题目附件前往 Releases 下载
A tracking website only lets guests view maps, but some think hidden query tools are left in the code. You are given a normal web page. Find the clues left by the developers and get the hidden data.
环境题，无附件
The attachment contains an exported local task database. The developer says the suspicious tasks are "fully deleted," but if they really are, why include the log files? Please recover the deleted content.
You are given long-term environmental monitoring data. The staff says the data is "a bit unstable," but suspects someone used this to hide other content. Please find the part in the file that does not belong to the monitoring system.
You are given a digital receipt with only a creation time, an order number, and a check code that looks random. The developer says the code "changes every time." You need to prove it only looks random but is not.
An approval system adds a digital signature to each allowed message. You have two different messages and their signatures. The system also asks you to submit a valid admin signature. It seems like a simple "check signature" task, but the real issue may be with the person who signs.
环境题，无附件
The signing tool sometimes gives "broken signatures" when the system is busy. The tech team thinks it is just a rare error, but you know security systems fear these rare cases the most. Use one strange signature from the attachment to find the real secret.
After the program runs, it reads the resource file and validates the user input. It outputs
okif the input is correct, andnootherwise. Please analyze the relationship between the program and the resource file, restore the actual validation logic, and determine the correct flag.
The site appears to only offer a static resource download function, but you suspect there's a problem with the web server's directory mapping. Dig deep into this seemingly harmless resource entry point to uncover content that shouldn't be visible.
环境题，无附件
A note-taking system supports "importing personalized settings." The function seems to simply save your preferences to the backend, but you feel that this "merge configuration" process is a bit too arbitrary. Please demonstrate that this arbitrariness leads to real problems.
环境题，无附件
"There can't be any risks in taking notes, right?" The developer put his little tool online. When you open it, you find that its functions are very ordinary: create, edit, delete, and view. But ordinary functions are sometimes the easiest places to hide extraordinary problems.
环境题
A reporting platform allows you to submit query templates, and the system places the export request in an offline queue, generating an archive file for download later. The developer believes that "the front-end entry points are all filtered," so the offline task should be safe. Please verify whether he has merely postponed the issue, rather than resolving it.
环境题，无附件
A team has launched an operations assistant that supports searching internal documents, recording display preferences, and automatically generating execution plans. The system claims that the audit_token export task is strictly protected and is only allowed to execute if the latest plan includes approval information. Please analyze the workflow of this service and find out how to make it incorrectly append bridge approvals to cached documents and ultimately export hidden content.
环境题