Skip to content

Instantly share code, notes, and snippets.

@vqhuy

vqhuy/crypto4000-solver.py

Last active August 3, 2016 16:25
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save vqhuy/c8d715ba5c10b8a1a9ab to your computer and use it in GitHub Desktop.
Save vqhuy/c8d715ba5c10b8a1a9ab to your computer and use it in GitHub Desktop.
Download ZIP
crypto 4000 solver - SV ATTT 2015
Raw
crypto4000-solver.py
'''
./hash_extender --data VVNFUk5BTUU9YWRtaW4AQmlvZ3JhcGh5PWFkbWkAUk9MRT0w --secret 16 --append AFJPTEU9MQ== --signature 89542f421e21de8edfcf39ec0e88b29b --format md5
Type: md5
Secret length: 16
New signature: 8c8a2d7f702abae1fb78766aa8694ebd
New string: 56564e46556b3542545555395957527461573441516d6c765a334a68634768355057466b62576b41556b394d525430778000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000041464a50544555394d513d3d
'''
from pwn import *
s = remote("192.168.1.101", 31330)
print s.recv()
s.send("2\n")
print s.recv()
payload = "\x56\x56\x4e\x46\x55\x6b\x35\x42\x54\x55\x55\x39\x59\x57\x52\x74\x61\x57\x34\x41\x51\x6d\x6c\x76\x5a\x33\x4a\x68\x63\x47\x68\x35\x50\x57\x46\x6b\x62\x57\x6b\x41\x55\x6b\x39\x4d\x52\x54\x30\x77\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x41\x46\x4a\x50\x54\x45\x55\x39\x4d\x51\x3d\x3d"
payload += "8c8a2d7f702abae1fb78766aa8694ebd\n"
s.send(payload)
print s.recv()
print s.recv()
s.send("3\n")
print s.recv()
print s.recv()
s.close()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment