djosix / padding_oracle.py Goto Github PK

Sometimes the oracle might return two results that are valid. This script will simply ignore those blocks.
I added the following lines to make the script work in my specific case:


I think it makes sense to iterate over the possible plaintexts if the number of hits is low (2 in this case). I also noticed that the hits array isn't sorted, which would also have solved it in this case:

I reliably get something like: [ERROR] at block[1][0]: expect only one hit, got 0. (skipped)

What does it mean?
The source code says: # something goes wrong here, please check the validator
My oracle function should work correctly - it doesn't raise an exception and I get an expected response.
Maybe on the server side something is messed up.

Maybe some sort of retry could be implemented?