POST Practice
40 points Medium

This website requires authentication, via POST. However, it seems as if someone has defaced our site. Maybe there is still some way to authenticate? http://165.227.106.113/post.php

Flag
Rating 4.44
5
4
3
2
1

Discussion

curl -d "username=admin&password=71urlkufpsdnlkadsf" http://165.227.106.113/post.php

You don't need to explicitly add "-X POST", because "-d" option posts data by itself.

0
0
Protected
0
Protected
0

curl -X POST http://165.227.106.113/post.php -d "username=admin&password=71urlkufpsdnlkadsf"

0
0
Protected
0

very ez

0

very ez

0
Protected
0
Protected
0

you can solve it different ways i tried curl and running a python script in my terminal (wsl) and both worked and you can use burp-suite also or anything really or even using console in developer tools and making a js script . or even Using an HTML File making a button with a functional js on it so when clicked it'll grab the flag for you. The key here is To be creative solve it different ways and search and understand what you are doing

0