def encript_data(url, title, body):
#p = requests.post(url, data={ 'title':title, 'body':body }, proxies={'http':'http://127.0.0.1:8080'}, allow_redirects=False)
p = requests.post(url,
data={
'title': title,
'body': body
},
allow_redirects=False)
hash_ = extract_hash(p.text)
dhash = common.b64d(hash_)
return dhash
import common
import sys
import binascii
s = sys.argv[1]
print(len(s))
print(s)
d = common.b64d(s)
print(len(d))
print(binascii.hexlify(d))
print(d)
try:
print(d.decode('utf8'))
except Exception as e:
pass
body = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
hashes = []
for i in range(1, 4):
p = requests.post("http://35.227.24.107/51980f8ea3/",
data={
'title': title,
'body': body
},
proxies={'http': 'http://127.0.0.1:8080'},
allow_redirects=False)
if not p.ok:
print('error generando hash : ')
print(p.text)
print(p.status_code)
continue
html = p.text
m = rhash.search(html)
if not m:
print('algo salió mal extrayendo el hash')
continue
hash_ = m.group(1)
hashes.append(hash_)
print(hashes)
for i, h in enumerate(hashes):
b = common.b64d(h)
with open(f'h{i}.bin', 'bw') as f:
f.write(b)
import sys import binascii from common import b64d, desencriptar hash_ = "oUB6rGtE!MrULoYPlTGggbSADE33kFcPCpgyB2v3cqOdpumeP7pnUWOR7!7UZk!Qfd4cB72JAQTZuOjK5HXBFO2t5eii5Vsl6LZFhsECZNCIf1qLan1NDVydYkI2oF-h!YmS5rhwATnnaqy7ctKSlIPwgt1s9!KmloPGKbeJhAhITswuDPQd2QVarxIO2L2YTnt6w8E-8Qksyo-eqaJsnQ~~" d_ = b64d(hash_) print(binascii.hexlify(d_)) deadbeefcafe0123 feedface456789ab ---- decrypt ----> 1234567x x ^0x23 == 0x7 0x1
#for p in range(1,4):
data = [0x41 for a in range(0, 34)]
bdata = bytes(data)
p = requests.post("http://35.227.24.107/51980f8ea3/",
data={
'title': '',
'body': bdata
},
proxies={'http': 'http://127.0.0.1:8080'},
allow_redirects=False)
print(p.text)
hash_ = utils.extract_hash(p.text)
dhash = common.b64d(hash_)
lhash = list(dhash)
tamano = len(dhash)
print('hash:')
utils.print_hash(dhash)
inicio = tamano - ((16 * 2) + 1)
fin = tamano - 16
lblock = lhash[inicio:fin]
solucion = {}
for h in range(15, 0, -1):
for i in range(0, 256):
lblock[h] = i