def encript_data(url, title, body): #p = requests.post(url, data={ 'title':title, 'body':body }, proxies={'http':'http://127.0.0.1:8080'}, allow_redirects=False) p = requests.post(url, data={ 'title': title, 'body': body }, allow_redirects=False) hash_ = extract_hash(p.text) dhash = common.b64d(hash_) return dhash
import common import sys import binascii s = sys.argv[1] print(len(s)) print(s) d = common.b64d(s) print(len(d)) print(binascii.hexlify(d)) print(d) try: print(d.decode('utf8')) except Exception as e: pass
body = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" hashes = [] for i in range(1, 4): p = requests.post("http://35.227.24.107/51980f8ea3/", data={ 'title': title, 'body': body }, proxies={'http': 'http://127.0.0.1:8080'}, allow_redirects=False) if not p.ok: print('error generando hash : ') print(p.text) print(p.status_code) continue html = p.text m = rhash.search(html) if not m: print('algo saliĆ³ mal extrayendo el hash') continue hash_ = m.group(1) hashes.append(hash_) print(hashes) for i, h in enumerate(hashes): b = common.b64d(h) with open(f'h{i}.bin', 'bw') as f: f.write(b)
import sys import binascii from common import b64d, desencriptar hash_ = "oUB6rGtE!MrULoYPlTGggbSADE33kFcPCpgyB2v3cqOdpumeP7pnUWOR7!7UZk!Qfd4cB72JAQTZuOjK5HXBFO2t5eii5Vsl6LZFhsECZNCIf1qLan1NDVydYkI2oF-h!YmS5rhwATnnaqy7ctKSlIPwgt1s9!KmloPGKbeJhAhITswuDPQd2QVarxIO2L2YTnt6w8E-8Qksyo-eqaJsnQ~~" d_ = b64d(hash_) print(binascii.hexlify(d_)) deadbeefcafe0123 feedface456789ab ---- decrypt ----> 1234567x x ^0x23 == 0x7 0x1
#for p in range(1,4): data = [0x41 for a in range(0, 34)] bdata = bytes(data) p = requests.post("http://35.227.24.107/51980f8ea3/", data={ 'title': '', 'body': bdata }, proxies={'http': 'http://127.0.0.1:8080'}, allow_redirects=False) print(p.text) hash_ = utils.extract_hash(p.text) dhash = common.b64d(hash_) lhash = list(dhash) tamano = len(dhash) print('hash:') utils.print_hash(dhash) inicio = tamano - ((16 * 2) + 1) fin = tamano - 16 lblock = lhash[inicio:fin] solucion = {} for h in range(15, 0, -1): for i in range(0, 256): lblock[h] = i