Guest User

Untitled

a guest
Jun 18th, 2018
181
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.12 KB | None | 0 0
  1. import socket
  2. import os
  3. #product=FLAG&price=999999999&timestamp=1529122879569249&sign=b46e16950a89fc50eb229be891af53625eceb6a7c6b82c323c8ac7e7d0dc78cb
  4.  
  5. def hash_length_extension(order,length):
  6. append = "&price=1000"
  7. key_length = length
  8. data = order[:-70]
  9. sign = order[-64:]
  10. hashpump = os.popen("hashpump -d '%s' -s '%s' -a '%s' -k '%i'" % (data,sign,append,key_length)).readlines()
  11. newsign = hashpump[0].rstrip()
  12. #print "Old: " + hashpump[1]
  13. newdata = hashpump[1].rstrip().decode('string_escape')
  14. #print "After: " + newdata
  15. return newdata + '&sign=' + newsign
  16.  
  17. def send(length):
  18. host,port = "13.251.110.215",10001
  19.  
  20. s = socket.socket()
  21.  
  22. s.connect((host,port))
  23. payload = hash_length_extension("product=FLAG&price=999999999&timestamp=1529122879569249&sign=b46e16950a89fc50eb229be891af53625eceb6a7c6b82c323c8ac7e7d0dc78cb",length)
  24.  
  25. s.recv(1024)
  26. s.recv(1024)
  27. #print s.recv(1024)
  28. s.send("3" + "\n")
  29. s.recv(1024)
  30. s.recv(1024)
  31. print payload
  32. s.send(payload + "\n")
  33. return s.recv(1024)
  34.  
  35. for i in range(8,33):
  36. k = send(i)
  37. if "Invalid" in k:
  38. print "Key length ",i," Failed"
  39. else:
  40. print send(i)
  41. print "Key lenth ",i
  42. break
Add Comment
Please, Sign In to add comment