Firebird - Escape Again

tags: [[CTF]] [[firebird training]]

Firebird Intro CTF - Escape Again (PPC)

http://chal.firebird.sh:32000/Escape_Again/ + "?door=x"

Need to locate the correct "x" number for the next "room" in 30 seconds. Click the right door, but in some case, there can be > 50000 "doors"

import requests
import re

url = "http://chal.firebird.sh:32000/Escape_Again/?door="
cookies = {'PHPSESSID': 'byebye'}
doorNum = 0
for i in range(15):
    r = requests.get(url+str(doorNum), cookies=cookies)
    exit = re.findall('exit.*\d', r.content.decode('ISO-8859-1'))
    if not exit:
        flag = re.findall('flag.*}$', r.content.decode('ISO-8859-1'))
        print(flag)
    else:
        doorNum = re.findall('\d+', exit[0])[0]
        print(doorNum)