000,1/24))
f = math.floor(pow(9849732675807611094711841000000000000000000000000,1/24))
if pow(c,24) == 9849732675807611094711841000000000000000000000000:
flag += chr(c)
elif pow(f,24) == 9849732675807611094711841000000000000000000000000:
flag += chr(f)
c = math.ceil(pow(9446824413773783721646626909963562851135776704278099454808312884779297746717929840087890625,1/46))
f = math.floor(pow(9446824413773783721646626909963562851135776704278099454808312884779297746717929840087890625,1/46))
if pow(c,46) == 9446824413773783721646626909963562851135776704278099454808312884779297746717929840087890625:
flag += chr(c)
elif pow(f,46) == 9446824413773783721646626909963562851135776704278099454808312884779297746717929840087890625:
flag += chr(f)
c = math.ceil(pow(385748510274670890320797750420430050708201357023753748717210749529398351,1/35))
f = math.floor(pow(385748510274670890320797750420430050708201357023753748717210749529398351,1/35))
if pow(c,35) == 385748510274670890320797750420430050708201357023753748717210749529398351:
flag += chr(c)
elif pow(f,35) == 385748510274670890320797750420430050708201357023753748717210749529398351:
flag += chr(f)
c = math.ceil(pow(885842380864,1/6))
f = math.floor(pow(885842380864,1/6))
if pow(c,6) == 885842380864:
flag += chr(c)
elif pow(f,6) == 885842380864:
flag += chr(f)
c = math.ceil(pow(19244817692775379254742950967455327011704665906495063967001221701622487413797394300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,1/95))
f = math.floor(pow(19244817692775379254742950967455327011704665906495063967001221701622487413797394300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,1/95))
if pow(c,95) == 19244817692775379254742950967455327011704665906495063967001221701622487413797394300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000:
flag += chr(c)
elif pow(f,95) == 19244817692775379254742950967455327011704665906495063967001221701622487413797394300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000:
flag += chr(f)
c = math.ceil(pow(949270512908903998086528065053936636111328026544003052270597,1/29))
f = math.floor(pow(949270512908903998086528065053936636111328026544003052270597,1/29))
if pow(c,29) == 949270512908903998086528065053936636111328026544003052270597:
flag += chr(c)
elif pow(f,29) == 949270512908903998086528065053936636111328026544003052270597:
flag += chr(f)
c = math.ceil(pow(698305725136602387487529275219403181042627701878718020159538228622689033147,1/39))
f = math.floor(pow(698305725136602387487529275219403181042627701878718020159538228622689033147,1/39))
if pow(c,39) == 698305725136602387487529275219403181042627701878718020159538228622689033147:
flag += chr(c)
elif pow(f,39) == 698305725136602387487529275219403181042627701878718020159538228622689033147:
flag += chr(f)
c = math.ceil(pow(429889013523893846517224806489583669713060303148081760017486582803791784190577550623785359784398305368779194132465078850291607165748639598349926675909535416694850851601,1/84))
f = math.floor(pow(429889013523893846517224806489583669713060303148081760017486582803791784190577550623785359784398305368779194132465078850291607165748639598349926675909535416694850851601,1/84))
if pow(c,84) == 429889013523893846517224806489583669713060303148081760017486582803791784190577550623785359784398305368779194132465078850291607165748639598349926675909535416694850851601:
flag += chr(c)
elif pow(f,84) == 429889013523893846517224806489583669713060303148081760017486582803791784190577550623785359784398305368779194132465078850291607165748639598349926675909535416694850851601:
flag += chr(f)
c = math.ceil(pow(32353447101972729728913030683994293212890625,1/24))
f = math.floor(pow(32353447101972729728913030683994293212890625,1/24))
if pow(c,24) == 32353447101972729728913030683994293212890625:
flag += chr(c)
elif pow(f,24) == 32353447101972729728913030683994293212890625:
flag += chr(f)
c = math.ceil(pow(279125119937476769711218039717323941184780697208075426033790125935558757770607551692800947835186940401831368051935139459092824653082333036363632761532652883447140730780926539009118491968618626309427482853376,1/100))
f = math.floor(pow(279125119937476769711218039717323941184780697208075426033790125935558757770607551692800947835186940401831368051935139459092824653082333036363632761532652883447140730780926539009118491968618626309427482853376,1/100))
if pow(c,100) == 279125119937476769711218039717323941184780697208075426033790125935558757770607551692800947835186940401831368051935139459092824653082333036363632761532652883447140730780926539009118491968618626309427482853376:
flag += chr(c)
elif pow(f,100) == 279125119937476769711218039717323941184780697208075426033790125935558757770607551692800947835186940401831368051935139459092824653082333036363632761532652883447140730780926539009118491968618626309427482853376:
flag += chr(f)
c = math.ceil(pow(36507346762698022672229947186425564061671647922171034852241452332588206602097091150839365421846414898500447897136445343628072917352273365998214114455637040252668778245977,1/91))
f = math.floor(pow(36507346762698022672229947186425564061671647922171034852241452332588206602097091150839365421846414898500447897136445343628072917352273365998214114455637040252668778245977,1/91))
if pow(c,91) == 36507346762698022672229947186425564061671647922171034852241452332588206602097091150839365421846414898500447897136445343628072917352273365998214114455637040252668778245977:
flag += chr(c)
elif pow(f,91) == 36507346762698022672229947186425564061671647922171034852241452332588206602097091150839365421846414898500447897136445343628072917352273365998214114455637040252668778245977:
flag += chr(f)
c = math.ceil(pow(15701091733911005039058018134515591100230024516717081888584305795418262516795142712396701976283136741150049062868709289366652374855096750702527661176436773532505121,1/86))
f = math.floor(pow(15701091733911005039058018134515591100230024516717081888584305795418262516795142712396701976283136741150049062868709289366652374855096750702527661176436773532505121,1/86))
if pow(c,86) == 15701091733911005039058018134515591100230024516717081888584305795418262516795142712396701976283136741150049062868709289366652374855096750702527661176436773532505121:
flag += chr(c)
elif pow(f,86) == 15701091733911005039058018134515591100230024516717081888584305795418262516795142712396701976283136741150049062868709289366652374855096750702527661176436773532505121:
flag += chr(f)
c = math.ceil(pow(9854837658709009902840423788263103930870230691677351986711027186635648340217172558000699787158395409325616057120782122954632368861884637638021078801194044407273135355605978370906978064829251584,1/102))
f = math.floor(pow(9854837658709009902840423788263103930870230691677351986711027186635648340217172558000699787158395409325616057120782122954632368861884637638021078801194044407273135355605978370906978064829251584,1/102))
if pow(c,102) == 9854837658709009902840423788263103930870230691677351986711027186635648340217172558000699787158395409325616057120782122954632368861884637638021078801194044407273135355605978370906978064829251584:
flag += chr(c)
elif pow(f,102) == 9854837658709009902840423788263103930870230691677351986711027186635648340217172558000699787158395409325616057120782122954632368861884637638021078801194044407273135355605978370906978064829251584:
flag += chr(f)
c = math.ceil(pow(8099471081759297818346776746930009699492536551830435520066277259587650405592285096645355224609375,1/49))
f = math.floor(pow(8099471081759297818346776746930009699492536551830435520066277259587650405592285096645355224609375,1/49))
if pow(c,49) == 8099471081759297818346776746930009699492536551830435520066277259587650405592285096645355224609375:
flag += chr(c)
elif pow(f,49) == 8099471081759297818346776746930009699492536551830435520066277259587650405592285096645355224609375:
flag += chr(f)
c = math.ceil(pow(3322971292068586945001375443001494973926450995421185933704074187872339304713790839588476655936816080094232588371678021671011954902402082880837534931228172997419786114403571789661045242053742017701253343153755537286997423507273197174072265625,1/119))
f = math.floor(pow(3322971292068586945001375443001494973926450995421185933704074187872339304713790839588476655936816080094232588371678021671011954902402082880837534931228172997419786114403571789661045242053742017701253343153755537286997423507273197174072265625,1/119))
if pow(c,119) == 3322971292068586945001375443001494973926450995421185933704074187872339304713790839588476655936816080094232588371678021671011954902402082880837534931228172997419786114403571789661045242053742017701253343153755537286997423507273197174072265625:
flag += chr(c)
elif pow(f,119) == 3322971292068586945001375443001494973926450995421185933704074187872339304713790839588476655936816080094232588371678021671011954902402082880837534931228172997419786114403571789661045242053742017701253343153755537286997423507273197174072265625:
flag += chr(f)
c = math.ceil(pow(54963705560933635277952993342472339302063424186821498970895216297884264422272899437483338452342942688676763803346334166793043,1/65))
f = math.floor(pow(54963705560933635277952993342472339302063424186821498970895216297884264422272899437483338452342942688676763803346334166793043,1/65))
if pow(c,65) == 54963705560933635277952993342472339302063424186821498970895216297884264422272899437483338452342942688676763803346334166793043:
flag += chr(c)
elif pow(f,65) == 54963705560933635277952993342472339302063424186821498970895216297884264422272899437483338452342942688676763803346334166793043:
flag += chr(f)
c = math.ceil(pow(69833729609375,1/7))
f = math.floor(pow(69833729609375,1/7))
if pow(c,7) == 69833729609375:
flag += chr(c)
elif pow(f,7) == 69833729609375:
flag += chr(f)
c = math.ceil(pow(2041105095068520949608886499704812731055009299025497759896142376700593881360024455303422742986506865665182180923408384,1/62))
f = math.floor(pow(2041105095068520949608886499704812731055009299025497759896142376700593881360024455303422742986506865665182180923408384,1/62))
if pow(c,62) == 2041105095068520949608886499704812731055009299025497759896142376700593881360024455303422742986506865665182180923408384:
flag += chr(c)
elif pow(f,62) == 2041105095068520949608886499704812731055009299025497759896142376700593881360024455303422742986506865665182180923408384:
flag += chr(f)
c = math.ceil(pow(273676256864057658169979465205184816551174365773824,1/30))
f = math.floor(pow(273676256864057658169979465205184816551174365773824,1/30))
if pow(c,30) == 273676256864057658169979465205184816551174365773824:
flag += chr(c)
elif pow(f,30) == 273676256864057658169979465205184816551174365773824:
flag += chr(f)
c = math.ceil(pow(7268856709612756787225346499677774289512802614190641289146375658956020349643783943847809231604499765439814143733504245364357174482782079478652842983478488125825833776616491377353668212890625,1/96))
f = math.floor(pow(7268856709612756787225346499677774289512802614190641289146375658956020349643783943847809231604499765439814143733504245364357174482782079478652842983478488125825833776616491377353668212890625,1/96))
if pow(c,96) == 7268856709612756787225346499677774289512802614190641289146375658956020349643783943847809231604499765439814143733504245364357174482782079478652842983478488125825833776616491377353668212890625:
flag += chr(c)
elif pow(f,96) == 7268856709612756787225346499677774289512802614190641289146375658956020349643783943847809231604499765439814143733504245364357174482782079478652842983478488125825833776616491377353668212890625:
flag += chr(f)
c = math.ceil(pow(179553522959388241739349798537554631708787040879135341103130317,1/33))
f = math.floor(pow(179553522959388241739349798537554631708787040879135341103130317,1/33))
if pow(c,33) == 179553522959388241739349798537554631708787040879135341103130317:
flag += chr(c)
elif pow(f,33) == 179553522959388241739349798537554631708787040879135341103130317:
flag += chr(f)
c = math.ceil(pow(3875350235281664831660960617580349420579089722213274181469314776019545119245476575202268153511388261695333783650094408887882026903201446197283128996238502920192,1/93))
f = math.floor(pow(3875350235281664831660960617580349420579089722213274181469314776019545119245476575202268153511388261695333783650094408887882026903201446197283128996238502920192,1/93))
if pow(c,93) == 3875350235281664831660960617580349420579089722213274181469314776019545119245476575202268153511388261695333783650094408887882026903201446197283128996238502920192:
flag += chr(c)
elif pow(f,93) == 3875350235281664831660960617580349420579089722213274181469314776019545119245476575202268153511388261695333783650094408887882026903201446197283128996238502920192:
flag += chr(f)
c = math.ceil(pow(14774235820095264004498794573921235350758313964623449966161598941405119454882112300765336770281511027492774636711848411946648949240160971642785234944,1/77))
f = math.floor(pow(14774235820095264004498794573921235350758313964623449966161598941405119454882112300765336770281511027492774636711848411946648949240160971642785234944,1/77))
if pow(c,77) == 14774235820095264004498794573921235350758313964623449966161598941405119454882112300765336770281511027492774636711848411946648949240160971642785234944:
flag += chr(c)
elif pow(f,77) == 14774235820095264004498794573921235350758313964623449966161598941405119454882112300765336770281511027492774636711848411946648949240160971642785234944:
flag += chr(f)
c = math.ceil(pow(300376071024635284156087943212436719239375530813650294861384068083525481611313395070377347,1/49))
f = math.floor(pow(300376071024635284156087943212436719239375530813650294861384068083525481611313395070377347,1/49))
if pow(c,49) == 300376071024635284156087943212436719239375530813650294861384068083525481611313395070377347:
flag += chr(c)
elif pow(f,49) == 300376071024635284156087943212436719239375530813650294861384068083525481611313395070377347:
flag += chr(f)
c = math.ceil(pow(3848329407410063966449821610084142775235723300303676033059406926388218957230170383178174198012821574964995892819168434088598247206551552,1/73))
f = math.floor(pow(3848329407410063966449821610084142775235723300303676033059406926388218957230170383178174198012821574964995892819168434088598247206551552,1/73))
if pow(c,73) == 3848329407410063966449821610084142775235723300303676033059406926388218957230170383178174198012821574964995892819168434088598247206551552:
flag += chr(c)
elif pow(f,73) == 3848329407410063966449821610084142775235723300303676033059406926388218957230170383178174198012821574964995892819168434088598247206551552:
flag += chr(f)
c = math.ceil(pow(2758369043677505509670918061256140775824469482504900073864113562384680896531951362608474132392098222832377274471582495607435703277587890625,1/70))
f = math.floor(pow(2758369043677505509670918061256140775824469482504900073864113562384680896531951362608474132392098222832377274471582495607435703277587890625,1/70))
if pow(c,70) == 2758369043677505509670918061256140775824469482504900073864113562384680896531951362608474132392098222832377274471582495607435703277587890625:
flag += chr(c)
elif pow(f,70) == 2758369043677505509670918061256140775824469482504900073864113562384680896531951362608474132392098222832377274471582495607435703277587890625:
flag += chr(f)
c = math.ceil(pow(99453466295769991497930584904635827609127067259139567866356325844880559213675005735941118931591926469923175003563264921621620270586414500654150782386695821390343819044273345442678033943156922419726982739685408239580854488870825230336,1/116))
f = math.floor(pow(99453466295769991497930584904635827609127067259139567866356325844880559213675005735941118931591926469923175003563264921621620270586414500654150782386695821390343819044273345442678033943156922419726982739685408239580854488870825230336,1/116))
if pow(c,116) == 99453466295769991497930584904635827609127067259139567866356325844880559213675005735941118931591926469923175003563264921621620270586414500654150782386695821390343819044273345442678033943156922419726982739685408239580854488870825230336:
flag += chr(c)
elif pow(f,116) == 99453466295769991497930584904635827609127067259139567866356325844880559213675005735941118931591926469923175003563264921621620270586414500654150782386695821390343819044273345442678033943156922419726982739685408239580854488870825230336:
flag += chr(f)
c = math.ceil(pow(15154451684337032471180877896715528289578404766894843944101258135758218479588478910835485639300034416425654688319551372515107152957800448,1/81))
f = math.floor(pow(15154451684337032471180877896715528289578404766894843944101258135758218479588478910835485639300034416425654688319551372515107152957800448,1/81))
if pow(c,81) == 15154451684337032471180877896715528289578404766894843944101258135758218479588478910835485639300034416425654688319551372515107152957800448:
flag += chr(c)
elif pow(f,81) == 15154451684337032471180877896715528289578404766894843944101258135758218479588478910835485639300034416425654688319551372515107152957800448:
flag += chr(f)
c = math.ceil(pow(15369922400447804050857106809882557886535430378970772864323994847940248511226147412103978681078289133898040067751936,1/56))
f = math.floor(pow(15369922400447804050857106809882557886535430378970772864323994847940248511226147412103978681078289133898040067751936,1/56))
if pow(c,56) == 15369922400447804050857106809882557886535430378970772864323994847940248511226147412103978681078289133898040067751936:
flag += chr(c)
elif pow(f,56) == 15369922400447804050857106809882557886535430378970772864323994847940248511226147412103978681078289133898040067751936:
flag += chr(f)
c = math.ceil(pow(27738957312183406810942176067977845668792724609375,1/25))
f = math.floor(pow(27738957312183406810942176067977845668792724609375,1/25))
if pow(c,25) == 27738957312183406810942176067977845668792724609375:
flag += chr(c)
elif pow(f,25) == 27738957312183406810942176067977845668792724609375:
flag += chr(f)
c = math.ceil(pow(21368996953242526153442455912292983336597584898817192469907377729843034330770024098455905914306640625,1/52))
f = math.floor(pow(21368996953242526153442455912292983336597584898817192469907377729843034330770024098455905914306640625,1/52))
if pow(c,52) == 21368996953242526153442455912292983336597584898817192469907377729843034330770024098455905914306640625:
flag += chr(c)
elif pow(f,52) == 21368996953242526153442455912292983336597584898817192469907377729843034330770024098455905914306640625:
flag += chr(f)
c = math.ceil(pow(540360087662636962890625,1/12))
f = math.floor(pow(540360087662636962890625,1/12))
if pow(c,12) == 540360087662636962890625:
flag += chr(c)
elif pow(f,12) == 540360087662636962890625:
flag += chr(f)
c = math.ceil(pow(8787599130086200747642212647740199161191191975177869536057,1/33))
f = math.floor(pow(8787599130086200747642212647740199161191191975177869536057,1/33))
if pow(c,33) == 8787599130086200747642212647740199161191191975177869536057:
flag += chr(c)
elif pow(f,33) == 8787599130086200747642212647740199161191191975177869536057:
flag += chr(f)
c = math.ceil(pow(29877972010972253192833071731693415365652202298871181558777888425605465225468139159773124416544534747536455303762752108499734678488854585192233276174396159856142083921750940280030953940651129665938997431598127754379961001,1/110))
f = math.floor(pow(29877972010972253192833071731693415365652202298871181558777888425605465225468139159773124416544534747536455303762752108499734678488854585192233276174396159856142083921750940280030953940651129665938997431598127754379961001,1/110))
if pow(c,110) == 29877972010972253192833071731693415365652202298871181558777888425605465225468139159773124416544534747536455303762752108499734678488854585192233276174396159856142083921750940280030953940651129665938997431598127754379961001:
flag += chr(c)
elif pow(f,110) == 29877972010972253192833071731693415365652202298871181558777888425605465225468139159773124416544534747536455303762752108499734678488854585192233276174396159856142083921750940280030953940651129665938997431598127754379961001:
flag += chr(f)
c = math.ceil(pow(2675784431388739822912479195873535006777575546428377894186361016610060132844501148420511053019793063406241229031720237861254267757764404192017148214449,1/89))
f = math.floor(pow(2675784431388739822912479195873535006777575546428377894186361016610060132844501148420511053019793063406241229031720237861254267757764404192017148214449,1/89))
if pow(c,89) == 2675784431388739822912479195873535006777575546428377894186361016610060132844501148420511053019793063406241229031720237861254267757764404192017148214449:
flag += chr(c)
elif pow(f,89) == 2675784431388739822912479195873535006777575546428377894186361016610060132844501148420511053019793063406241229031720237861254267757764404192017148214449:
flag += chr(f)
c = math.ceil(pow(152765413313863335891876650232228590636250322599805199887699889155122653736313839970609248122516106082640356845647993746493975270361464407009917660338486004656821831684909457479206699008,1/93))
f = math.floor(pow(152765413313863335891876650232228590636250322599805199887699889155122653736313839970609248122516106082640356845647993746493975270361464407009917660338486004656821831684909457479206699008,1/93))
if pow(c,93) == 152765413313863335891876650232228590636250322599805199887699889155122653736313839970609248122516106082640356845647993746493975270361464407009917660338486004656821831684909457479206699008:
flag += chr(c)
elif pow(f,93) == 152765413313863335891876650232228590636250322599805199887699889155122653736313839970609248122516106082640356845647993746493975270361464407009917660338486004656821831684909457479206699008:
flag += chr(f)
c = math.ceil(pow(2328306436538696289062500000000000000000000000000000000,1/32))
f = math.floor(pow(2328306436538696289062500000000000000000000000000000000,1/32))
if pow(c,32) == 2328306436538696289062500000000000000000000000000000000:
flag += chr(c)
elif pow(f,32) == 2328306436538696289062500000000000000000000000000000000:
flag += chr(f)
c = math.ceil(pow(5961195753983995303484560285190290682733463583595335304528058156325433562658524929707243203762512477786151879240818694539888378801,1/76))
f = math.floor(pow(5961195753983995303484560285190290682733463583595335304528058156325433562658524929707243203762512477786151879240818694539888378801,1/76))
if pow(c,76) == 5961195753983995303484560285190290682733463583595335304528058156325433562658524929707243203762512477786151879240818694539888378801:
flag += chr(c)
elif pow(f,76) == 5961195753983995303484560285190290682733463583595335304528058156325433562658524929707243203762512477786151879240818694539888378801:
flag += chr(f)
c = math.ceil(pow(12123322046368026766845555284174734862143220839547136182936923801262519994579258895086695136012612784629964133807779629268912272729929064102563562351571134115669020914817314628448682040928343513644325889562377257420914618199293475950013761897362635096064,1/126))
f = math.floor(pow(12123322046368026766845555284174734862143220839547136182936923801262519994579258895086695136012612784629964133807779629268912272729929064102563562351571134115669020914817314628448682040928343513644325889562377257420914618199293475950013761897362635096064,1/126))
if pow(c,126) == 12123322046368026766845555284174734862143220839547136182936923801262519994579258895086695136012612784629964133807779629268912272729929064102563562351571134115669020914817314628448682040928343513644325889562377257420914618199293475950013761897362635096064:
flag += chr(c)
elif pow(f,126) == 12123322046368026766845555284174734862143220839547136182936923801262519994579258895086695136012612784629964133807779629268912272729929064102563562351571134115669020914817314628448682040928343513644325889562377257420914618199293475950013761897362635096064:
flag += chr(f)
c = math.ceil(pow(5177422397434133943104921319391337172187409135061853455150624631814434849075662045692827869398608558750724406518789785253043723750457037193,1/79))
f = math.floor(pow(5177422397434133943104921319391337172187409135061853455150624631814434849075662045692827869398608558750724406518789785253043723750457037193,1/79))
if pow(c,79) == 5177422397434133943104921319391337172187409135061853455150624631814434849075662045692827869398608558750724406518789785253043723750457037193:
flag += chr(c)
elif pow(f,79) == 5177422397434133943104921319391337172187409135061853455150624631814434849075662045692827869398608558750724406518789785253043723750457037193:
flag += chr(f)
c = math.ceil(pow(1624282775882015502895375715731547869967116063808701172227878605593265086649151663316740754595701943186985338276960573341825325659163921089779652068912755058200778559830844842804901645227676036378209809395699655072884990216798561935007683132425881922245025634765625,1/126))
f = math.floor(pow(1624282775882015502895375715731547869967116063808701172227878605593265086649151663316740754595701943186985338276960573341825325659163921089779652068912755058200778559830844842804901645227676036378209809395699655072884990216798561935007683132425881922245025634765625,1/126))
if pow(c,126) == 1624282775882015502895375715731547869967116063808701172227878605593265086649151663316740754595701943186985338276960573341825325659163921089779652068912755058200778559830844842804901645227676036378209809395699655072884990216798561935007683132425881922245025634765625:
flag += chr(c)
elif pow(f,126) == 1624282775882015502895375715731547869967116063808701172227878605593265086649151663316740754595701943186985338276960573341825325659163921089779652068912755058200778559830844842804901645227676036378209809395699655072884990216798561935007683132425881922245025634765625:
flag += chr(f)
print(flag)
# ictf{pYthOn_obFuScAtION_iS_N0_M4TCH_f0r_U_9e1b23f9}snailchecker(Rev)
Optimize me, if you dare. Or not. It might run if you try hard enough.
問題バイナリとして以下のコードが与えられます。
#!/usr/bin/env python3
def enc(b):
a = [n for n in range(b[0]*2**24+b[1]*2**16+b[2]*2**8+b[3]+1)][1:]
c,i = 0,0
while len([n for n in a if n != 0]) > 1:
i%=len(a)
if (a[i]!=0 and c==1):
a[i],c=0,0
if (a[i] != 0):
c+=1
i += 1
return sum(a)
print(r"""
.----. @ @
/ .-"-.`. \v/
| | '\ \ \_/ )
,-\ `-.' /.' /
'---`----'----'
""")
flag = input("Enter flag here: ").encode()
out = b''
for n in [flag[i:i+4] for i in range(0,len(flag),4)]:
out += bytes.fromhex(hex(enc(n[::-1]))[2:].zfill(8))
if out == b'L\xe8\xc6\xd2f\xde\xd4\xf6j\xd0\xe0\xcad\xe0\xbe\xe6J\xd8\xc4\xde`\xe6\xbe\xda>\xc8\xca\xca^\xde\xde\xc4^\xde\xde\xdez\xe8\xe6\xde':
print("[*] Flag correct!")
else:
print("[*] Flag incorrect.")enc 関数は、k=2 の場合の Josephus Problem の実行スクリプトのようです。
ただし、初期配列として 4 文字(32 bit) 分の bit 列を使用しているために、単純に実行しようとしても演算がいつまでも終わりません。
Flag を取得するためには enc 関数の出力結果がバイト文字列 out に一致する入力値を特定する必要がありますが、計算時間の都合でブルートフォースを使用することができません。
そこでいくつか試行錯誤してみたところ、最終的な enc 関数の出力結果を n とすると、k=2 の時の Josephus Problem の最初の値 x は、2x - l - 1 = n(l は、n の bit 数を m とした場合に 2**m になる値)の式で表現できることがわかりました。
そのため、以下の Solver で Flag を取得できました。
from Crypto.Util.number import long_to_bytes, bytes_to_long
import math
out = b'L\xe8\xc6\xd2f\xde\xd4\xf6j\xd0\xe0\xcad\xe0\xbe\xe6J\xd8\xc4\xde`\xe6\xbe\xda>\xc8\xca\xca^\xde\xde\xc4^\xde\xde\xdez\xe8\xe6\xde'
# 2x - l - 1 = n
m = 31
l = 2147483648
flag = ""
for i in range(4,len(out)+1,4):
n = bytes_to_long(out[i-4:i])
x = math.ceil((n + l + 1) / 2) - 1
w = bin(x)[2:].zfill(32)
flag += chr(int("0b"+w[24:],2))
flag += chr(int("0b"+w[16:24],2))
flag += chr(int("0b"+w[8:16],2))
flag += chr(int("0b"+w[:8],2))
print(flag)
# ictf{josephus_problem_speed_boooooooost}scrambled(Rev)
The flag is all jumbled up… or is it?
入力値の文字列に複雑な処理をかけて順番を入れ替えた後に、さらに複雑な変換処理をかけて最終的な結果がハードコードされた key と一致するかを検証するバイナリでした。
複雑な処理を静的解析で読みぬくのが無理ゲーだったので gdb の自動化で Flag を取得しました。
以下の Solver で、文字列の並び替え順序を特定した上で、1 文字ずつ Flag を特定することができました。
# gdb -x solver.py
import gdb
key = r"oynuuvefmqjn1qlfnw$j*vmx1dv"
orig = r"ictf{ABCDEFGHIJKLMNOPQRSTU}"
shuf = r"i}UTSRQPONMLKJIHGFEDCBA{ftc"
arr = [i for i in range(27)]
for i,c in enumerate(shuf):
arr[i] = orig.find(c)
BINDIR = "/home/ubuntu/Hacking/CTF/2023/ImaginaryCTF/Rev/scrambled"
BIN = "main"
INPUT = "./in.txt"
OUT = "./out.txt"
BREAK = "0x404c14"
gdb.execute('file {}/{}'.format(BINDIR, BIN))
gdb.execute('b *{}'.format(BREAK))
d = [{} for i in range(0x1b)]
flag = ['i', 'c', 't', 'f', '{', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'l', '}']
for i in range(0x1b):
with open("in.txt", "w") as f:
f.write("".join(flag))
gdb.execute('run < {}'.format(INPUT, OUT))
inf = gdb.inferiors()[0]
mem = inf.read_memory(0x5fb400, 0x1b)
base = mem.tobytes().decode()
if base[i] == key[i]:
print("".join(flag))
continue
for c in range(0x21,0x7f):
flag[arr[i]] = chr(c)
with open("in.txt", "w") as f:
f.write("".join(flag))
gdb.execute('run < {}'.format(INPUT, OUT))
inf = gdb.inferiors()[0]
mem = inf.read_memory(0x5fb400, 0x1b)
base = mem.tobytes().decode()
if base[i] == key[i]:
print("".join(flag))
breakSheepish(Rev)
Mary had a flagchecker, its fleece was white as snow.
問題バイナリとして以下のようなネストされた lamba 関数のスクリプトが与えられます。
また難読化 Python 。。。
print((((lambda _____________:((lambda ___:_____________(lambda _______:___(___)(_______)))(lambda ___:_____________(lambda _______:___(___)(_______)))))(lambda _____________:lambda ___________:lambda ______:(lambda ____:(lambda _:_(lambda __________:lambda _____:__________))(____))(___________)(lambda _:(lambda __________:lambda _____:__________))(lambda _:(lambda __________:lambda _____:__________(_____)(lambda __________:lambda _____:_____))((lambda __________:lambda _____:(lambda __________:lambda _____:__________(_____)(lambda __________:lambda _____:_____))((lambda __________:lambda _____:(lambda __________:__________(lambda _:(lambda __________:lambda _____:_____))(lambda __________:lambda _____:__________))((lambda __________:lambda _____:_____(lambda __:lambda _____________:lambda ___:__(lambda ____________:lambda _________:_________(____________(_____________)))(lambda _:___)(lambda __________:__________))(__________))(_____)(__________)))(__________)(_____))((lambda __________:lambda _____:(lambda __________:__________(lambda _:(lambda __________:lambda _____:_____))(lambda __________:lambda _____:__________))((lambda __________:lambda _____:_____(lambda __:lambda _____________:lambda ___:__(lambda ____________:lambda _________:_________(____________(_____________)))(lambda _:___)(lambda __________:__________))(__________))(__________)(_____)))(__________)(_____)))((lambda ____:(lambda _:_(lambda __________:lambda _____:__________))((lambda _:_(lambda __________:lambda _____:_____))(____)))(___________))((lambda ____:(lambda _:_(lambda __________:lambda _____:__________))((lambda _:_(lambda __________:lambda _____:_____))(____)))(______)))(_____________((lambda ____:(lambda _:_(lambda __________:lambda _____:_____))((lambda _:_(lambda __________:lambda _____:_____))(____)))(___________))((lambda ____:(lambda _:_(lambda __________:lambda _____:_____))((lambda _:_(lambda __________:lambda _____:_____))(____)))(______))))(lambda __________:lambda _____:__________)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:__________)(lambda __________:lambda _____:__________))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:__________(__________(__________(_____)))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:_____)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:_____)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:_____)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:__________(__________(_____)))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))(lambda __________:lambda _____:_____)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:__________(__________(__________(_____)))))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:__________(__________(__________(_____)))))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))(lambda __________:lambda _____:__________(__________(_____))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:__________(__________(__________(_____)))))(lambda __________:lambda _____:_____)))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____)))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:__________(lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(_____)))((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:lambda ______________:__________(_____(______________)))(lambda __________:lambda _____:__________(__________(_____)))(lambda __________:lambda _____:__________(__________(__________(_____))))))((lambda __________:lambda _____:_____(__________))(lambda __________:lambda _____:__________(__________(__________(_____))))(lambda __________:lambda _____:__________(__________(_____))))))(((lambda _____________:((lambda ___:_____________(lambda _______:___(___)(_______)))(lambda ___:_____________(lambda _______:___(___)(_______)))))(lambda _____________:(lambda ________:(((lambda ____:lambda ___:(lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:_____)((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(___)(____)))(_____________(________[1:]))(((lambda _____________:((lambda ___:_____________(lambda _______:___(___)(_______)))(lambda ___:_____________(lambda _______:___(___)(_______)))))(lambda _____________:(lambda __:(((lambda __:lambda __________:lambda _____:__________(__(__________)(_____)))(_____________(__-1))) if __ else (lambda __________:lambda _____:_____)))))(________[0]))) if len(________) else ((lambda __________:lambda _____:lambda ______________:______________(__________)(_____))(lambda __________:lambda _____:__________)(lambda __________:lambda _____:__________))))))(input(">>> ").encode())))("Well done!")("Try again..."))とりあえず、変数替わりに使用されているアンダーバーを別の記号に置き換えてみました。
print((((lambda b:((lambda l:b(lambda h:l(l)(h)))(lambda l:b(lambda h:l(l)(h)))))(lambda b:lambda d:lambda i:(lambda k:(lambda n:n(lambda e:lambda j:e))(k))(d)(lambda n:(lambda e:lambda j:e))(lambda n:(lambda e:lambda j:e(j)(lambda e:lambda j:j))((lambda e:lambda j:(lambda e:lambda j:e(j)(lambda e:lambda j:j))((lambda e:lambda j:(lambda e:e(lambda n:(lambda e:lambda j:j))(lambda e:lambda j:e))((lambda e:lambda j:j(lambda m:lambda b:lambda l:m(lambda c:lambda f:f(c(b)))(lambda n:l)(lambda e:e))(e))(j)(e)))(e)(j))((lambda e:lambda j:(lambda e:e(lambda n:(lambda e:lambda j:j))(lambda e:lambda j:e))((lambda e:lambda j:j(lambda m:lambda b:lambda l:m(lambda c:lambda f:f(c(b)))(lambda n:l)(lambda e:e))(e))(e)(j)))(e)(j)))((lambda k:(lambda n:n(lambda e:lambda j:e))((lambda n:n(lambda e:lambda j:j))(k)))(d))((lambda k:(lambda n:n(lambda e:lambda j:e))((lambda n:n(lambda e:lambda j:j))(k)))(i)))(b((lambda k:(lambda n:n(lambda e:lambda j:j))((lambda n:n(lambda e:lambda j:j))(k)))(d))((lambda k:(lambda n:n(lambda e:lambda j:j))((lambda n:n(lambda e:lambda j:j))(k)))(i))))(lambda e:lambda j:e)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))((lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:e)(lambda e:lambda j:e))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))((lambda m:lambda e:lambda j:e(m(e)(j)))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:e(e(e(j)))))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:j)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:j)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:j)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:e(e(j)))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))))(lambda e:lambda j:j)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:e(e(e(j)))))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:e(e(e(j)))))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j)))))(lambda e:lambda j:e(e(j))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:e(e(e(j)))))(lambda e:lambda j:j)))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda m:lambda e:lambda j:e(m(e)(j)))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda m:lambda e:lambda j:e(m(e)(j)))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j)))))))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j)))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:e(lambda m:lambda e:lambda j:e(m(e)(j)))(j))((lambda e:lambda j:lambda a:e(j(a)))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(j)))((lambda m:lambda e:lambda j:e(m(e)(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:lambda a:e(j(a)))(lambda e:lambda j:e(e(j)))(lambda e:lambda j:e(e(e(j))))))((lambda e:lambda j:j(e))(lambda e:lambda j:e(e(e(j))))(lambda e:lambda j:e(e(j))))))(((lambda b:((lambda l:b(lambda h:l(l)(h)))(lambda l:b(lambda h:l(l)(h)))))(lambda b:(lambda g:(((lambda k:lambda l:(lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:j)((lambda e:lambda j:lambda a:a(e)(j))(l)(k)))(b(g[1:]))(((lambda b:((lambda l:b(lambda h:l(l)(h)))(lambda l:b(lambda h:l(l)(h)))))(lambda b:(lambda m:(((lambda m:lambda e:lambda j:e(m(e)(j)))(b(m-1))) if m else (lambda e:lambda j:j)))))(g[0]))) if len(g) else ((lambda e:lambda j:lambda a:a(e)(j))(lambda e:lambda j:e)(lambda e:lambda j:e))))))(input(">>> ").encode())))("Well done!")("Try again..."))だいぶ読みやすくなったコードを整形しながら読んでみると、入力値を 1 文字ずつ検証し、間違った文字が見つかったらすぐにエラーを返す実装であることがわかりました。
そのため、このコードを利用して先頭から 1 文字ずつ入力値を増やしていくことで、ブルートフォースで Flag を取得できました。
flag = 'ictf{'
while flag[-1] != '}':
for c in range(32, 128):
tmp = flag + chr(c)
try:
// 問題コード
except TypeError:
flag = tmp
print(flag)
breakまとめ
難読化系や VM 系は辛いですね。
バイナリを解析していきたい。