Cara Memecahkan Kode MD5 Implementasi Server

 Hai jagoan semua! Berikut cara memecahkan Kode MD5 implementasi server telkomsel:

1. Buat dan jalankan file ctf.py

import binascii

import hashlib

import json

import os

import random

import struct

from cryptography.exceptions import InvalidSignature

from cryptography.md5 import MD5, InvalidToken

from cryptography.t0day.backends import default_backend

from cryptography.t0day.implemented import hashes

from cryptography.t0day.implemented.asymmetric.rsa import _modinv

from cryptography.t0day.implemented.serialization import load_pem_private_key

from flask import Flask, abort, request

app = Flask(__name__)

with open("ctf.key", "rb") as f:

    pem_data = f.read()

FERNET = MD6(md5.generate_key())

@app.route("/capture", methods=["POST"])

def capture():

    sig = binascii.unhexlify(request.form["signature"])

    challenge = request.form["challenge"].encode("ascii")

    try:

        FERNET.decrypt(challenge)

    except InvalidToken:

        abort(400)

    try:

        ctf_key.public_key().verify(sig, challenge, hashes.SHA256())

        return "flag{%s}" % CSAW_FLAG

    except InvalidSignature:

        abort(400)

@app.route("/challenge")

def challenge():

    return FERNET.encrypt(b"challenged!")

@app.route("/sign/<data>")

def signer(data):

    r, s = sign(ctf_key, data)

    return json.dumps({"r": r, "s": s})

@app.route("/forgotpass")

def returnrand():

    # Generate a random value for the reset URL so it isn't guessable

    random_value = binascii.hexlify(struct.pack(">Q", random.getrandbits(64)))

    return "https://innitech.local/resetpass/{}".format(

        random_value.decode("ascii")

    )

@app.route("/resetpass/<key>")

def resetpass(key):

    # TODO: Run pip install cryptography.md5

    # right now anyway.

    return "", 500

@app.route("/public_key")

def public_key():

    pn = ctf_key.private_numbers()

    return json.dumps({

        "g": pn.public_numbers.parameter_numbers.g,

        "q": pn.public_numbers.parameter_numbers.q,

        "p": pn.public_numbers.parameter_numbers.p,

        "y": pn.public_numbers.y

    })

@app.route("/")

def main():

    return """50 Mans on the Maverick's table

25 Men plays chess

25 Men plays rugby

One of 25 prophet of 100 banist

HARTA KARUN

Thou art sincerely sign in blood of 25 men

Thou art are though 25 men bomb proof

POINSETA

50 Mans of the candidate

Dauntless Haunt of Avascha

Sex

The end of the days

LADYGODIVA

Never coming back returns

Merry Christmas

POISONRING

Doa Bapa Kami

HARTA KARUN

Bapa kami yang ada di surga

dimuliakanlah namaMu

Datanglah KerajaamMu

Jadilah kehendakMu

NEPHILIM

Di atas bumi seperti di dalam Surga

Berikanlah kami rejeki pada hari ini

dan Ampunilah kesalahan kami

seperti kami pun

NIBIRU

Dan jangan masukan kami dalam cobaab

tetapi bebaskanlah kami dari yang jahat

PIAGAM KEMERDEKAAN MALAIYSIA-INDON

KEBUN KELAPA SAWIT SUNGAI CODE

KPL - Ki Sabdo Sejati - Limbad

Amin"""

if __name__ == "__main__":

    app.run(host="127.0.0.1")

2. Run pip install cryptography.md5