I’m using a bash script with curl, md5sum and egrep… yet I’m unable to make it on time!
(and yes… I’m including the cookies in the POST)
This is the time it takes me to get the initial page:
root@chromeos:/# time curl -s docker.hackthebox.eu:30638 -o /dev/null
real 0m0.108s
user 0m0.012s
sys 0m0.007s
The whole thing finishes in 0.083s but it looks like it’s not fast enough!
root@chromeos:/# time /emde.sh
* Rebuilt URL to: http://docker.hackthebox.eu:30638/
* Trying 139.59.202.58...
* TCP_NODELAY set
* Connected to docker.hackthebox.eu (139.59.202.58) port 30638 (#0)
> POST / HTTP/1.1
> Host: docker.hackthebox.eu:30638
> User-Agent: curl/7.58.0
> Accept: */*
> Cookie: PHPSESSID=4lt1dtmf0a6s7b4lb6brak2j96
> Content-Length: 37
> Content-Type: application/x-www-form-urlencoded
>
* upload completely sent off: 37 out of 37 bytes
< HTTP/1.1 200 OK
< Date: Wed, 19 Feb 2020 00:11:37 GMT
< Server: Apache/2.4.18 (Ubuntu)
< Expires: Thu, 19 Nov 1981 08:52:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate
< Pragma: no-cache
< Vary: Accept-Encoding
< Content-Length: 419
< Content-Type: text/html; charset=UTF-8
<
[...]
<h3 align='center'>ursMxuZHh1OLGjp4TEKI</h3><p align='center'>Too slow!</p><center>[...]
* Connection #0 to host docker.hackthebox.eu left intact
input was: OfrcSp4to0zF95l1j9X9 , hash was 072dbd734eb7d40e17d9b3170b577de9
real 0m0.083s
user 0m0.023s
sys 0m0.017s
I also tried a couple of online bash interpreters (the ones that recognize curl) and got the same result:
https://repl.it/languages/bash
Anyone has been able to capture the flag for this challenge today?