|
|
<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="x-dns-prefetch-control" content="on"><meta name="viewport" content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"><meta name="renderer" content="webkit"><meta name="force-rendering" content="webkit"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="HandheldFriendly" content="True"><meta name="mobile-web-app-capable" content="yes"><link rel="shortcut icon" href="https://hans362-img.oss.0vv0.top/favicon.ico"><link rel="icon" type="image/png" sizes="16x16" href="https://hans362-img.oss.0vv0.top/favicon-16x16.png"><link rel="icon" type="image/png" sizes="32x32" href="https://hans362-img.oss.0vv0.top/favicon-32x32.png"><link rel="apple-touch-icon" sizes="180x180" href="https://hans362-img.oss.0vv0.top/apple-touch-icon.png"><link rel="mask-icon" href="https://hans362-img.oss.0vv0.top/safari-pinned-tab.svg"><title>Hans362 's Blog</title><meta name="keywords" content="Hans362"><meta name="description" content="不以物喜，不以己悲"><meta property="og:type" content="website"><meta property="og:title" content="Hans362 's Blog"><meta property="og:url" content="https://blog.hans362.cn/"><meta property="og:site_name" content="Hans362 's Blog"><meta property="og:description" content="不以物喜，不以己悲"><meta property="og:locale" content="zh_CN"><meta property="article:author" content="Hans362"><meta property="article:tag" content="Hans362"><meta name="twitter:card" content="summary_large_image"><link rel="stylesheet" href="/css/style/main.css"><script src="/js/darkmode.js"></script><link rel="dns-prefetch" href="https://analytics.0vv0.top"><link rel="preconnect" href="https://hans362-img.oss.0vv0.top"><meta name="generator" content="Hexo 7.1.1"><link rel="alternate" href="/atom.xml" title="Hans362 's Blog" type="application/atom+xml"></head><body><div class="app-shell-loader">加载中...</div><div class="container" tabindex="-1"><header><div class="header__left"><a href="/" class="button"><span class="logo__text">Hans362 's Blog</span></a></div><div class="header__right"><div class="navbar__menus"><a href="/" class="button"><div class="navbar-menu">首页</div></a><a href="/archives/" class="button"><div class="navbar-menu">归档</div></a><a href="/tags/" class="button"><div class="navbar-menu">标签</div></a><a href="/bangumi/" class="button"><div class="navbar-menu">追番</div></a><a href="/links/" class="button"><div class="navbar-menu">友链</div></a><a href="/about/" class="button"><div class="navbar-menu">关于</div></a><a href="/atom.xml" class="button"><div class="navbar-menu">RSS</div></a></div><a href="/search/" class="button"><div id="btn-search"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" width="24" height="24" fill="currentColor" stroke="currentColor" stroke-width="32"><path d="M192 448c0-141.152 114.848-256 256-256s256 114.848 256 256-114.848 256-256 256-256-114.848-256-256z m710.624 409.376l-206.88-206.88A318.784 318.784 0 0 0 768 448c0-176.736-143.264-320-320-320S128 271.264 128 448s143.264 320 320 320a318.784 318.784 0 0 0 202.496-72.256l206.88 206.88 45.248-45.248z"></path></svg></div></a><a href="javaScript:void(0);" rel="external nofollow noreferrer" class="button"><div id="btn-toggle-dark"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path></svg></div></a><a href="#" class="button" id="b2t" aria-label="回到顶部" title="回到顶部"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" width="32" height="32"><path d="M233.376 722.752L278.624 768 512 534.624 745.376 768l45.248-45.248L512 444.128zM192 352h640V288H192z" fill="currentColor"></path></svg> </a><a class="dropdown-icon button" tabindex="0"><div id="btn-dropdown"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20" width="24" height="24" fill="none" stroke="currentColor" stroke-width="0.7" stroke-linecap="round" stroke-linejoin="round"><path fill="currentColor" d="M3.314,4.8h13.372c0.41,0,0.743-0.333,0.743-0.743c0-0.41-0.333-0.743-0.743-0.743H3.314c-0.41,0-0.743,0.333-0.743,0.743C2.571,4.467,2.904,4.8,3.314,4.8z M16.686,15.2H3.314c-0.41,0-0.743,0.333-0.743,0.743s0.333,0.743,0.743,0.743h13.372c0.41,0,0.743-0.333,0.743-0.743S17.096,15.2,16.686,15.2z M16.686,9.257H3.314c-0.41,0-0.743,0.333-0.743,0.743s0.333,0.743,0.743,0.743h13.372c0.41,0,0.743-0.333,0.743-0.743S17.096,9.257,16.686,9.257z"></path></svg></div></a><div class="dropdown-menus" id="dropdown-menus"><a href="/" class="dropdown-menu button">首页</a> <a href="/archives/" class="dropdown-menu button">归档</a> <a href="/tags/" class="dropdown-menu button">标签</a> <a href="/bangumi/" class="dropdown-menu button">追番</a> <a href="/links/" class="dropdown-menu button">友链</a> <a href="/about/" class="dropdown-menu button">关于</a> <a href="/atom.xml" class="dropdown-menu button">RSS</a></div></div></header><cover><div class="cover__logo"><h1>Hans362 's Blog</h1></div><div class="cover__intro"><p>不以物喜，不以己悲</p></div></cover><main><div class="post-list"><div class="post-entry card"><div class="post-entry__header"></div><div class="post-entry__content"><h2 class="post-entry__title">SJTU-CTF 2025 部分 WriteUp</h2><p>又是一年一度的校赛，今年继续给校赛出了 2 道 Web 题：SmartGrader、EzWebAuthn(_Revenge)，赛后按照惯例发一下出题思路和解题过程。不过考虑到题目后续会搬到校内 OJ，为避免影响后面同学的练习效果就全部加密了，密码是对应题目的 Flag，解出后可以来看看出题思路和可能的其他解法。</p></div><div class="post-entry__meta"><a href="/archives/2025/04/" class="post-meta__date button">2025-04-10</a> <span class="separate-dot"></span> <a href="/categories/%E6%B0%B4/" class="button"><span class="post-meta__cats">水</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/sjtu-ctf-2025-writeup/" class="post-entry__link">SJTU-CTF 2025 部分 WriteUp</a></div><div class="post-entry card"><div class="post-entry__header"><img alt="Cover Image" class="lazy" src="https://hans362-img.oss.0vv0.top/2024/12/29/6a84030162fbcaa091a96e0e6e10170d.png" srcset="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAABlBMVEXMzMyWlpYU2uzLAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAACklEQVQImWNgAAAAAgAB9HFkpgAAAABJRU5ErkJggg==" data-srcset="https://hans362-img.oss.0vv0.top/2024/12/29/6a84030162fbcaa091a96e0e6e10170d.png"></div><div class="post-entry__content"><h2 class="post-entry__title">2024年终总结</h2><p>又到了一年一度的年终总结时间，失踪人口回归！</p><p>上一次更新博客还是在 4 月份，之后虽然有那么几次想要写个周记什么的，但是都因为懒或忙搁置了，就这么一路拖拖拖竟然拖到了年底。想着年终总结可不能再咕了，于是赶在 2024 年的最后一天，在紧张刺激的期末周复习中忙里偷闲写下了这篇文章。那么废话不多说，让我们一起来回顾一下这一年吧！</p></div><div class="post-entry__meta"><a href="/archives/2024/12/" class="post-meta__date button">2024-12-31</a> <span class="separate-dot"></span> <a href="/categories/%E6%9D%82%E6%96%87/" class="button"><span class="post-meta__cats">杂文</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/2024-annual-report/" class="post-entry__link">2024年终总结</a></div><div class="post-entry card"><div class="post-entry__header"></div><div class="post-entry__content"><h2 class="post-entry__title">SJTU-CTF / GEEKCTF 2024 部分 Writeup</h2><p>去年还是选手，今年变成出题人了（</p><p>这次有幸给校赛暨 GEEKCTF 出了 4 道 Web 题：YAJF、Secrets、SafeBlog2、PicBed，赛后决定在博客上公开一下出题人的部分 Writeup 供参考。</p></div><div class="post-entry__meta"><a href="/archives/2024/04/" class="post-meta__date button">2024-04-24</a> <span class="separate-dot"></span> <a href="/categories/%E6%B0%B4/" class="button"><span class="post-meta__cats">水</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/sjtu-ctf-geekctf-2024-writeup/" class="post-entry__link">SJTU-CTF / GEEKCTF 2024 部分 Writeup</a></div><div class="post-entry card"><div class="post-entry__header"></div><div class="post-entry__content"><h2 class="post-entry__title">周记#31</h2><p>好久不见，各位新春快乐呀！🧨</p><p>五周的寒假转眼就过去了，前不久还沉浸在过年的喜悦中，现在已经在学校坐牢一周了（谁家好人学校正月初九开学啊，我还没玩够呢😡😭）</p><p>那就来一篇终极寒假生活流水账罢（</p></div><div class="post-entry__meta"><a href="/archives/2024/02/" class="post-meta__date button">2024-02-23</a> <span class="separate-dot"></span> <a href="/categories/%E5%91%A8%E8%AE%B0/" class="button"><span class="post-meta__cats">周记</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/weekly-31/" class="post-entry__link">周记#31</a></div><div class="post-entry card"><div class="post-entry__header"><img alt="Cover Image" class="lazy" src="https://hans362-img.oss.0vv0.top/2023/12/30/21dadf931348510c30cf38882646745f.png" srcset="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAABlBMVEXMzMyWlpYU2uzLAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAACklEQVQImWNgAAAAAgAB9HFkpgAAAABJRU5ErkJggg==" data-srcset="https://hans362-img.oss.0vv0.top/2023/12/30/21dadf931348510c30cf38882646745f.png"></div><div class="post-entry__content"><h2 class="post-entry__title">2023年终总结</h2><p>草草草怎么一年就过去了，又到了<s>痛苦的期末周</s>一年一度的年终总结时刻，于是我在紧张刺激的期末跨年<s>预习</s>复习活动中匆匆写完了这篇文章，快来回顾一下这<s>一事无成</s>的一年罢（）</p></div><div class="post-entry__meta"><a href="/archives/2023/12/" class="post-meta__date button">2023-12-31</a> <span class="separate-dot"></span> <a href="/categories/%E6%9D%82%E6%96%87/" class="button"><span class="post-meta__cats">杂文</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/2023-annual-report/" class="post-entry__link">2023年终总结</a></div><div class="post-entry card"><div class="post-entry__header"><img alt="Cover Image" class="lazy" src="https://hans362-img.oss.0vv0.top/2023/12/02/c5543f0d5d32feffb172c231be9e0ace.png" srcset="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAABlBMVEXMzMyWlpYU2uzLAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAACklEQVQImWNgAAAAAgAB9HFkpgAAAABJRU5ErkJggg==" data-srcset="https://hans362-img.oss.0vv0.top/2023/12/02/c5543f0d5d32feffb172c231be9e0ace.png"></div><div class="post-entry__content"><h2 class="post-entry__title">阿里云金融级实人认证接入踩坑记</h2><p>最近需要给一个基于 Django 的项目开发实名认证功能，除了常规的核验姓名和身份证号是否匹配，还需要对用户进行活体检测。看了一圈最后选定了阿里云的<a target="_blank" rel="noopener" href="https://help.aliyun.com/zh/id-verification/product-overview/financial-level-real-person-certification">金融级实人认证</a>产品，可以直接让用户使用支付宝APP完成活体检测的认证过程，开发工作量相对较小，对用户而言也比较方便（毕竟这年头谁手机上还没个支付宝呢）。</p><p>开通金融级实人认证后，我开始照着阿里云提供的<a target="_blank" rel="noopener" href="https://help.aliyun.com/zh/id-verification/financial-grade-id-verification/integration-by-using-the-sdk">开发参考文档</a>尝试将其接入到项目中。得益于阿里云这份含糊其辞、不清不楚的过时文档，开发花费的时间比我想象中要多😇，在此也记录一下我踩过的坑，希望能够帮助到后来者。</p></div><div class="post-entry__meta"><a href="/archives/2023/12/" class="post-meta__date button">2023-12-02</a> <span class="separate-dot"></span> <a href="/categories/%E6%8A%80%E6%9C%AF%E5%90%91/" class="button"><span class="post-meta__cats">技术向</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/aliyun-financial-grade-id-verification/" class="post-entry__link">阿里云金融级实人认证接入踩坑记</a></div><div class="post-entry card"><div class="post-entry__header"></div><div class="post-entry__content"><h2 class="post-entry__title">周记#30</h2><p><img src="https://hans362-img.oss.0vv0.top/2023/11/10/5874161ac7d3d365b62d81cd79cada6c.png?width=1920" alt=""></p><p>让我看看…嗯，很好，<s>不出意外的话大概是出意外了</s>，我竟然已经五个月了没更新博客了，赶快把存货发出来除除草。</p><p>所以这是一篇从暑日至寒冬跨越两季的超长流水账，猜猜这次会有多长呢？🤪</p></div><div class="post-entry__meta"><a href="/archives/2023/11/" class="post-meta__date button">2023-11-12</a> <span class="separate-dot"></span> <a href="/categories/%E5%91%A8%E8%AE%B0/" class="button"><span class="post-meta__cats">周记</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/weekly-30/" class="post-entry__link">周记#30</a></div><div class="post-entry card"><div class="post-entry__header"></div><div class="post-entry__content"><h2 class="post-entry__title">周记#29</h2><p>咕咕咕了半年零三个月，这个系列终于有了后续（你还知道写啊）。</p><p>所以这是一篇是又臭又长的写于夏季学期的伪装成周记的寒假和春季学期的终极流水账，我也不知道会有多长，各位慢慢看🤪。</p></div><div class="post-entry__meta"><a href="/archives/2023/06/" class="post-meta__date button">2023-06-23</a> <span class="separate-dot"></span> <a href="/categories/%E5%91%A8%E8%AE%B0/" class="button"><span class="post-meta__cats">周记</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/weekly-29/" class="post-entry__link">周记#29</a></div><div class="post-entry card"><div class="post-entry__header"><img alt="Cover Image" class="lazy" src="https://hans362-img.oss.0vv0.top/2023/03/13/86cd66e3c56c1b9e4b60a33bf8d7b723.png?width=1920" srcset="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAABlBMVEXMzMyWlpYU2uzLAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAACklEQVQImWNgAAAAAgAB9HFkpgAAAABJRU5ErkJggg==" data-srcset="https://hans362-img.oss.0vv0.top/2023/03/13/86cd66e3c56c1b9e4b60a33bf8d7b723.png?width=1920"></div><div class="post-entry__content"><h2 class="post-entry__title">SJTU-CTF 2023 Writeup</h2><p>好久没更新博客了，周记已经咕咕咕好几个月了，等有空再写吧（</p><p>作为一个非计算机和信息安全专业学生、除了 Web 方向会一点其它啥都不会的小白，前段时间参加了我校举办的 CTF 网络安全技术挑战赛。给官方提交了 Writeup 后想着不能浪费这水文章的大好机会，就在博客上也发一遍吧。</p></div><div class="post-entry__meta"><a href="/archives/2023/03/" class="post-meta__date button">2023-03-16</a> <span class="separate-dot"></span> <a href="/categories/%E6%B0%B4/" class="button"><span class="post-meta__cats">水</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/sjtu-ctf-2023-writeup/" class="post-entry__link">SJTU-CTF 2023 Writeup</a></div><div class="post-entry card"><div class="post-entry__header"><img alt="Cover Image" class="lazy" src="https://hans362-img.oss.0vv0.top/2022/12/06/d690f11093c4f026824a230c98411c44.png?width=1920" srcset="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAABlBMVEXMzMyWlpYU2uzLAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAACklEQVQImWNgAAAAAgAB9HFkpgAAAABJRU5ErkJggg==" data-srcset="https://hans362-img.oss.0vv0.top/2022/12/06/d690f11093c4f026824a230c98411c44.png?width=1920"></div><div class="post-entry__content"><h2 class="post-entry__title">2022年终总结</h2><p>2022年的最后一个冬夜，我和往年一样坐在屏幕前，试图用文字为过去的一年画上句号。今年的我，沉思良久，却一时不知从何写起。</p><p>2022年发生了太多事情，让我感到恐惧、愤怒、无奈、迷茫，却也让我看到一丝丝希望。这些事情注定不被允许存在于「正确的集体记忆」中，但这片土地上的苦难、悲剧、抗争、勇气值得被铭记。因此，我愿将它们和我的生活一起，写入我的年终总结，作为它们曾经存在过、发生过的一份见证。</p></div><div class="post-entry__meta"><a href="/archives/2022/12/" class="post-meta__date button">2022-12-31</a> <span class="separate-dot"></span> <a href="/categories/%E6%9D%82%E6%96%87/" class="button"><span class="post-meta__cats">杂文</span></a><style>.post-meta__pv{color:var(--t-l);visibility:hidden;opacity:0;transition:.2s}</style><span class="separate-dot"></span> <span class="post-meta__pv"></span></div><a href="/post/2022-annual-report/" class="post-entry__link">2022年终总结</a></div></div><div class="nav"><div class="nav__prev"></div><div class="nav__next"><a href="/page/2/" class="nav__link"><div><div class="nav__label">下一页</div><div class="nav__title">第 2 页</div></div><div><svg viewBox="0 0 1024 1024" xmlns="http://www.w3.org/2000/svg" width="24" height="24"><path d="M434.944 790.624l-45.248-45.248L623.04 512l-233.376-233.376 45.248-45.248L713.568 512z" fill="#808080"></path></svg></div></a></div></div></main><footer><p class="footer-copyright">Copyright © 2017 - 2025 <a href="/">Hans362 's Blog</a></p><p>Powered by <a href="https://hexo.io" target="_blank">Hexo</a> | Theme - <a href="https://github.com/ChrAlpha/hexo-theme-cards" target="_blank">Cards</a></p><script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script><ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-8746554831230893" data-ad-slot="6356225601" data-ad-format="auto" data-full-width-responsive="true"></ins><script>(adsbygoogle=window.adsbygoogle||[]).push({})</script></footer></div><script defer src="https://blog.hans362.cn/npm/vanilla-lazyload@17.8.3/dist/lazyload.min.js"></script><script>window.lazyLoadOptions={elements_selector:".lazy"}</script><script async defer data-website-id="5d181692-8a81-4c20-a282-cee87a6b90ef" src="https://analytics.0vv0.top/vue.js"></script><script src="/js/pageviews.js"></script><link rel="stylesheet" href="https://blog.hans362.cn/npm/katex@0.16.0/dist/katex.min.css" crossorigin="anonymous"></body></html> |