Created
January 23, 2022 19:56
-
-
Save GordonOus/768c3af1b8cde1546b2982db081017da to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import math | |
from random import randint, seed | |
from time import time, process_time | |
import string | |
strchr = lambda x: chr(x) | |
strbyt = lambda x, y=0: ord(x[y]) | |
bitlst = lambda x, y: x << y | |
bitrst = lambda x, y: x >> y | |
bitext = lambda x, y, z=1: bitrst(x, y) & int(math.pow(2, z) - 1) | |
bitxor = lambda x, y: x ^ y | |
bitbor = lambda x, y: x | y | |
btest = lambda x, y: (x & y) != 0 | |
mthrnd = lambda x, y: randint(x, y) | |
mthrsd = lambda x: seed(x) | |
osltim = lambda: int(time()) | |
oslclk = lambda: process_time() | |
FL_NEGATE = bitlst(1, 1) | |
FL_UNUSED3 = bitlst(1, 2) | |
FL_XORBY6B = bitlst(1, 3) | |
FL_XORBY3E = bitlst(1, 4) | |
FL_UNUSED2 = bitlst(1, 5) | |
FL_SWAPBYTES = bitlst(1, 6) | |
FL_UNUSED1 = bitlst(1, 7) | |
currtime = osltim() | |
while True: | |
if osltim() - currtime != 0: | |
break | |
mthrsd(osltim() + oslclk() * 1000) | |
def ValidateChar(char): | |
if type(char) is str and len(char) == 1: | |
char = strbyt(char) | |
return char | |
def GenerateFlag(): | |
finalflag = 0 | |
if mthrnd(0, 1) == 1: | |
finalflag = bitbor(finalflag, FL_SWAPBYTES) | |
if mthrnd(0, 1) == 1: | |
finalflag = bitbor(finalflag, FL_NEGATE) | |
if mthrnd(0, 1) == 1: | |
finalflag = bitbor(finalflag, FL_XORBY6B) | |
if mthrnd(0, 1) == 1: | |
finalflag = bitbor(finalflag, FL_XORBY3E) | |
if mthrnd(0, 1) == 1: | |
finalflag = bitbor(finalflag, FL_UNUSED3) | |
if mthrnd(0, 1) == 1: | |
finalflag = bitbor(finalflag, FL_UNUSED2) | |
if mthrnd(0, 1) == 1: | |
finalflag = bitbor(finalflag, FL_UNUSED1) | |
return finalflag | |
def CheckFlag(f, flag): | |
return btest(f, flag) | |
def ESwapChar(char): | |
char = ValidateChar(char) | |
THIS_MSB = bitext(char, 4, 4) | |
THIS_LSB = bitext(char, 0, 4) | |
return strchr(bitbor(bitxor(THIS_MSB, 0x0D), bitxor(bitlst(THIS_LSB, 4), 0xB0))) | |
def XorBy6B(char): | |
char = ValidateChar(char) | |
return strchr(bitxor(char, 0x6B)) | |
def XorBy3E(char): | |
char = ValidateChar(char) | |
return strchr(bitxor(char, 0x3E)) | |
def NegateChar(char): | |
char = ValidateChar(char) | |
return strchr(255 - char) | |
def EncryptCharacter(char): | |
char = ValidateChar(char) | |
flag = GenerateFlag() | |
if CheckFlag(flag, FL_SWAPBYTES): | |
char = ESwapChar(char) | |
if CheckFlag(flag, FL_NEGATE): | |
char = NegateChar(char) | |
if CheckFlag(flag, FL_XORBY6B): | |
char = XorBy6B(char) | |
if CheckFlag(flag, FL_XORBY3E): | |
char = XorBy3E(char) | |
return char, flag | |
output = [108,182,82,176,167,158,69,222,39,102,234,14,241,16,10,218,160,108,76,234,225,224,1,12,97,122,114,90,10,90,250,14,155,80,101,186,97,218,115,218,207,76,190,174,196,84,192,144] | |
chars = output[0::2] | |
flags = output[1::2] | |
xor_byte = 0x4A | |
new_flags = [i ^ xor_byte for i in flags] | |
recovered_flag = [] | |
def attack(char_in_chars, flag, charset): | |
for ch in charset: | |
char = ValidateChar(ch) | |
flag = flag #instead of GenerateFlag(), we already have the result from the output | |
if CheckFlag(flag, FL_SWAPBYTES): | |
char = ESwapChar(char) | |
if CheckFlag(flag, FL_NEGATE): | |
char = NegateChar(char) | |
if CheckFlag(flag, FL_XORBY6B): | |
char = XorBy6B(char) | |
if CheckFlag(flag, FL_XORBY3E): | |
char = XorBy3E(char) | |
char = ValidateChar(char) | |
if char == int(char_in_chars): | |
recovered_flag.append(ch) | |
break | |
else: | |
continue | |
for index,value in enumerate(chars): | |
attack(value,new_flags[index],string.printable) | |
print(''.join([i for i in recovered_flag])) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment