sch9_ctf/may_ctf
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Upload files to 'tasks/jojo1'

Browse source
This commit is contained in:
dragonmuffin 2023-05-08 11:15:29 +00:00
parent 62848fd04f
commit 4d891799f2
1 changed files with 70 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

70
tasks/jojo1/JoJo_exploit.py Normal file
View file

@ -0,0 +1,70 @@
import websocket as ws
a=open('glags.txt','r').read().split('\n')[:-1]
global c
c=ws.create_connection('wss://jojo1.ctfmay.sch9.ru/ws/')
c.send('b')
print('recieve:',c.recv())
c.send('b')
s=c.recv()
print('recieve:',s)
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
words=[s[s.find('хочу')+5:s.find('чтобы')-1],
s[s.find('чтобы')+6:s.find('а потом')-2],
s[s.find('а потом')+8:s.find('и, будучи')-1],
s[s.find('и, будучи')+33:s.find('тебе,')-1],
s[s.find('пытающийся')+11:s.find('!!!')]]
print('words in phrase:',words)
oidx=[a.index(words[i]) for i in range(5)]
print('indexes in dictionary:',oidx)
c.send('b')
s=c.recv()
print('recieve:',s)
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
words=[s[s.find('хочу')+5:s.find('чтобы')-1],
s[s.find('чтобы')+6:s.find('а потом')-2],
s[s.find('а потом')+8:s.find('и, будучи')-1],
s[s.find('и, будучи')+33:s.find('тебе,')-1],
s[s.find('пытающийся')+11:s.find('!!!')]]
print('words in phrase:',words)
idx=[a.index(words[i]) for i in range(5)]
print('indexes in dictionary:',idx)
d=[(idx[i]-oidx[i])%len(a) for i in range(5)]
print('differences:',d)
for i in range(5):
idx[i]+=d[i]
idx[i]%=len(a)
words[i]=a[idx[i]]
for i in range(1000):
c.send(f'Я хочу { words[0] } чтобы \
{ words[1] }, а потом { words[2] } и, будучи \
победителем, приказать { words[3] } тебе, ДжоДжо\
, так сильно пытающийся { words[4] }!!!')
s=c.recv()
print('recieve:',s)
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('words in phrase:',words)
print('idxs:',idx)
for i in range(5):
idx[i]+=d[i]
idx[i]%=len(a)
words[i]=a[idx[i]]
c.send('h')
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())
print('recieve:',c.recv())