Post

IntroToBurp

Try here to find the flag

Posted Updated
By Nutavut Eakvigran
1 min read

image-1739

image-1740

Use Burp Suite to intercept the request. The POST request includes an OTP in its body. Removing the OTP from the request body bypassed the check in this challenge.

image-1742

This gives you access to /dashboard.

image-1741

DONE!!

CyLab(picoCTF), Web Exploitation
easy web-exploitation
This post is licensed under CC BY 4.0 by the author.