2026FIC初赛（全流程wp）

from math import isqrt

n = 57751892008149574447756694613209346511056045951970458143905594411398554113111623746466692172544473909892773600617029641656248235151775166339061269972238018743173330948084699695182438765935110193323089354031112350869626121317836465551360104372140181097747761558797918522051881262043738603183528521379831286761
e = 65537

a = isqrt(n) + 1
while True:
    b = isqrt(a*a - n)
    if b*b == a*a - n:
        p, q = a-b, a+b
        break
    a += 1

d = pow(e, -1, (p-1)*(q-1))
print(d)

vc密码：9ed2@99y8.com.cn

*(_QWORD *)v4 = 0xAFE886AFE5A3A7E8LL;
v5 = 0xBBB3E7BBB3E720B7LL;
qmemcpy(v6, "beijixin996@tutanota.com", sizeof(v6));

for (i = 0; i < v7; i++)
{
    offset = v2 + 12 + 4 * i;
    value = big_endian_u32(data[offset:offset+4]);
    value = value + _c;
    write_big_endian_u32(offset, value);
}

#!/usr/bin/env python3
import sys
import struct
from pathlib import Path

KEY = 0x539  # 1337


def decrypt_one(path: Path, out_path: Path | None = None) -> bool:
    data = bytearray(path.read_bytes())

    idx = data.find(b"stco")
    if idx == -1:
        print(f"[-] {path}: not found stco")
        return False

    if len(data) < idx + 12:
        print(f"[-] {path}: invalid stco structure")
        return False

    entry_count = struct.unpack(">I", data[idx + 8:idx + 12])[0]

    table_start = idx + 12
    table_end = table_start + entry_count * 4

    if len(data) < table_end:
        print(f"[-] {path}: stco table out of range, entry_count={entry_count}")
        return False

    print(f"[+] {path}: stco at 0x{idx:x}, entry_count={entry_count}")

    for i in range(entry_count):
        pos = table_start + i * 4
        old = struct.unpack(">I", data[pos:pos + 4])[0]

        if old < KEY:
            print(f"[!] {path}: offset too small at entry {i}, old={old}, skip")
            continue

        new = old - KEY
        data[pos:pos + 4] = struct.pack(">I", new)

    if out_path is None:
        out_path = path.with_name(path.stem + "_decrypted" + path.suffix)

    out_path.write_bytes(data)
    print(f"[+] saved: {out_path}")
    return True


def main():
    if len(sys.argv) < 2:
        print("Usage:")
        print("  python decrypt_mp4.py encrypted.mp4")
        print("  python decrypt_mp4.py *.mp4")
        return

    for name in sys.argv[1:]:
        path = Path(name)
        if not path.is_file():
            print(f"[-] not file: {path}")
            continue
        decrypt_one(path)


if __name__ == "__main__":
    main()

encoded = (((x + 100) ^ 85) * 1000) + ((y + 100) ^ 85)

x = ((encoded // 1000) ^ 85) - 100
y = ((encoded % 1000) ^ 85) - 100

#!/usr/bin/env python3
# -*- coding: utf-8 -*-

import re
import sys
import struct
from pathlib import Path
from collections import defaultdict

KEY = 85
BASE = 100
STEP = 25
DOT = 4

FONT = {
    '0': [[1,0],[2,0],[0,1],[3,1],[0,2],[3,2],[0,3],[3,3],[1,4],[2,4]],
    '1': [[2,0],[1,1],[2,1],[2,2],[2,3],[1,4],[2,4],[3,4]],
    '2': [[1,0],[2,0],[0,1],[3,1],[2,2],[1,3],[0,4],[1,4],[2,4],[3,4]],
    '3': [[0,0],[1,0],[2,0],[3,1],[1,2],[2,2],[3,3],[0,4],[1,4],[2,4]],
    '4': [[3,0],[2,1],[3,1],[1,2],[3,2],[0,3],[1,3],[2,3],[3,3],[4,3],[3,4]],
    '5': [[0,0],[1,0],[2,0],[0,1],[0,2],[1,2],[2,2],[3,3],[0,4],[1,4],[2,4]],
    '6': [[1,0],[2,0],[0,1],[0,2],[1,2],[2,2],[0,3],[3,3],[1,4],[2,4]],
    '7': [[0,0],[1,0],[2,0],[3,0],[3,1],[2,2],[1,3],[1,4]],
    '8': [[1,0],[2,0],[0,1],[3,1],[1,2],[2,2],[0,3],[3,3],[1,4],[2,4]],
    '9': [[1,0],[2,0],[0,1],[3,1],[1,2],[2,2],[3,2],[3,3],[2,4]],

    'a': [[1,2],[2,2],[3,2],[0,3],[3,3],[1,4],[2,4],[3,4]],
    'b': [[0,0],[0,1],[0,2],[1,2],[2,2],[0,3],[3,3],[0,4],[1,4],[2,4]],
    'c': [[1,0],[2,0],[3,0],[0,1],[0,2],[0,3],[1,4],[2,4],[3,4]],
    'd': [[3,0],[3,1],[1,2],[2,2],[3,2],[0,3],[3,3],[1,4],[2,4],[3,4]],
    'e': [[1,0],[2,0],[0,1],[0,2],[1,2],[2,2],[0,3],[1,4],[2,4]],
    'f': [[1,0],[2,0],[1,1],[0,2],[1,2],[2,2],[1,3],[1,4]],
    'g': [[1,2],[2,2],[3,2],[0,3],[3,3],[1,4],[2,4],[3,4],[3,5],[1,6],[2,6]],
    'h': [[0,0],[0,1],[0,2],[1,2],[2,2],[0,3],[3,3],[0,4],[3,4]],
    'i': [[1,0],[1,2],[1,3],[1,4]],
    'j': [[2,0],[2,2],[2,3],[2,4],[2,5],[1,6],[0,5]],
    'k': [[0,0],[0,1],[0,2],[0,3],[0,4],[2,2],[1,3],[3,3],[2,4]],
    'l': [[1,0],[1,1],[1,2],[1,3],[1,4]],
    'm': [[0,1],[1,1],[2,1],[3,1],[4,1],[0,2],[2,2],[4,2],[0,3],[4,3]],
    'n': [[0,1],[1,0],[2,0],[0,2],[3,2],[0,3],[3,3],[0,4],[3,4]],
    'o': [[1,1],[2,1],[0,2],[3,2],[1,3],[2,3]],
    'p': [[0,2],[1,2],[2,2],[0,3],[3,3],[0,4],[1,4],[2,4],[0,5],[0,6]],
    'q': [[1,2],[2,2],[0,3],[3,2],[3,3],[3,4],[3,5],[4,5]],
    'r': [[0,2],[0,3],[0,4],[1,2],[2,2]],
    's': [[1,0],[2,0],[3,0],[0,1],[1,2],[2,2],[3,3],[0,4],[1,4],[2,4]],
    't': [[1,0],[1,1],[1,2],[1,3],[1,4],[0,2],[2,2]],
    'u': [[0,2],[0,3],[3,2],[3,3],[1,4],[2,4],[3,4]],
    'v': [[0,0],[4,0],[1,2],[3,2],[2,4]],
    'w': [[0,2],[0,3],[1,4],[2,3],[3,4],[4,2],[4,3]],
    'x': [[0,0],[4,0],[1,1],[3,1],[2,2],[1,3],[3,3],[0,4],[4,4]],
    'y': [[0,0],[4,0],[1,1],[3,1],[2,2],[2,3],[1,4]],
    'z': [[0,0],[1,0],[2,0],[3,0],[2,1],[1,2],[0,3],[0,4],[1,4],[2,4],[3,4]],

    ':': [[1,1],[1,3]],
    '@': [[1,0],[2,0],[0,1],[3,1],[0,2],[2,2],[3,2],[0,3],[1,4],[2,4]],
    '.': [[1,4]],
}

REV_FONT = {
    tuple(sorted(map(tuple, points))): ch
    for ch, points in FONT.items()
}


def read_ole_workbook(path: Path) -> bytes:
    data = path.read_bytes()

    if data[:8] != bytes.fromhex("d0 cf 11 e0 a1 b1 1a e1"):
        raise ValueError("不是 OLE/CFB 格式，可能不是 .et/.xls 文件")

    END = 0xFFFFFFFE
    FREE = 0xFFFFFFFF

    header = data[:512]
    sector_size = 1 << struct.unpack_from("<H", header, 30)[0]
    first_dir_sector = struct.unpack_from("<I", header, 48)[0]

    fat_sectors = list(struct.unpack_from("<109I", header, 76))
    fat_sectors = [x for x in fat_sectors if x not in (FREE, END)]

    fat = []
    for sec in fat_sectors:
        off = 512 + sec * sector_size
        fat.extend(struct.unpack_from("<%dI" % (sector_size // 4), data, off))

    def read_chain(start_sector: int) -> bytes:
        out = bytearray()
        seen = set()
        sec = start_sector

        while sec not in (END, FREE) and sec < len(fat) and sec not in seen:
            seen.add(sec)
            off = 512 + sec * sector_size
            out.extend(data[off:off + sector_size])
            sec = fat[sec]

        return bytes(out)

    directory = read_chain(first_dir_sector)

    for i in range(0, len(directory), 128):
        entry = directory[i:i + 128]
        if len(entry) < 128:
            continue

        name_len = struct.unpack_from("<H", entry, 64)[0]
        if name_len < 2:
            continue

        name = entry[:name_len - 2].decode("utf-16le", errors="ignore")
        obj_type = entry[66]
        start_sector = struct.unpack_from("<I", entry, 116)[0]
        size = struct.unpack_from("<Q", entry, 120)[0]

        if obj_type == 2 and name in ("Workbook", "Book"):
            return read_chain(start_sector)[:size]

    raise ValueError("没有找到 Workbook/Book 流")


def extract_encoded_numbers(blob: bytes):
    """
    WPS .et 里 Shape.AlternativeText 被保存成 UTF-16LE 数字字符串。
    例如：49049、61057、377037 这种。
    """
    nums = []

    for m in re.finditer(rb"(?:[0-9]\x00){4,9}", blob):
        try:
            s = m.group().decode("utf-16le")
            nums.append(int(s))
        except Exception:
            pass

    return nums


def decode_number(n: int):
    left = n // 1000
    right = n % 1000

    x = (left ^ KEY) - BASE
    y = (right ^ KEY) - BASE

    return x, y


def recover_text(numbers):
    chars = defaultdict(set)

    for n in numbers:
        x, y = decode_number(n)

        if x < 0 or y < 0:
            continue

        if y % DOT != 0:
            continue

        char_index = x // STEP
        local_x = x - char_index * STEP

        if local_x % DOT != 0:
            continue

        px = local_x // DOT
        py = y // DOT

        if 0 <= px <= 5 and 0 <= py <= 7:
            chars[char_index].add((px, py))

    result = []

    for idx in sorted(chars):
        glyph = tuple(sorted(chars[idx]))
        ch = REV_FONT.get(glyph, "?")
        result.append(ch)

    return "".join(result), chars


def render(chars):
    if not chars:
        return

    max_idx = max(chars)
    max_y = max(py for pts in chars.values() for _, py in pts)

    width = (max_idx + 1) * 6
    height = max_y + 1

    canvas = [[" " for _ in range(width)] for _ in range(height)]

    for idx, pts in chars.items():
        for px, py in pts:
            canvas[py][idx * 6 + px] = "#"

    print("\n[+] 点阵预览：")
    for row in canvas:
        print("".join(row).rstrip())


def main():
    if len(sys.argv) != 2:
        print("Usage:")
        print("  python decrypt_et_stego.py 保险箱的秘密.et")
        sys.exit(1)

    path = Path(sys.argv[1])

    if not path.exists():
        print(f"[-] 文件不存在: {path}")
        sys.exit(1)

    blob = read_ole_workbook(path)
    numbers = extract_encoded_numbers(blob)

    print(f"[+] 提取到数字数量: {len(numbers)}")

    if not numbers:
        print("[-] 没有提取到 AlternativeText 数字")
        sys.exit(1)

    text, chars = recover_text(numbers)

    print(f"[+] 解密结果: {text}")
    render(chars)


if __name__ == "__main__":
    main()

git clone git@github.com:dji-sdk/FlightRecordParsingLib.git

#!/usr/bin/env python3
"""
Parse DJI FlightRecord *.txt files without relying on the `djirecord` CLI.

This script uses the pydjirecord Python library directly. That means:
1. You do not need the `djirecord` command in PATH.
2. Header/details JSON works without a DJI API key.
3. Frame exports (GeoJSON / CSV) need a DJI API key for v13/v14 logs.
"""

from __future__ import annotations

import argparse
import csv
import dataclasses
import json
import math
import os
import subprocess
import sys
from datetime import date, datetime, time
from enum import Enum
from pathlib import Path
from typing import Any, Iterable


def parse_args() -> argparse.Namespace:
    parser = argparse.ArgumentParser(
        description="Parse DJI FlightRecord files and export details JSON."
    )
    parser.add_argument(
        "inputs",
        nargs="+",
        help="One or more DJI FlightRecord *.txt files.",
    )
    parser.add_argument(
        "-o",
        "--out-dir",
        default=".",
        help="Output directory. Default: current directory.",
    )
    parser.add_argument(
        "--api-key",
        default=None,
        help="DJI API key used to decrypt v13/v14 frame data.",
    )
    parser.add_argument(
        "--no-verify",
        action="store_true",
        help="Disable TLS verification when fetching DJI keychains.",
    )
    parser.add_argument(
        "--geojson",
        action="store_true",
        help="Also export a GeoJSON track when frame data is available.",
    )
    parser.add_argument(
        "--csv",
        action="store_true",
        help="Also export a CSV track when frame data is available.",
    )
    parser.add_argument(
        "--print",
        dest="print_summary",
        action="store_true",
        help="Print parsed summary to stdout.",
    )
    parser.add_argument(
        "--install",
        action="store_true",
        help="If pydjirecord is missing, try to install it with pip first.",
    )
    return parser.parse_args()


def ensure_pydjirecord(auto_install: bool) -> tuple[Any, Any]:
    try:
        from pydjirecord import DJILog  # type: ignore
        from pydjirecord.frame.details import FrameDetails  # type: ignore

        return DJILog, FrameDetails
    except ImportError:
        if auto_install:
            cmd = [sys.executable, "-m", "pip", "install", "pydjirecord"]
            subprocess.run(cmd, check=True)
            from pydjirecord import DJILog  # type: ignore
            from pydjirecord.frame.details import FrameDetails  # type: ignore

            return DJILog, FrameDetails

        raise SystemExit(
            "Missing dependency: pydjirecord\n"
            "Install one of the following and rerun:\n"
            f"  {sys.executable} -m pip install pydjirecord\n"
            "If your analysis machine is offline, download the wheel on another machine\n"
            "and then install it locally with:\n"
            f"  {sys.executable} -m pip install .\\pydjirecord-*.whl\n"
        )


def to_jsonable(value: Any) -> Any:
    if dataclasses.is_dataclass(value):
        return {k: to_jsonable(v) for k, v in dataclasses.asdict(value).items()}

    if isinstance(value, (datetime, date, time)):
        return value.isoformat()

    if isinstance(value, Enum):
        return value.name

    if isinstance(value, Path):
        return str(value)

    if isinstance(value, dict):
        return {str(k): to_jsonable(v) for k, v in value.items()}

    if isinstance(value, (list, tuple, set)):
        return [to_jsonable(v) for v in value]

    if hasattr(value, "__dict__"):
        return {
            k: to_jsonable(v)
            for k, v in vars(value).items()
            if not k.startswith("_")
        }

    return value


def valid_coordinate(lat: Any, lon: Any) -> bool:
    try:
        lat_f = float(lat)
        lon_f = float(lon)
    except (TypeError, ValueError):
        return False

    if math.isnan(lat_f) or math.isnan(lon_f):
        return False

    if lat_f == 0.0 and lon_f == 0.0:
        return False

    return -90.0 <= lat_f <= 90.0 and -180.0 <= lon_f <= 180.0


def iter_frame_rows(frames: Iterable[Any]) -> list[dict[str, Any]]:
    rows: list[dict[str, Any]] = []
    for idx, frame in enumerate(frames):
        osd = getattr(frame, "osd", None)
        if osd is None:
            continue

        lat = getattr(osd, "latitude", None)
        lon = getattr(osd, "longitude", None)
        if not valid_coordinate(lat, lon):
            continue

        rows.append(
            {
                "index": idx,
                "latitude": float(lat),
                "longitude": float(lon),
                "altitude": getattr(osd, "altitude", None),
                "height": getattr(osd, "height", None),
                "x_speed": getattr(osd, "x_speed", None),
                "y_speed": getattr(osd, "y_speed", None),
                "z_speed": getattr(osd, "z_speed", None),
                "cumulative_distance": getattr(osd, "cumulative_distance", None),
            }
        )
    return rows


def export_geojson(path: Path, rows: list[dict[str, Any]]) -> None:
    coordinates = []
    for row in rows:
        lon = row["longitude"]
        lat = row["latitude"]
        alt = row["altitude"]
        if alt is None:
            coordinates.append([lon, lat])
        else:
            coordinates.append([lon, lat, alt])

    data = {
        "type": "FeatureCollection",
        "features": [
            {
                "type": "Feature",
                "properties": {"point_count": len(coordinates)},
                "geometry": {
                    "type": "LineString",
                    "coordinates": coordinates,
                },
            }
        ],
    }
    path.write_text(json.dumps(data, ensure_ascii=False, indent=2), encoding="utf-8")


def export_csv(path: Path, rows: list[dict[str, Any]]) -> None:
    fieldnames = [
        "index",
        "latitude",
        "longitude",
        "altitude",
        "height",
        "x_speed",
        "y_speed",
        "z_speed",
        "cumulative_distance",
    ]
    with path.open("w", encoding="utf-8", newline="") as f:
        writer = csv.DictWriter(f, fieldnames=fieldnames)
        writer.writeheader()
        writer.writerows(rows)


def main() -> int:
    args = parse_args()
    out_dir = Path(args.out_dir)
    out_dir.mkdir(parents=True, exist_ok=True)

    api_key = args.api_key or os.environ.get("DJI_API_KEY")
    DJILog, FrameDetails = ensure_pydjirecord(args.install)

    for item in args.inputs:
        input_path = Path(item)
        if not input_path.is_file():
            print(f"[!] File not found: {input_path}", file=sys.stderr)
            continue

        data = input_path.read_bytes()
        log = DJILog.from_bytes(data)

        result: dict[str, Any] = {
            "version": log.version,
            "details": to_jsonable(log.details),
        }

        frames: list[Any] = []
        frame_rows: list[dict[str, Any]] = []

        if log.version < 13 or api_key:
            try:
                keychains = None
                if log.version >= 13:
                    keychains = log.fetch_keychains(api_key, verify=not args.no_verify)
                frames = list(log.frames(keychains))
                frame_rows = iter_frame_rows(frames)
                result["frame_count"] = len(frames)
                if frames:
                    result["details_from_frames"] = to_jsonable(
                        FrameDetails.from_details(log.details, frames)
                    )
            except Exception as exc:  # pragma: no cover - backend/runtime dependent
                result["frame_error"] = str(exc)
        else:
            result["frame_warning"] = (
                "Log version >= 13 detected. Header/details are exported, but frame data "
                "requires a DJI API key. Re-run with --api-key KEY or set DJI_API_KEY."
            )

        json_path = out_dir / f"{input_path.stem}.json"
        json_path.write_text(
            json.dumps(result, ensure_ascii=False, indent=2),
            encoding="utf-8",
        )

        if args.geojson and frame_rows:
            export_geojson(out_dir / f"{input_path.stem}.geojson", frame_rows)

        if args.csv and frame_rows:
            export_csv(out_dir / f"{input_path.stem}.csv", frame_rows)

        if args.print_summary:
            print(f"=== {input_path.name} ===")
            print(json.dumps(result, ensure_ascii=False, indent=2))

    return 0


if __name__ == "__main__":
    raise SystemExit(main())

CREATE TABLE IF NOT EXISTS user_collection (
    _id INTEGER PRIMARY KEY AUTOINCREMENT,
    device_id TEXT,
    imei TEXT,
    phone_number TEXT,
    contacts_data TEXT,
    sms_data TEXT,
    location_lat REAL,
    location_lng REAL,
    collect_time INTEGER DEFAULT (strftime('%s','now') * 1000)
)

public static String m311s(Context context) throws NoSuchPaddingException, NoSuchAlgorithmException, IOException, InvalidKeyException {
    try {
        InputStream inputStreamOpen = context.getAssets().open("config.dat");
        ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
        byte[] bArr = new byte[4096];
        while (true) {
            int i2 = inputStreamOpen.read(bArr);
            if (i2 == -1) {
                inputStreamOpen.close();
                byte[] byteArray = byteArrayOutputStream.toByteArray();
                byte[] bArrM312t = m312t(context.getString(context.getResources().getIdentifier("config_seed", "string", context.getPackageName())));
                Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
                cipher.init(2, new SecretKeySpec(bArrM312t, "AES"));
                return new String(cipher.doFinal(byteArray), "UTF-8");
            }
            byteArrayOutputStream.write(bArr, 0, i2);
        }
    } catch (Exception unused) {
        return null;
    }
}

public static byte[] m312t(String str) {
    try {
        byte[] bArrDigest = MessageDigest.getInstance("MD5").digest(str.getBytes("UTF-8"));
        StringBuilder sb = new StringBuilder();
        for (byte b2 : bArrDigest) {
            sb.append(String.format("%02x", Byte.valueOf(b2)));
        }
        return sb.toString().substring(0, 16).getBytes("UTF-8");
    } catch (Exception unused) {
        return str.substring(0, 16).getBytes();
    }
}

from hashlib import md5
from Crypto.Cipher import AES
from Crypto.Util.Padding import unpad

seed = "hotclub_2026_sec"
key = md5(seed.encode()).hexdigest()[:16].encode()

with open("config.dat", "rb") as f:
    data = f.read()

cipher = AES.new(key, AES.MODE_ECB)
plain = unpad(cipher.decrypt(data), 16)

print(plain.decode())

{
  "sponsors": [
    {
      "name": "Telegram VIP 群",
      "url": "https://t.me/sp_live88_vip",
      "type": "telegram",
      "code": "INVITE_2026"
    },
    {
      "name": "赞助商官网",
      "url": "https://www.sponsor-pay99.com/reg?ref=hotclub",
      "type": "web",
      "contact": "sponsor_wang"
    },
    {
      "name": "USDT 捐赠通道",
      "url": "https://pay.usdt-donate.cc/hotclub",
      "type": "crypto",
      "wallet": "TXqH7sVn8bR4kL2mN9pW6xJ3cY5dF1gA"
    }
  ],
  "admin_tg": "@sp_admin_hotclub",
  "admin_wx": "zheng_tech_2026",
  "update_url": "https://dl.sp-live88.com/update/latest.apk",
  "api_version": "v3.1",
  "report_interval_min": 30
}

strings lib/arm64-v8a/libsecurity.so

com/livevideo/hotclub/collector/DataUploader
getBackupEndpoint
getCommKey
https
/api/v2

readelf -x .rodata lib/arm64-v8a/libsecurity.so

llvm-objdump -d --no-show-raw-insn --print-imm-hex lib/arm64-v8a/libsecurity.so

0xdeadbeef
0xcafebabe
0x12345678
0x9abcdef0

import struct

enc = bytes.fromhex(
    "73b9456ac2c01312"
    "ff9040c7e36e3b57"
    "dd60acc007036fc7"
    "9d2a053f6cc682b8"
)

key = [
    0xdeadbeef,
    0xcafebabe,
    0x12345678,
    0x9abcdef0
]

buf = bytearray(enc)

# 第一层：逐字节异或
for i in range(len(buf)):
    buf[i] ^= (i & 0x0f)
    buf[i] ^= 0x55

# 第二层：块解密
delta = 0x61c8864f

for off in range(0, len(buf), 8):
    v0, v1 = struct.unpack_from("<II", buf, off)

    s1 = 0x8dde6c40
    s2 = 0xefa6f28f

    for _ in range(64):
        t = (((v0 << 4) & 0xffffffff) ^ (v0 >> 5))
        t = (t + v0) & 0xffffffff
        t ^= (s1 + key[(s1 >> 11) & 3]) & 0xffffffff
        v1 = (v1 - t) & 0xffffffff
        s1 = (s1 + delta) & 0xffffffff

        t = (((v1 << 4) & 0xffffffff) ^ (v1 >> 5))
        t = (t + v1) & 0xffffffff
        t ^= (s2 + key[s2 & 3]) & 0xffffffff
        v0 = (v0 - t) & 0xffffffff
        s2 = (s2 + delta) & 0xffffffff

    struct.pack_into("<II", buf, off, v0, v1)

# 去掉 PKCS#7 padding
pad = buf[-1]
plain = bytes(buf[:-pad])

print(plain.decode())

sudo service ssh start
sudo service ssh status

cat /proc/1/cgroup

sudo apt update
sudo apt install openssh-server
sudo systemctl status ssh 
sudo ufw allow ssh

vim /etc/ssh/sshd_config

cat /etc/os-release

cat /etc/fstab

docker images --format "{{.Repository}}:{{.Tag}} {{.CreatedAt}}"

docker inspect u22

btrfs subvolume list /

btrfs subvolume show /root/history

ss -tunlp

cat /etc/nginx/sites-enabled/default

/application/extra/
├── maccms.php      # 主站点配置（数据库、域名、SEO等核心设置）
├── upload.php      # 上传配置
├── water.php       # 水印配置
├── search.php      # 搜索配置
└── ...             # 其他功能模块配置

openssl dgst -sm3 /etc/nginx/sites-enabled/default

ps -aux

lxc-attach -n mytidb -- ss -tlnp | grep 4000

cat /db/tidb/etc/systemd/system/tidb.service

SELECT DATE_FORMAT(FROM_UNIXTIME(user_reg_time), '%Y/%c/%e') AS reg_date, COUNT(*) AS cnt FROM mac_user GROUP BY reg_date ORDER BY cnt DESC LIMIT 1

SELECT user_name,inet_ntoa(user_last_login_ip) from mac_user where user_name like "Ma Hui Mei";

lsblk -f

dpkg -l | grep -iE 'mariadb|postgres|guessdb'

dpkg -l | grep mariadb-server
systemctl status mariadb

ngrok config check

ngrok http 80 

nameserver 114.114.114.114
nameserver 223.5.5.5