12 lines
1.1 KiB
Plaintext
12 lines
1.1 KiB
Plaintext
|
Ë
|
|||
|
|
›½�jë ã ó\ — d Z ddlZdZ ej « Zd„ Zd„ Zedk( r e« yy)u
|
|||
|
|
|
|||
|
|
WEB skeleton — copy & fill. (p4-team style: read the source, find the
|
|||
|
|
sanitization-order bug, then script the request.)
|
|||
|
|
|
|||
|
|
Key lesson from 'piapiapia': filter() ran AFTER serialize() -> length
|
|||
|
|
manipulation / object injection. Always diff the order of sanitize vs use.
|
|||
|
|
é Nzhttp://challenge.host:portc ó< — t j t dz « } y )Nz/login)ÚSÚgetÚBASE©Úrs útemplates/web_skeleton.pyÚ get_tokenr
|
|||
|
|
s € Ü �‰Œd�X‰oÓ €Aà ó c ón — t j t dz ddi¬« } t | j « y )Nz /endpointz
|
|||
|
|
nickname[]ÚPAYLOAD)Údata)r Úpostr ÚprintÚtextr s r Úexploitr s+ € ô
|
|||
|
|
�‰Œt�kÑ!¨ °yÐ(AˆÓB€AÜ ˆ!�&‰&…Mr Ú__main__)Ú__doc__Úrequestsr ÚSessionr r
|