> [name=FlyDragon] ## Step.1 ``` nc lotuxctf.com 30004 ``` ``` =====STORY TELLER===== (1) Tell me a part of the story. (2) Tell me the whole story. (3) Quit ``` 只有選項 (1) 是有用的 ## Step.2 多選幾次 (1) 收集故事 ``` Qekgll cqlz dgxfzqofl qfr zktqeitkgxl koctkl, wn zit vqn, zit Ugsrtf ysqu ol SgZxB{Ek4eA_ZkqFlhGl1zogf_e1hi3k} Qekgll cqlz dgxfzqofl qfr zktqeitkgxl koctkl, Qfr zit vgfrtkl ziqz qvqoz ziglt vig ftctk uoct xh. It tfegxfztktr dqfn gwlzqestl qsgfu zit vqn, Iol ktstfzstll hxklxoz yxtstr wn ight, Vig iqr q rtth yqleofqzogf vozi ysqul. Ftctk uocofu xh, iol rtztkdofqzogf xfvqctkofu. Ykgd ziqz rqn ygkvqkr, Pqat wteqdt q stutfr, ``` 這其實是簡單的置換式密碼，透過字頻分析就能解出 flag 故事中的這一段和 flag 格式相同，推測 `SgZxB == LoTuX` ``` SgZxB{Ek4eA_ZkqFlhGl1zogf_e1hi3k} ``` ## Step.3 https://quipqiup.com/ 字頻分析 取得 flag ![](https://hackmd.io/_uploads/HJ90DJuK3.png) {%hackmd M1bgOPoiQbmM0JRHWaYA1g %}