DASCTF 2023 & 0X401七月暑期挑战赛 web题 EzFlask

最新推荐文章于 2024-05-23 22:07:18 发布

W3nd4L0v3

最新推荐文章于 2024-05-23 22:07:18 发布

阅读量218

点赞数 1

分类专栏： CTF DASCTF 文章标签： web安全 php

本文链接：https://blog.csdn.net/m0_63138919/article/details/132591908

版权

CTF 同时被 2 个专栏收录

24 篇文章 0 订阅

订阅专栏

DASCTF

2 篇文章 0 订阅

订阅专栏

EzFlask

看源码，有注册和登入两个路由

mport uuid

from flask import Flask, request, session
from secret import black_list
import json

app = Flask(__name__)
app.secret_key = str(uuid.uuid4())

def check(data):
    for i in black_list:
        if i in data:
            return False
    return True

def merge(src, dst):
    for k, v in src.items():
        if hasattr(dst, '__getitem__'):
            if dst.get(k) and type(v) == dict:
                merge(v, dst.get(k))
            else:
                dst[k] = v
        elif hasattr(dst, k) and type(v) == dict:
            merge(v, getattr(dst, k))
        else:
            setattr(dst, k, v)

class user():
    def __init__(self):
        self.username = ""
        self.password = ""
        pass
    def check(self, data):
        if self.username == data['username'] and self.password == data['password']:
            return True
        return False

Users = []

@app.route('/register',methods=['POST'])
def register():
    if request.data:
        try:
            if not check(request.data):
                return "Register Failed"
            data = json.loads(request.data)
            if "username" not in data or "password" not in data:
                return "Register Failed"
            User = user()
            merge(data, User)
            Users.append(User)
        except Exception:
            return "Register Failed"
        return "Register Success"
    else:
        return "Register Failed"

@app.route('/login',methods=['POST'])
def login():
    if request.data:
        try:
            data = json.loads(request.data)
            if "username" not in data or "password" not in data:
                return "Login Failed"
            for user in Users:
                if user.check(data):
                    session["username"] = data["username"]
                    return "Login Success"
        except Exception:
            return "Login Failed"
    return "Login Failed"

@app.route('/',methods=['GET'])
def index():
    return open(__file__, "r").read()

if __name__ == "__main__":
    app.run(host="0.0.0.0", port=5010)

代码解释：

1.导入所需模块：

uuid：用于生成Flask应用程序的随机密钥。
Flask、request和session来自flask包：这些模块用于创建Web应用程序、处理HTTP请求和管理用户会话。
secret中的black_list：假设black_list包含敏感词汇列表。