Advertisement
Guest User

Untitled

a guest
Sep 17th, 2017
195
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.42 KB | None | 0 0
  1. Extracting Files (16 Go)
  2. Using FTK Imager and go to (var/www/)
  3. You will find login.pl & index.pl & username.txt & password.txt
  4.  
  5. login ( admin : iforgotaboutthemathtest )
  6. flag : flag{but_I_f0rgot_my_my_math_test_and_pants}
  7.  
  8. #!/usr/bin/perl
  9.  
  10. if ($ENV{'REQUEST_METHOD'} eq "POST") {
  11. read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
  12. @pairs = split(/&/, $buffer);
  13. foreach $pair (@pairs) {
  14. ($name, $value) = split(/=/, $pair);
  15. $value =~ tr/+/ /;
  16. $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
  17. $FORM{$name} = $value;
  18. }
  19. }
  20.  
  21. open(FH,"username.txt") or &dienice("Can't open username.txt: $!");
  22. $username = <FH>;
  23. close(FH);
  24.  
  25. open(FH,"password.txt") or &dienice("Can't open password.txt: $!");
  26. $password = <FH>;
  27. close(FH);
  28.  
  29. open(FH,"flag.txt") or &dienice("Can't open flag.txt: $!");
  30. $flag = <FH>;
  31. close(FH);
  32.  
  33. print "Content-type:text/html\r\n\r\n";
  34.  
  35. if ($FORM{"username"} ne $username && $FORM{"password"} ne $password){
  36. print "<html>";
  37. print "<head>";
  38. print "<title>[ BEST ROUTER ]</title>";
  39. print "</head>";
  40. print "<body>";
  41. print "<center><p>Sorry, your credentials are wrong</p></center>";
  42. print "</body>";
  43. print "</html>";
  44. exit 0;
  45. } else {
  46. print "<html>";
  47. print "<head>";
  48. print "<title>[ BEST ROUTER ]</title>";
  49. print "</head>";
  50. print "<body>";
  51. print "<p>Authenticated</p>";
  52. print "<pre>$flag</pre>";
  53. print "</body>";
  54. print "</html>";
  55. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement