simplify secret_key

pwncollege · Sep 1, 2024 · 361811a · 361811a
1 parent e501cb2
commit 361811a
Show file tree

Hide file tree

Showing 8 changed files with 8 additions and 8 deletions.
diff --git a/web-security/cmdi-ls-boss/server b/web-security/cmdi-ls-boss/server
@@ -39,5 +39,5 @@ def challenge():
         """
 
 os.setuid(os.geteuid())
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))
diff --git a/web-security/cmdi-ls-pipe/server b/web-security/cmdi-ls-pipe/server
@@ -28,5 +28,5 @@ def challenge():
         """
 
 os.setuid(os.geteuid())
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))
diff --git a/web-security/cmdi-ls-quote/server b/web-security/cmdi-ls-quote/server
@@ -28,5 +28,5 @@ def challenge():
         """
 
 os.setuid(os.geteuid())
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))
diff --git a/web-security/cmdi-ls-semicolon/server b/web-security/cmdi-ls-semicolon/server
@@ -28,5 +28,5 @@ def challenge():
         """
 
 os.setuid(os.geteuid())
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))
diff --git a/web-security/cmdi-touch-blind/server b/web-security/cmdi-touch-blind/server
@@ -27,5 +27,5 @@ def challenge():
         """
 
 os.setuid(os.geteuid())
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))
diff --git a/web-security/level-1/server b/web-security/level-1/server
@@ -19,5 +19,5 @@ def challenge(path="index.html"):
     except Exception as e:
         flask.abort(500, requested_path + ":" + str(e))
 
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))
diff --git a/web-security/level-2/server b/web-security/level-2/server
@@ -28,5 +28,5 @@ def challenge():
         """
 
 os.setuid(os.geteuid())
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))
diff --git a/web-security/path-traversal-2/server b/web-security/path-traversal-2/server
@@ -19,5 +19,5 @@ def challenge(path="index.html"):
     except Exception as e:
         flask.abort(500, requested_path + ":" + str(e))
 
-app.secret_key = open("/flag").read().strip()
+app.secret_key = os.urandom(8)
 app.run("challenge.localhost", int(os.environ.get("HTTP_PORT", 80)))