vm_adventure.py

#!/usr/bin/python

import string
import random
import _7amebox
from hashlib import sha1

# proof of work
print """
------------------------------------------------------------------------------------
if not (answer.startswith(prefix) and sha1(answer).hexdigest().endswith('000000')):
    print 'nope'
    exit(-1)
------------------------------------------------------------------------------------
"""
prefix = ''.join(random.sample(string.letters + string.digits, 6))
print 'prefix : {}'.format(prefix)
answer = raw_input('answer : ')
if not (answer.startswith(prefix) and sha1(answer).hexdigest().endswith('000000')):
    print 'nope'
    exit(-1)

firmware = 'pwn_adventure.firm'

emu = _7amebox.EMU()
emu.filesystem.load_file('flag')
for i in range(0, 8):
    emu.filesystem.load_file('stage_{}.map'.format(i))
emu.register.init_register()
emu.init_pipeline()
emu.load_firmware(firmware)
emu.set_mitigation(nx=True)
emu.set_timeout(360)
emu.execute()