BIGFROG

보호되어 있는 글입니다.

and, or이 필터링이므로 &&, ||로 사용 가능

공백을 못쓰니까 %0a로 해결

패스워드를 맞추면 되는 문제 필터는 prob _ . ( ) + 대소문자 구분 X(i옵션) PW를 맞춰야 하므로 blind sqli 길이를 먼저 맞춰야 한다. 이 부분은 파이썬으로 짜는게 빠르다. import requests COOKIE = {'PHPSESSID': ''} url = 'https://los.eagle-jump.org/orc_47190a4d33f675a601f8def32df2583a.php?' for i in range(1,20): query = f"pw=1' or id='admin' and length(pw)={i} %23" if 'Hello admin' in requests.get(url+query, cookies=COOKIE).text: print("password length : ",..

filter : prob _ . ( ) ' " ` +대소문자 구분 X id를 admin으로 바꿔주면 된다. '가 필터링에 걸려있으니 id='admin'은 사용하지 못한다. '를 대신할 수 있는 방법으로 hex값으로 바꿔 넣어줄 수 있다.

with Python # -*- coding: utf-8 -*- # * auto-parsing DB import requests from bs4 import BeautifulSoup import time import csv from selenium import webdriver from selenium.webdriver.common.keys import Keys import os def eliminate_space(string): string = string.replace("\t", "") string = string.replace("\n", "") string = string.replace("\r", "") string = string.replace("\xa0", "") string = string.r..

import copy import numpy as np import math import struct import time B_size = 8 LEN_ROW = 512 def GetImage(f): image = np.empty((0, LEN_ROW)) while True: data = f.read(LEN_ROW) if data == b"": break lst = [] for i in range(LEN_ROW): lst.append(data[i]) image = np.append(image, np.array([lst]), axis=0) return image def DCT8by8(image): global B_size F = np.zeros((LEN_ROW, LEN_ROW)) for i in range(..

from threading import Thread import numpy as np import math import copy import time import struct import random #* n0 : the number of edge that exceeds threshold=150 #* n1 : number of edge(missing or new) def MakeGaussianNoise(input_image,header,original,SNR): global LEN_ROW print("Gaussian") #* Gaussian Noise variance = np.var(input_image) #stddev_noise = math.sqrt(variance/pow(10.0,SNR/10)) st..

tcpserver.py from socket import * import signal import sys def signal_handler(signal, frame): print("signal handler is called.") sys.exit(0) def main(): signal.signal(signal.SIGINT, signal_handler) serverPort = 12000 serverSocket = socket(AF_INET, SOCK_STREAM) serverSocket.bind(('', serverPort)) serverSocket.listen(1) connectionSocket, addr = serverSocket.accept() print("The Server is ready to r..

server.py from socket import * import signal import sys def signal_handler(signal, frame): print("signal handler is called.") sys.exit(0) def main(): signal.signal(signal.SIGINT, signal_handler) serverPort = 12000 serverSocket = socket(AF_INET, SOCK_DGRAM) serverSocket.bind(('', serverPort)) print("The Server is ready to receive.") while True: message, clientAddress = serverSocket.recvfrom(2048)..