hackburger.ee File search Write up

hackburger.ee File search Write up

by ch4n3 at BoB 6th, Demon

fun challenge for me

to solve this, go http://burger.laboratorium.ee:8004/

Just searching site?

I didn't know what it does. 

To configure this, i made it. https://github.com/chaneyoon/wargames/blob/master/hackburger.ee/File%20search/test.py

#!/usr/bin/python
# coding: utf-8
# made by ch4n3

from requests import post
import string
from bs4 import BeautifulSoup

url = 'http://burger.laboratorium.ee:8004/'
search_string = string.ascii_lowercase + string.digits

for character in search_string:
    data = {'query': character}
    content = post(url, data=data).content

    soup = BeautifulSoup(content, 'html.parser')
    result_list = soup.find_all('li')


    print "{0} : ".format(character),

    for result in result_list:
        for content in result.contents:
            print "{0} ".format(content.decode('utf-8')),

    print

print
print "done"

i got something by this. 

"File searcher do search the text in the files"

So, getting file content, you should make some scripts.

https://github.com/chaneyoon/wargames/blob/master/hackburger.ee/File%20search/getFlag.py

And i made it. 

If you run this script, you can get flag

9reat. the flag is c82584c307421228a3c5c5e4dc6a3ea31859975e