# 手动获取 target 的过程见 Writeup target = 0xCDCB4322E6C376CC4C2D8C199E0D1818D8F861C788CFC181BE067F06380CF318EDD8CF98D98D9A800 flag = [] while target != 0: target >>= (7 if target & 0x80 else 8) if target != 0: flag.append((target & 0x7F) ^ 85) flag = bytes(flag[::-1]).decode() print(flag) # flag{9bc74ce3-a56d-467f-eb52-d5f3d8923c6f}