Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

N parameter decrypting fails when dollar sign is in variable name #75

Closed
azihassan opened this issue May 14, 2024 · 1 comment
Closed

Comments

@azihassan
Copy link
Owner

I ran into a situation where the throttling challenge's name ($la) includes a dollar sign.

XPa(b.C.toString()));Object.assign(a.j,d);"index.m3u8"===a.j.file&&(delete a.j.file,a.path+="/file/index.m3u8");a.B="";a.url="";a.D&&(b=a.get("n"))&&(b=YPa[0](b),a.set("n",b),YPa.length||$la(""))}};

This causes ThrottlingAlgorithm's solve() method to fail because the regular expression looks for alphabetical names only:

    string findChallengeName()
    {
        return javascript.matchOrFail!(`\|\|([a-zA-Z]{3})\(""\)`, false);
    }
@azihassan
Copy link
Owner Author

And then further down in findChallengeImplementation, it fails because the dollar sign isn't escaped.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant