为什么请求库无法读取源代码

我一直在为所有Natas挑战编写python脚本。到目前为止，一切都很顺利。

在挑战natas22中，页面上什么都没有，但它为您提供了源代码的链接。从浏览器中，我可以访问源代码(即PHP(并阅读它。但我不能用我的Python脚本做到这一点。这很奇怪，因为我在其他挑战中也这样做过。。。

我还试着给一个用户代理(最新的chrome浏览器(，没有成功。

这是小代码：

import requests
user = 'natas22'
passw = 'chG9fbe1Tq2eWVMgjYYD1MsfIvN461kJ'
url = 'http://%s.natas.labs.overthewire.org/' % user
response = requests.get('http://natas22.natas.labs.overthewire.org/index-source.html', auth=(user, passw))
print(response.text)

哪个返回：

<code><span style="color: #000000">
<br /></span>ml&gt;id="viewsource"&gt;&lt;a&nbsp;href="index-source.html"&gt;View&nbsp;sourcecode&lt;/a&gt;&lt;/div&gt;nbsp;next&nbsp;level&nbsp;are:&lt;br&gt;";l.js"&gt;&lt;/script&gt;
</code>

但事实上，它本应回归：

<?  session_start(); 
if(array_key_exists("revelio", $_GET)) { 
// only admins can reveal the password 
if(!($_SESSION and array_key_exists("admin", $_SESSION) and $_SESSION["admin"] == 1)) { 
header("Location: /"); 
}  }  ?> 

<html>  <head>  <!-- This stuff in the header has nothing to do with the level -->  <link rel="stylesheet" type="text/css" href="http://natas.labs.overthewire.org/css/level.css">  <link rel="stylesheet" href="http://natas.labs.overthewire.org/css/jquery-ui.css" />  <link rel="stylesheet" href="http://natas.labs.overthewire.org/css/wechall.css" />  <script src="http://natas.labs.overthewire.org/js/jquery-1.9.1.js"></script>  <script src="http://natas.labs.overthewire.org/js/jquery-ui.js"></script>  <script src=http://natas.labs.overthewire.org/js/wechall-data.js></script><script src="http://natas.labs.overthewire.org/js/wechall.js"></script>  <script>var wechallinfo = { "level": "natas22", "pass": "<censored>" };</script></head>  <body>  <h1>natas22</h1>  <div id="content"> 
<? 
if(array_key_exists("revelio", $_GET)) { 
print "You are an admin. The credentials for the next level are:<br>"; 
print "<pre>Username: natas23n"; 
print "Password: <censored></pre>"; 
}  ?> 
<div id="viewsource"><a href="index-source.html">View sourcecode</a></div>  </div>  </body>  </html>

为什么它会这样？我很好奇，找不到

如果你想要从浏览器尝试的url：

网址：http://natas22.natas.labs.overthewire.org/index-source.html
用户名：natas22
密码：chG9fbe1Tq2eWVMgjYYD1MsfInvN461kJ

您的代码似乎很好。源代码使用r而不是n，因此大部分代码都隐藏在终端中。

您可以使用response.content而不是response.test来查看：

import requests
user = 'natas22'
passw = 'chG9fbe1Tq2eWVMgjYYD1MsfIvN461kJ'
url = 'http://%s.natas.labs.overthewire.org/' % user
response = requests.get('http://natas22.natas.labs.overthewire.org/index-source.html', auth=(user, passw))
print(response.content)

尝试：

import requests
user = 'natas22'
passw = 'chG9fbe1Tq2eWVMgjYYD1MsfIvN461kJ'
url = 'http://%s.natas.labs.overthewire.org/' % user
response = requests.get('http://natas22.natas.labs.overthewire.org/index-source.html', auth=(user, passw))
print(response.text.replace('r', 'n'))

这也起作用：

import requests
user = 'natas22'
passw = 'chG9fbe1Tq2eWVMgjYYD1MsfIvN461kJ'
url = 'http://%s.natas.labs.overthewire.org/' % user
response = requests.get('http://natas22.natas.labs.overthewire.org/index-source.html', auth=(user, passw))
print(response.content.decode('utf8').replace('r', 'n'))

相关内容

最新更新

热门标签：