stefan2904

from urlparse import urlparse, parse_qs
import urllib2

videoid = "bMSTtWtzV-A"

response = urllib2.urlopen("http://youtube.com/get_video_info?video_id=" + videoid)

query = urlparse("/?" + response.read()).query

title = parse_qs(query)['title']

stefan2904

% python attack_blackbox3.py


[*] ####################################################################
[*] ######## first box
[+] Opening connection to blackbox_ced7f267475a0299446fa86c26d77161.quals.shallweplayaga.me on port 18324: Done
[DEBUG] Received 0x19 bytes:
    'You need to open the box!'
[DEBUG] Received 0xb2 bytes:
    '\n'

stefan2904

import socket
import random

host = "blackbox_ced7f267475a0299446fa86c26d77161.quals.shallweplayaga.me"
port = 18324

inputs = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!\"#$%&'()*+,-./:;<=>?@[\]^_`{|}~ "

s = socket.socket()
s.connect((host, port))

stefan2904

import json, requests

resp = requests.get(url="http://realraum.at/status.json")
data = json.loads(resp.text)


print data['state']['message']
print data['state']['lastchange']

stefan2904

stefan2904

/****************************************************************************
 **
 ** Copyright (C) 2015 Graz University of Technology
 **
 ** Contact: Erich.Wenger@iaik.tugraz.at
 **
 ** IT-SECURITY LICENSE
 ** Version 1.0, 12th of March 2015
 **
 ** This framework may only be used within the IT-Security exercises 2015.

stefan2904

stefan2904

Ginko

• Grazbachgasse 33
• Rating: 8.9
• Vegetarian / Vegan Restaurant

Clock Tower

• Kärntner Str. 173
• Rating: 8.9
• American Restaurant

stefan2904

stefan2904