# context.log_level = 'debug' p = remote("*.*.*.*", *)
result = "flag{" result2 = "flag{" while1: for padding in xrange(13, 15): if result != result2: result2 = result break dic = [] print"Padding: " + str(padding) for y inrange(33, 127): flag = "".join([chr(0x0b + x) for x in xrange(padding)]) + ", flag: " + result + chr(y) p.sendline(flag) len1 = len(p.recvline().strip()) iflen(dic) > 0and len1 notin dic: dic.append(len1) result += chr(33 + dic.index(min(dic))) print result break else: dic.append(len1) if result.endswith("}"): break