-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathtest.py
More file actions
66 lines (60 loc) · 9.05 KB
/
test.py
File metadata and controls
66 lines (60 loc) · 9.05 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
# a = "968R2JZ</p><p>9S3IA90</p><p>8947VDL</p><p>L964BT4</p><p>6Z13I9Q</p><p>H657P5Y</p><p>5VX859Z</p><p>B6788MQ</p><p>4N37T4D</p><p>3OR68L2</p><p>7G7A0U9</p><p>12Z0SG9</p><p>YA425M1</p><p>7TB7K65</p><p>J2VX111</p><p>C3K42U3</p><p>155BQM7</p><p>2Q69AV9</p><p>31IU8W4</p><p>1OG007X</p><p>6807NWF</p><p>Q511S9R</p><p>B4DC729</p><p>F9D37H7</p><p>7JL550K</p><p>X64XX58</p><p>C6H7M78</p><p>2FQ909B</p><p>0Z25O5K</p><p>687FZ9L</p><p>2F5ZL96</p><p>25RB61L</p><p>9TH34N4</p><p>8V1IV84</p><p>27WH24S</p><p>29MQB95</p><p>4PXF668</p><p>9VR75N2</p><p>UO00R15</p><p>Z5TJ027</p><p>1MIQ421</p><p>89BM99X</p><p>56EO62Y</p><p>975BF1Q</p><p>Q6NK864</p><p>195HX6R</p><p>OQ4S330</p><p>7H8N17X</p><p>C0RG814</p><p>XV29T10</p><p>8CO380I</p><p>2R0T3F0</p><p>52RF69L</p><p>7WO8G45</p><p>33CQ21E</p><p>672DG0A</p><p>21P4H7X</p><p>7B25T3J</p><p>M3I679Q</p><p>Q82P88O</p><p>51EM3I9</p><p>Y9O33T9</p><p>49MK91I</p><p>09JL1K5</p><p>O437A1H</p><p>72D33EC</p><p>16YT48D</p><p>C94CP77</p><p>1TF2Z67</p><p>4C9Y91N</p><p>340OM4N</p><p>9VD350Z</p><p>3L875VQ</p><p>9FD257E</p><p>76SSS38</p><p>9L9HD19</p><p>L88DH62</p><p>8S720TU</p><p>A37F3V0</p><p>X7J72V5</p><p>M1WR922</p><p>7J8W75J</p><p>6914ONP</p><p>3L95Y9L</p><p>67SW3H1</p><p>6G9X83P</p><p>W2388QT</p><p>W5M7C38</p><p>HF9D923</p><p>9Z46RI8</p><p>8M1A44G</p><p>90M9YK7</p><p>FDR4716</p><p>6DTJ412</p><p>6Z1E8U3</p><p>008YKM7</p><p>1B87XT0</p><p>1VB40H9</p><p>JF980H2</p><p>1W3I64P</p><p>I47P53B</p><p>9XN16F2</p><p>UA130O2</p><p>91BD9Z8</p><p>1H712NK</p><p>V7625MD</p><p>51Z97NT</p><p>5253FJH</p><p>0B10DF4</p><p>Q0513IY</p><p>08PLT29</p><p>33IK2M5</p><p>50Z54YX</p><p>6G2TT15</p><p>L652MK7</p><p>51K93FA</p><p>72J5F1H</p><p>J2869WJ</p><p>OG88X10</p><p>585T9WQ</p><p>K69E82Q</p><p>166Q3UY</p><p>G546EC8</p><p>176I5ME</p><p>A9O545U</p><p>64W58AY</p><p>2BL3G89</p><p>P76F46K</p><p>S7Q141U</p><p>7R2NP98</p><p>044PW9I</p><p>F67C3Z3</p><p>O56EW95</p><p>89GO5Y5</p><p>31D7HL5</p><p>W3M4C70</p><p>O11N3P3</p><p>277R8IZ</p><p>5EG29C2</p><p>P5A1E38</p><p>0J80TD5</p><p>5A1Q68V</p><p>C65A1Y5</p><p>05I2K4M</p><p>2V3X9T6</p><p>23VF4A2</p><p>7YD998I</p><p>Y7G463O</p><p>71M42EU</p><p>KM84L36</p><p>M4A433T</p><p>J97B2T3</p><p>3V3B2L7</p><p>733QQQ7</p><p>Q81PR85</p><p>614IXM8</p><p>9D46D1D</p><p>7P875PP</p><p>QOS9556</p><p>47B6P3N</p><p>K2G36I4</p><p>8M5I4K5</p><p>XL6861Z</p><p>4T67LB2</p><p>N4XD678</p><p>1KI4J02</p><p>G09T96T</p><p>6JIH709</p><p>V618P7B</p><p>A095S7K</p><p>92H9T6F</p><p>Q8M023I</p><p>0DCB537</p><p>MYF4751</p><p>7NM743L</p><p>32UF6Q4</p><p>1TT5T02</p><p>A48C8E2</p><p>36BW5R8</p><p>PE85T95</p><p>9O205WG</p><p>D092C7E</p><p>5L93P8T</p><p>U6012KP</p><p>6J86E6O</p><p>274FG9H</p><p>92YKW89</p><p>110IO9U</p><p>S4O41Q3</p><p>675Q7QQ</p><p>12HGF08</p><p>B7YV719</p><p>L8W019A</p><p>E394AP8</p><p>78YC2N1</p><p>8NH655T</p><p>T7319FH</p><p>17UXR16</p><p>894G6KI</p><p>3771YYY</p><p>F45N76X</p><p>6E587JO</p><p>T70X4B5</p><p>Q8M55O5</p><p>3VJ5P73</p><p>97L79QG</p><p>Q277AI0</p><p>0D8PR39</p><p>25M91BX</p><p>Y956X4Z</p><p>H883PL8</p><p>K49N0H5</p><p>L57Z44F</p><p>H87P59X</p><p>E94K86Y</p><p>92N9PO0</p><p>V7520ME</p><p>8O39A8M</p><p>0LZ20S7</p><p>28KZV25</p><p>K374L4M</p><p>0US835Q</p><p>WT892Q6</p><p>7Q31WT9</p><p>E704OJ3</p><p>0BB03O9</p><p>TF9Z298</p><p>S740QR7</p><p>466VF5N</p><p>5X4D6N1</p><p>N79U93B</p><p>3KC2U58</p><p>45D7FB8</p><p>1Y49K1W</p><p>3L05N2J</p><p>728JH3F</p><p>7E45W8M</p><p>04Y8U1J</p><p>F4I630C</p><p>42WW3W7</p><p>97IYO41</p><p>R5T098P</p><p>BZD9938</p><p>NE3W773</p><p>X97H85P</p><p>P0DJ677</p><p>5DZ326V</p><p>12FZ9T0</p><p>9O9Q38C</p><p>K657FP6</p><p>1K4F07A</p><p>K11N2H6</p><p>9N6BP37</p><p>5WE831A</p><p>7D83SH9</p><p>P22J48Z</p><p>A3B74C1</p><p>G7Y87C0</p><p>3T85N4Z</p><p>6C93U2Y</p><p>PIB0438</p><p>G5155PX</p><p>9Y0Q5U2</p><p>152G1YP</p><p>P4M01S9</p><p>I2KW122</p><p>R37LB30</p><p>H8M3R12</p><p>366RJ9N</p><p>8749SQO</p><p>908MA3T</p><p>27GES29</p><p>TH6709N</p><p>O27CI97</p><p>271WGB0</p><p>R2UX281</p><p>98KBT93</p><p>9MO4Q94</p><p>I21G1E4</p><p>15DGJ91</p><p>68B1B0O</p><p>B91JS95</p><p>P4FZ542</p><p>C6I832W</p><p>X58Q3E0</p><p>F5J62B7</p><p>2BH097V</p><p>431A8YM</p><p>8VE39N2</p><p>9HD481L</p><p>P5ET818</p><p>N2Q1T31</p><p>37TY4O1</p><p>L7JK243</p><p>5984VVV</p><p>IQ12Y29</p><p>5NW60E8</p><p>SDH5887</p><p>E2T9I22</p><p>W4U7Y13</p><p>5SA38W1</p><p>16L62GB</p><p>43FN1X7</p><p>JV542H7</p><p>888JL8H</p><p>S25E35Q</p><p>93G4H4F</p><p>Q4I613A</p><p>756LXJ2</p><p>J63PV32</p><p>Y3A538M</p><p>B26A49C</p><p>1993CNR</p><p>40CWQ79</p><p>1J4XD18</p><p>3L8CU27</p><p>9Q76TW3</p><p>9BV6L01</p><p>Z72B3N2</p><p>1D8I2Y8</p><p>3I11TX7</p><p>VVI7176</p><p>LXR4853</p><p>1393FPV</p><p>05Y40LL</p><p>44DTY28</p><p>742XF1N</p><p>5N59VE0</p><p>863K3AS</p><p>171RWM1</p><p>18J5V3C</p><p>1EY57S8</p><p>59N4W0E</p><p>FLR5685</p><p>5M9I12K</p><p>9SP8M13</p><p>U2UU859</p><p>9OEU048</p><p>TV8509U</p><p>4Z2FL02</p><p>R77L3B7</p><p>M776X8B</p><p>ABZ4372</p><p>5827CPP</p><p>3F639XP</p><p>W164US1</p><p>3UU2U92</p><p>0E22U9Z</p><p>5B2VY40</p><p>X47RH90</p><p>57Y25CU</p><p>0NA18A1</p><p>H2D44L2</p><p>3Z28T3W</p><p>14Q9EX0</p><p>SP2526V</p><p>VVV7838</p><p>268WQ3T</p><p>3P8C85P</p><p>ZOD6547</p><p>4V4K5Z3</p><p>A8UX863</p><p>V441RZ3</p><p>D1T8N37</p><p>4SE84Q6</p><p>6NG828Z</p><p>64Q60YG</p><p>I4582JH</p><p>S8A277W</p><p>U6S540W</p><p>P51R7N3</p><p>1Q25F7B</p><p>V4E1N37</p><p>PV7003J</p><p>32IFL20</p><p>2N65M2L</p><p>0S53KC6</p><p>40K3UA4</p><p>793MBQ0</p><p>24A3AA3</p><p>BV57L17</p><p>W1T02Q5</p><p>G3HI647</p><p>0P475KU</p><p>1DN01V4</p><p>3T1Y94D</p><p>W1Y99X0</p><p>70T5KC2</p><p>2C4RN13</p><p>14F03RL</p><p>L5HP212</p><p>RZ9J542</p><p>A0E1I63</p><p>48QOC69</p><p>ET0P161</p><p>UI1378W</p><p>567W2DK</p><p>B08L5V1</p><p>FZ74C99</p><p>EQ4C759</p><p>Z743PF9</p><p>71B58DC</p><p>4J3SB82</p><p>7Q9IY22</p><p>7W23Y4A</p><p>CIS9520</p><p>1T3F16M</p><p>63XI66T</p><p>7IHG987</p><p>73Q9HZ4</p><p>24XNH50</p><p>9E924NV</p><p>XB1F438</p><p>MY1A961</p><p>47B8IP9</p><p>45F43TR</p><p>W78L4H1</p><p>3S5N31I</p><p>5C438UM</p><p>QM78B22</p><p>05O1W3G</p><p>OSD6768</p><p>Z245P3U</p><p>7B5Z0N1</p><p>84ML19N</p><p>29X6DJ5</p><p>7H1Z9Q3</p><p>162M5UD</p><p>U9A74G5</p><p>X99K88X</p><p>6458XSN</p><p>7TB207K</p><p>KG955C7</p><p>ZN824B5</p><p>78H6GI5</p><p>L44VD64</p><p>2N0BU36</p><p>7H9UU82</p><p>D532L7T</p><p>22C3A7Y</p><p>5N9XF19</p><p>985OMQ6</p><p>D3A64G4</p><p>62TGG59</p><p>617KYE3</p><p>Y2O19G9</p><p>E9K9H18</p><p>XD40J33</p><p>6C872IO</p><p>Y60WU27</p><p>286KY5W</p><p>R3184PT</p><p>66CB8A8</p><p>26K32ZV</p><p>BB0835O</p><p>M3N52L5</p><p>S423S5S</p><p>F991KP6</p><p>9WWJ033</p><p>MQ34U45</p><p>9O44BO9</p><p>Z15D29H</p><p>13R3WB0</p><p>2T8G0T6</p><p>G4C0K99</p><p>5R06N1J</p><p>U32GS03</p><p>5Q711PR</p><p>7OY10I6</p><p>492FW6O</p><p>IZ01R28</p><p>N5552DV</p><p>L288B2G</p><p>1P69GY7</p><p>I4A931R</p><p>IW50K54</p><p>8515CBD</p><p>4H44D0L</p><p>7Y3ES45</p><p>AG065Q8</p><p>52D39HZ</p><p>XZ1Y022</p><p>42OGW67</p><p>8Q5Q41D</p><p>BG8L452</p><p>25AQV45</p><p>958UKE3</p><p>F8NJ029</p><p>61FU11Q</p><p>47Y6R5K</p><p>G1W861Q</p><p>9871EQC</p><p>1E5C18G</p><p>395NQT8</p><p>5A7K63Q</p><p>748H7KN</p><p>Y1C75G1</p><p>4BE7H84</p><p>J57X04L</p><p>QY874U2".split("</p><p>")
# valid = []
# for j in range(len(a)):
# chars = ""
# vowel = False
# s = 0
# for k in a[j]:
# if k.isalpha():
# chars += k
# if k.isdigit():
# s += int(k)
# if k in "AEIOU":
# vowel = True
# conds = [(s%2==0 if vowel else s%2==1) if s<10 else True,
# len(chars) == 3,
# len(a[j]) == 7,
# (ord(chars[0]) - ord(chars[1])) in [6, -6, 12, -12],
# (ord(chars[1]) - ord(chars[2])) in [6, -6, 12, -12],
# (ord(chars[2]) - ord(chars[0])) in [6, -6, 12, -12]]
# if all(conds):
# valid.append(a[j])
# chars = ""
# print(valid)
# # a = ['480U5IO', '719NT9H', '89K19QW', '0914NZT', '46CO41I', '49S10YM', 'MG6789S', '6O44I9C', 'G0M483A', '2GS4M42', 'G5M14S8', '067HNB5', '852N7HT']
# # rem = ['2GS4M42', 'J215PD0', '719NT9H', '480U5IO', '89K19QW']
# # for i in rem:
# # if i in a: a.remove(i)
# # print(a)
import requests
import base64
auth = "WjF3WFJCRlpXNVdlSkVwcVVCWVJtdG1CZ2VyaWhGNzhLQnhqV1dKcGxFL1FSRzNlTXBKbjU2YnRwVFBNNjA5eUdpNFVzejcwTFhVeWsxK1krVjI2QXBCb3FWSHNiYXYzYkhRaHpQVkRRbERyckNPcFB2RHRBTVJ1RWRjQmxxTXo="
# convert the base64 string to bits
auth = base64.b64decode(auth).decode('utf-8')
bits=[]
for char in auth:
binary_representation = format(ord(char), '08b')
for bit in binary_representation:
bits.append(int(bit))
def back_to_base64(bits):
# group bits by 8
grouped_bits = [bits[n:n+8] for n in range(0, len(bits), 8)]
# convert each group of bits back to a character
chars = [chr(int(''.join(map(str, byte)), 2)) for byte in grouped_bits]
# join the characters back into a string
str_from_bits = ''.join(chars)
base64_str = base64.b64encode(str_from_bits.encode()).decode()
return base64_str
# flip each bit one by one
for i in range(len(bits)):
temp = bits.copy()
temp[i] = temp[i] ^ 1
# convert temp back to base 64
x = back_to_base64(temp)
# send a get req to http://mercury.picoctf.net:43275/ with cookie auth_name=x
cookies = {"auth_name": x}
r = requests.get("http://mercury.picoctf.net:43275/", cookies=cookies)
t = r.text
if "picoctf{" in t.lower():
print(t)
break