test script typo

This commit is contained in:
xwings
2020-03-26 01:16:35 +08:00
parent 9a2185e072
commit 7ac4d024a8
2 changed files with 5 additions and 64 deletions
+2
View File
@@ -21,6 +21,8 @@ jexamples/
# dont keep raw malware
wannacry.bin
UselessDisk.bin
*.no.py
.gitkeep
+3 -64
View File
@@ -153,67 +153,6 @@ def test_pe_win_x86_crackme():
our_sandbox(["../examples/rootfs/x86_windows/bin/Easy_CrackMe.exe"], "../examples/rootfs/x86_windows")
def test_pe_win_x86_bruteforcecrackme():
class StringBuffer:
def __init__(self):
self.buffer = b''
def read(self, n):
ret = self.buffer[:n]
self.buffer = self.buffer[n:]
return ret
def read_all(self):
ret = self.buffer
self.buffer = b''
return ret
def write(self, string):
self.buffer += string
return len(string)
def instruction_count(ql, address, size, user_data):
user_data[0] += 1
def get_count(flag):
ql = Qiling(["../examples/rootfs/x86_windows/bin/crackme.exe"], "../examples/rootfs/x86_windows", libcache=True,
output="off")
ql.stdin = StringBuffer()
ql.stdout = StringBuffer()
ql.stdin.write(bytes("".join(flag) + "\n", 'utf-8'))
count = [0]
ql.hook_code(instruction_count, count)
ql.run()
ql.nprint(ql.stdout.read_all().decode('utf-8'), end='')
ql.nprint(" ============ count: %d ============ " % count[0])
del ql
return count[0]
def solve():
# BJWXB_CTF{C5307D46-E70E-4038-B6F9-8C3F698B7C53}
prefix = list("BJWXB_CTF{C5307D46-E70E-4038-B6F9-8C3F698B7C")
flag = list("\x00" * 100)
base = get_count(prefix + flag)
i = 0
try:
for i in range(len(flag)):
for j in "53}":
flag[i] = j
data = get_count(prefix + flag)
if data > base:
base = data
print("\n\n\n>>> FLAG: " + "".join(prefix + flag) + "\n\n\n")
break
if flag[i] == "}":
break
print("SOLVED!!!")
except KeyboardInterrupt:
print("STOP: KeyboardInterrupt")
solve()
if __name__ == "__main__":
test_pe_win_x8664_hello()
test_pe_win_x86_hello()
@@ -224,7 +163,7 @@ if __name__ == "__main__":
test_pe_win_x8664_fls()
test_pe_win_x86_getlasterror()
test_pe_win_x86_regdemo()
test_pe_win_x86_crackme()
test_pe_win_x8664_customapi()
test_pe_win_x86_uselessdisk
# test_pe_win_x86_bruteforcecrackme()
test_pe_win_x86_uselessdisk()
test_pe_win_x86_crackme()