【CTF-MISC-流量】从DNS子域名提取数据进行Base32解密得到压缩包文件获取flag

题目unictf比赛杂项Silent Resolverhttps://unictf.play.ctfplus.cn/problem/Misc/20浏览流量信息发现异常_ws.col.info containsa1b2c3d4.exfil.unictf.local A 93.184.216.34kbfqgbauaaaaacaajbsskxfwamzbcoaaaaadmaaaaaeaaaaamz wgczzoor4hic6nzn2a44nloyy4qk4jb4utekjorf37cc4ob4wd klrsjqwy4n6pgcxiz5zvjthsrcpxgbgdddqpgzhc4mrofgxaka cqjmaqefadcqaaaaaiabegkjk4wybteejyaaaaanqaaaaaqaaa aaaaaaaaaaaaaaeaaeaaaaaamzwgczzoor4hiuclaudaaaaaaa aqaaiagyaaaac6aaaaaaaa 1818be0b尝试各种编码在经过各种编码尝试后发现kbfqgbauaaaaacaajbsskxfwamzbcoaaaaadmaaaaaeaaaaamz经过大写转换后Base32解码出现PK开头的信息PK\x03\x04开头这是ZIP文件的标准文件头而且 DNS查询中不允许使用特殊字符Base32是DNS场景的理想选择将其他加密文字也一并放入进来解密结果导出发现里面有个flag.txt打开发现密文答案UniCTF{D0nt_Tr4st_DNS_Qu3r1es_7h3y_M1ght_H1d3_S3cr3ts}