一直自动跳转/die/页面,抓包尝试
查看chase目录
后面就一路找,但是没找到什么有用的信息
看了wp才知道,关键点在js文件中
/static/js/door.js
最后来到static/js/fight.js
重新排序flag即可
from itertools import permutations
flag = ["{hey", "_boy", "aaaa", "s_im", "ck!}", "_baa", "aaaa", "pctf"]
item = permutations(flag)
for i in item:
k = ''.join(list(i))
if k.startswith('pctf{hey_boys') and k[-1] == '}':
print(k)