From 5ce2555f957868a0f6a2172bfd90d9d7c8684e44 Mon Sep 17 00:00:00 2001
From: cheeest <e.a.sunduk@gmail.com>
Date: Thu, 3 Apr 2025 22:23:02 +0300
Subject: [PATCH] fix: main-icon

---
 app.py                    |   8 ++++++++
 static/imgs/main_icon.png | Bin 268 -> 502 bytes
 templates/found.html      |   5 +++++
 3 files changed, 13 insertions(+)

diff --git a/app.py b/app.py
index 5e9bb47..ca3bec5 100644
--- a/app.py
+++ b/app.py
@@ -57,6 +57,14 @@ def found():
     session['task1_id'] = id = hex(getrandbits(45))[2:]
     session['task1_flag'] = flag_task1 = f'C4TchFl4g{{{hex(getrandbits(45))[2:]}}}'
     task1_flag(flag_task1, id)
+    if request.method == 'POST':
+        user_flag = request.form['user_flag']
+        if user_flag == flag_task1:
+            return render_template('found.html', flag=flag_task1, success_flag='.')
+        return render_template('found.html', flag=flag_task1, error='Ошибка: неверный флаг!')
+    if flag_task1:
+        return render_template('found.html', flag=flag_task1)
+    abort(404)
     return render_template('found.html')
 
 @app.route("/found-me/task1")
diff --git a/static/imgs/main_icon.png b/static/imgs/main_icon.png
index 72ddc493dc40e303f0afcdfacd1d40f21371e25a..0ec03311c2748ac96c584a603a73d3cd33c9ab6b 100644
GIT binary patch
literal 502
zcmeAS@N?(olHy`uVBq!ia0vp^4j|0I1|(Ny7TyC=jKx9jP7LeL$-D%zH+Z@@hE&XX
zJNsbhVFR8vQMvG<M8>|k4ZIRf$F*c4m-Z{(SRh>RhH38-<^!6wt8%6v+4@V_`@Uvj
zw)_A1;~O7UEnwQc{rvn(>0*`l_VMlfv}A+%L!rzgH$DCS9KO7`%x9I%_x2?{vkR;y
zJX*^=-9tG|m~GL&qvxOa?3f(?D%2)0?)HPH*XK{%`(O?G7rl8JS7+Q|y2rtMfpGyR
zh$zfIus7`R?EdLX-u(XSz4u+zx>t<H|2{O?_~7`o6=n_Hy0Xy+{z?e2T?x~9%6sio
z=jy5kk!)X^z~<-#vD`qLz{Q3KR#hl{bV})+a3`hJ*f%)HtncxnZP~BZ&D8klUTVV%
zvuNcxw*OKkF)7VkPn;2)>3Q!?gZCjpwH@-zhZ>^eKU~TYHeA~FrD0A$h#li@)*T5c
zMoYhiRdD`S?C!}aC|v6Yb*w{5v({RzOI5a)rZ7sqp16$Xf&z~N`v$h&uO7i{0$bzz
zP0|?xZ+|`UD&>UHL>|LK3?&R1P@*pBt$&}XN_3i+wU+IKyQbHQ^-pAW_fFn(;p?@V
llGkT1x7;fkDD|eE@ip6_4bI6QW&k6S!PC{xWt~$(699NR;FACV

literal 268
zcmeAS@N?(olHy`uVBq!ia0vp^3LwnE1|*BCs=fdz#^NA%Cx&(BWL^R}$2?seLn2y}
zb1v!sJb&Q8fds{rBL)HunGQLwOgcxjO74ntroS(X>Ql^DS>!#%^7*|Ow}-+!jMr-?
zYD`;f-4@hf&cg9?mQ=$E69?_non;KV2UjqEuwoGVe#Pgjie-ab!WG5}S%&WFsA<d+
zs*1Y8GJ$*!-*jzdoI}iH4A>7G$gnghl6B}WN+@VQu!1?EVcJuMdto2*mOm{xeNnb?
zo<VE)OM&#o!kvGc?)sfJ)LERiE<whm_OS5#bG#kQ0hbOqSR@_TtjOSV!u+j9?ad0H
Pj~F~%{an^LB{Ts5sV-w-

diff --git a/templates/found.html b/templates/found.html
index 3f7c8d2..747e214 100644
--- a/templates/found.html
+++ b/templates/found.html
@@ -11,5 +11,10 @@
             <input class="inpt" type="text" name="user_flag" style="width: 100%; height: 1.25rem; margin: 0">
             <input type="submit" value="Submit" class="btn1" style="margin-top: 1.25rem">
     </div>
+    <div id="popup" class="sql-guide capsule-window">
+            <p class="simpletext"style="text-align: left"><a class="hltext" href="https://book.hacktricks.wiki/en/pentesting-web/sql-injection/index.html?highlight=sql%20inje#what-is-sql-injection">SQL-инъекция</a> - уязвимость системы, позволяющая пользователю ввести вредоносный код в SQL-запрос.<br />
+
+            <span class="close-btn usable-context" onclick="hidePopup()">скрыть</span>
+        </div>
 </div>
 {% endblock %}
\ No newline at end of file