We have isolated the authentication procedure to another box using RPC. The credential information between RPC is encrypted with AES-CBC, so it will be secure enough from sniffing. I believe no one can login as admin but me :p
Download : http://pwnable.kr/bin/client.py Download : http://pwnable.kr/bin/server.py
Running at : nc pwnable.kr 9006
nc pwnable.kr 9006
Last updated 3 years ago