Challenge - HTBank HackTheBox
by LOOOP - Saturday January 20, 2024 at 07:43 AM
#11
Parameter Pollution is really straight forward but how to bypass authentication?
xclow3n:xCl0w3n1337!! does not work
Reply
#12
(Feb 05, 2024, 01:47 PM)Axura Wrote:
(Feb 02, 2024, 06:53 PM)Steward Wrote: Parameter Pollution is really straight forward but how to bypass authentication?
xclow3n:xCl0w3n1337!! does not work

Tips: It's simpler than you thought. That's why it's `easy` level

Indeed, thank you, I missed the word "register" somehow and tried to bypass auth instead of just reg new user
Reply
#13
ye am passed, keywork:parameter pollution +hint Note about the amount reading handling function between python and php
Reply
#14
hint
Iterate the deposit amount and maybe try 1337
HackTheBox - 99% Done - Get any flags or pwn you need
https://xan6.mysellix.io/
Reply
#15
wtf am i doing wrong
Reply
#16
(Jan 23, 2024, 11:32 AM)rat Wrote: it's super simple skid parameter pollution

 Can you give more hint please?
Reply
#17
(Feb 12, 2024, 11:01 AM)am4na Wrote:
(Jan 23, 2024, 11:32 AM)rat Wrote: it's super simple skid parameter pollution

 Can you give more hint please?

Research what is skid parameter pollution? You can also use tools such as mitm proxy with zaproxy. 

Also now the source code is included in the challenge. Try to understand what parameter to pollute, you can also use Burp if you want or script it out...
Reply
#18
(Feb 12, 2024, 11:01 AM)am4na Wrote:
(Jan 23, 2024, 11:32 AM)rat Wrote: it's super simple skid parameter pollution

 Can you give more hint please?

If you're still struggling to solve the challenge. You can watch the video here. https://youtu.be/QXypRX8eOfg
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 10 597 1 hour ago
Last Post: chufoni
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 28 2,825 1 hour ago
Last Post: chufoni
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 375 93,498 1 hour ago
Last Post: Johe
  [FREE] HackTheBox Dante - complete writeup written by Tamarisk Tamarisk 604 92,606 1 hour ago
Last Post: Johe
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 7,994 3 hours ago
Last Post: char0n1507

Forum Jump:


 Users browsing this forum: 1 Guest(s)