ringzer0.py

#!/usr/bin/env python
# -*- coding: utf-8 -*-
from __future__ import print_function
import os, sys, re, datetime, tempfile
import requests, hashlib
import lxml.html

RZ_URL = 'http://ringzer0team.com'
RZ_START_TIME = datetime.datetime.now()
RZ_VERBOSE = int(os.environ.get('RZ_VERBOSE') or 1) == 1

def _tsout(*objs):
	prefix = '[{0}]'.format(datetime.datetime.now() - RZ_START_TIME)
	print(prefix, *objs, file=sys.stdout)

def _out(*objs):
	print(*objs, file=sys.stdout)

def error(*objs):
	print(*objs, file=sys.stderr)

def output(prefix, info = None):
	if RZ_VERBOSE:
		if info:
			prefix = '{0}: {1}'.format(prefix, info)
		_tsout(prefix)
	elif info:
		_out(info)

def _init(verbose = False):
	global RZ_VERBOSE
	RZ_VERBOSE = verbose

def get_auth():
	username, password = None, None
	if not sys.stdin.isatty():
		lines = sys.stdin.readlines()
		l = len(lines)
		if l == 1:
			p = lines[0].split(' ')
			if len(p) > 1: 
				username = p[0].strip()
				password = p[1].strip()
		elif l > 1:
			username = lines[0].strip()
			password = lines[1].strip()
	else:
		username = raw_input('username: ').strip()
		password = raw_input('password: ').strip()
	if not username or not password:
		_out('error: wrong auth input')
		sys.exit(1)
	return (username, password)

def get_wrapper(html):
	doc = lxml.html.document_fromstring(html)
	return doc.xpath('//div[@class="challenge-wrapper"]')[0]

def get_sections(html, newlines=True, clean=True):
	msg_section = re.compile(r'^\s*-+\s(BEGIN|END)\s([a-z\s]+)\s-+$', re.I)
	wrapper = get_wrapper(html)
	if newlines:
		for br in wrapper.xpath('*//br'):
			br.tail = '\n' + br.tail if br.tail else '\n'
	text = wrapper.text_content()
	sections = {}
	section, title, msg, checksum = 'title', [], [], []
	for s in text.splitlines():
		s = s.lstrip('\r\n').rstrip('\r\n')
		s = s.replace(u'\xa0', ' ')
		if section == 'title' or clean:
			s = s.strip()
		if not s: continue
		mx = re.match(msg_section, s)
		if mx:
			begin = mx.group(1).lower() == 'begin'
			section = mx.group(2).lower() if begin else ''
			continue
		if not section:
			continue
		if not section in sections:
			sections[section] = []
		sections[section].append(s)
	for k in sections.keys():
		sections[k] = os.linesep.join(sections[k])
	return sections

def get_lines(html):
	wrapper = get_wrapper(html)
	lines = []
	for t in wrapper.xpath('text()'):
		v = t.strip()
		if len(v) == 0: continue
		lines.append(v)
	return lines

def get_response(html):
	wrapper, xalert = get_wrapper(html), None
	xnodes = wrapper.xpath('./div[contains(@class, "alert")]')
	if not len(xnodes) > 0:
		xnodes = wrapper.xpath('./div[contains(@class, "flag")]')
	if len(xnodes) > 0:
		xalert = xnodes[0]
	if xalert is not None:
		return xalert.text_content().strip()
	else:
		return '(empty)'

class tmpfile(object):
	def __enter__(self):
		self.fd, self.fn = tempfile.mkstemp()
		return self.fd, self.fn
	
	def __exit__(self, ex_type, ex_value, ex_traceback):
		try: 
			os.close(self.fd)
		except: pass
		os.unlink(self.fn)

def write_bin_file(fd, data):
	f = os.fdopen(fd, 'wb')
	f.write(data)
	f.close()

def get_url(url):
	return RZ_URL + url

def login():
	username, password = get_auth()
	if RZ_VERBOSE: 
		_tsout('logging')
	s = requests.Session()
	payload = {'username':username, 'password':password}
	r = s.post(get_url('/login'), data=payload)
	return s

def open_challenge(s, ch):
	if RZ_VERBOSE: 
		_tsout('reading challenge')
	r = s.get(get_url('/challenges/{0}'.format(int(ch))))
	return r

def read_challenge(s, ch, newlines=True, clean=True):
	r = open_challenge(s, ch)
	sections = get_sections(r.text, newlines=newlines, clean=clean)
	if RZ_VERBOSE:
		for k, v in sections.items():
			_tsout(u'{0}: {1}'.format(k, v))
	return sections

def read_challenge_lines(s, ch):
	r = open_challenge(s, ch)
	lines = get_lines(r.text)
	return lines

def read_challenge_file(s, ch):
	r = open_challenge(s, ch)
	wrapper = get_wrapper(r.text)
	xa = wrapper.xpath('./div[@class="download"]/a')[0]
	link = xa.attrib['href']
	if RZ_VERBOSE: 
		_tsout('reading file {0}'.format(link))
	r = s.get(get_url('{0}'.format(link)), stream=True)
	data = ''
	if r.ok:
		for block in r.iter_content(1024):
			if not block:
				break
			data += block
	if RZ_VERBOSE: 
		_tsout('read file (size={0})'.format(len(data)))
	return data

def submit_challenge(s, ch, answer):
	if RZ_VERBOSE:
		_tsout('submitting challenge solution')
	r = s.get(get_url('/challenges/{0}/{1}'.format(int(ch), answer)))
	response = get_response(r.text)
	return response