Inc0gnito 2015 anti-hexray exponly

import paramiko
import string
# ssh anti_hexray@ssh.inc0gnito.com anti_hexray
# ctf.inc0gnito.com Inc0gnito CTF reversing 100pts Anti-Hexray
 
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh.connect("ssh.inc0gnito.com",
             username = "anti_hexray",
             password = "anti_hexray")
 
flag = ""
 
while len(flag) != 17: # no infinite loop :(
    for i in string.printable:
        p  = "/home/anti_hexray/anti_hexray \""
        p += flag + i
        p += "\" ; echo $?"
 
        result = ssh.exec_command(p)[1].readlines()
        # exec_command = stdin, stdout, stderr
 
        if result:
            if result[0] == "0\n":
                print flag
                flag += i
                break
 
print "\nLast flag is " + flag
# IcEwAll&Inc0gnito

paramiko 써봤음. ssh접속 라이브러리 라는데 좋음.

원래 len(flag) != 17로 안하고 무한루프 돌려서 함

그냥 어느정도 플래그인거 같을때 끊어버리면 됨

anti_hexray