Petit solutionnaire pour le brute force du PIN code.
Selon les spécifications, on peut deviner que le protocole ressemble à ceci:
Kiosque --[VERIFY PIN_CODE]-> Carte Kiosque <-[ Pin Ok? ]-- Carte
| import urllib | |
| import xml.dom.minidom as dom | |
| import sys | |
| import re | |
| #Feeds | |
| url = "http://www.teamalexandriz.org/category/policier/feed/" | |
| #url = "http://www.teamalexandriz.org/category/aventure/feed/" | |
| #url = "http://www.teamalexandriz.org/category/science-fiction/feed/" |
| VAR | |
| byte count | |
| byte A[10] | |
| byte B[10] | |
| byte C[10] | |
| byte D[10] | |
| byte E[10] | |
| byte F[10] | |
| byte G[10] |
| #!/usr/bin/python | |
| """ | |
| Small script to rename image in folder to 'folder.jpg' to comply with XBMC default filename for music album. | |
| Usage : | |
| python folder.py /home/h3xstream/Music/ | |
| """ | |
| import os | |
| import sys |
#Groupes utilisateurs à Montréal
##Programmation
Montreal Python: http://montrealpython.org/
PHP Québec: http://www.phpquebec.org/
Montreal Java: User Group: http://montreal-jug.eventbrite.com/
##Smart card
Wikipedia - Smart card application protocol data unit : Simple reference for the standard APDU structure
ISO 7816-4 - Coding of SW1 and SW2 : Meaning associate to each return code.
##JavaCard development
Writing a Java Card Applet: Tutorial on Oracle website
Here are the Card Manager Keys used for the cards we gave during the competition, so that you can load/delete applets on the card :
MAC_KEY : 20B2734C890D9F043208810E063B25D6 ENC_KEY : 1A1C5481DDF4A91D5AD25352846EFDF1 KEK_KEY : 065F678AC7C5EB46BC0DEA1ECCF1F03C
Make sure you use -keyver 1 and delete the previous applets as follows :
| import java.nio.file.FileSystems | |
| import java.nio.file.Path | |
| import java.nio.file.Paths | |
| import java.nio.file.StandardWatchEventKinds; | |
| import java.nio.file.WatchEvent; | |
| import java.nio.file.WatchKey | |
| import java.nio.file.WatchService; | |
| class FileEvent { | |
| String kind |
| importPackage(org.parosproxy.paros.extension.history); //ExtensionHistory | |
| importPackage(org.parosproxy.paros.control); //Control | |
| extHist = Control.getSingleton().getExtensionLoader().getExtension(ExtensionHistory.NAME) | |
| if (extHist == null) { | |
| println("ExtensionHistory not found.") | |
| exit; | |
| } | |
| // Loop through the history table, printing out the history id and the URL |
| <?xml version="1.0"?> | |
| <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"> | |
| <cross-domain-policy> | |
| <allow-access-from domain="*.ebay.com" secure="false"/> | |
| <allow-access-from domain="*.ebay.au" secure="false"/> | |
| <allow-access-from domain="*.ebay.at" secure="false"/> | |
| <allow-access-from domain="*.ebay.be" secure="false"/> | |
| <allow-access-from domain="*.ebay.ca" secure="false"/> | |
| <allow-access-from domain="*.ebay.com.cn" secure="false"/> | |
| <allow-access-from domain="*.ebay.fr" secure="false"/> |