From 7ac4d024a89a5478d818e2f14d8eefa80eb0457e Mon Sep 17 00:00:00 2001 From: xwings Date: Thu, 26 Mar 2020 01:16:35 +0800 Subject: [PATCH] test script typo --- .gitignore | 2 ++ tests/test_pe_nu.py | 67 ++------------------------------------------- 2 files changed, 5 insertions(+), 64 deletions(-) diff --git a/.gitignore b/.gitignore index b44a4ccc..452f3f7a 100644 --- a/.gitignore +++ b/.gitignore @@ -21,6 +21,8 @@ jexamples/ # dont keep raw malware wannacry.bin +UselessDisk.bin + *.no.py .gitkeep diff --git a/tests/test_pe_nu.py b/tests/test_pe_nu.py index fb9ccb97..1e4c8c8e 100644 --- a/tests/test_pe_nu.py +++ b/tests/test_pe_nu.py @@ -153,67 +153,6 @@ def test_pe_win_x86_crackme(): our_sandbox(["../examples/rootfs/x86_windows/bin/Easy_CrackMe.exe"], "../examples/rootfs/x86_windows") -def test_pe_win_x86_bruteforcecrackme(): - class StringBuffer: - def __init__(self): - self.buffer = b'' - - def read(self, n): - ret = self.buffer[:n] - self.buffer = self.buffer[n:] - return ret - - def read_all(self): - ret = self.buffer - self.buffer = b'' - return ret - - def write(self, string): - self.buffer += string - return len(string) - - def instruction_count(ql, address, size, user_data): - user_data[0] += 1 - - def get_count(flag): - ql = Qiling(["../examples/rootfs/x86_windows/bin/crackme.exe"], "../examples/rootfs/x86_windows", libcache=True, - output="off") - ql.stdin = StringBuffer() - ql.stdout = StringBuffer() - ql.stdin.write(bytes("".join(flag) + "\n", 'utf-8')) - count = [0] - ql.hook_code(instruction_count, count) - ql.run() - ql.nprint(ql.stdout.read_all().decode('utf-8'), end='') - ql.nprint(" ============ count: %d ============ " % count[0]) - del ql - return count[0] - - def solve(): - # BJWXB_CTF{C5307D46-E70E-4038-B6F9-8C3F698B7C53} - prefix = list("BJWXB_CTF{C5307D46-E70E-4038-B6F9-8C3F698B7C") - flag = list("\x00" * 100) - base = get_count(prefix + flag) - i = 0 - - try: - for i in range(len(flag)): - for j in "53}": - flag[i] = j - data = get_count(prefix + flag) - if data > base: - base = data - print("\n\n\n>>> FLAG: " + "".join(prefix + flag) + "\n\n\n") - break - if flag[i] == "}": - break - print("SOLVED!!!") - except KeyboardInterrupt: - print("STOP: KeyboardInterrupt") - - solve() - - if __name__ == "__main__": test_pe_win_x8664_hello() test_pe_win_x86_hello() @@ -224,7 +163,7 @@ if __name__ == "__main__": test_pe_win_x8664_fls() test_pe_win_x86_getlasterror() test_pe_win_x86_regdemo() - test_pe_win_x86_crackme() test_pe_win_x8664_customapi() - test_pe_win_x86_uselessdisk - # test_pe_win_x86_bruteforcecrackme() + test_pe_win_x86_uselessdisk() + test_pe_win_x86_crackme() +