mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
27 lines
644 B
Python
27 lines
644 B
Python
#!/usr/bin/env python
|
||
# -*- coding: UTF-8 -*-
|
||
"""
|
||
@Desc ：timing attack against Secret
|
||
"""
|
||
from flask import Flask
|
||
from flask import request
|
||
from django.utils.crypto import constant_time_compare
|
||
|
||
app = Flask(__name__)
|
||
|
||
@app.route('/bad', methods = ['POST', 'GET'])
|
||
def bad():
|
||
if request.method == 'POST':
|
||
password = request.form['pwd']
|
||
return password == "1234"
|
||
|
||
@app.route('/good', methods = ['POST', 'GET'])
|
||
def good():
|
||
if request.method == 'POST':
|
||
password = request.form['pwd']
|
||
return constant_time_compare(password, "1234")
|
||
|
||
if __name__ == '__main__':
|
||
app.debug = True
|
||
app.run()
|