Challenge - HTBank HackTheBox
by LOOOP - Saturday January 20, 2024 at 07:43 AM
#11
Parameter Pollution is really straight forward but how to bypass authentication?
xclow3n:xCl0w3n1337!! does not work
Reply
#12
(Feb 05, 2024, 01:47 PM)Axura Wrote:
(Feb 02, 2024, 06:53 PM)Steward Wrote: Parameter Pollution is really straight forward but how to bypass authentication?
xclow3n:xCl0w3n1337!! does not work

Tips: It's simpler than you thought. That's why it's `easy` level

Indeed, thank you, I missed the word "register" somehow and tried to bypass auth instead of just reg new user
Reply
#13
ye am passed, keywork:parameter pollution +hint Note about the amount reading handling function between python and php
Reply
#14
hint
Iterate the deposit amount and maybe try 1337
HackTheBox - 99% Done - Get any flags or pwn you need
https://xan6.mysellix.io/
Reply
#15
wtf am i doing wrong
Reply
#16
(Jan 23, 2024, 11:32 AM)rat Wrote: it's super simple skid parameter pollution

 Can you give more hint please?
Reply
#17
(Feb 12, 2024, 11:01 AM)am4na Wrote:
(Jan 23, 2024, 11:32 AM)rat Wrote: it's super simple skid parameter pollution

 Can you give more hint please?

Research what is skid parameter pollution? You can also use tools such as mitm proxy with zaproxy. 

Also now the source code is included in the challenge. Try to understand what parameter to pollute, you can also use Burp if you want or script it out...
Reply
#18
(Feb 12, 2024, 11:01 AM)am4na Wrote:
(Jan 23, 2024, 11:32 AM)rat Wrote: it's super simple skid parameter pollution

 Can you give more hint please?

If you're still struggling to solve the challenge. You can watch the video here. https://youtu.be/QXypRX8eOfg
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] CPTS 12 FLAGS pulsebreaker 68 1,916 4 hours ago
Last Post: VictorPipeau
  [FREE] HackTheBox Dante - complete writeup written by Tamarisk Tamarisk 601 91,514 4 hours ago
Last Post: VictorPipeau
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 371 92,790 5 hours ago
Last Post: phannguyenbaouy1
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 21 2,604 9 hours ago
Last Post: popoler
  Hack the box Pro Labs, VIP, VIP+ 1 month free Method RedBlock 23 2,246 Yesterday, 02:10 PM
Last Post: kkkato

Forum Jump:


 Users browsing this forum: 1 Guest(s)