Skip to content

Instantly share code, notes, and snippets.

@saru2017

saru2017/http06_form.php

Last active June 15, 2019 01:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save saru2017/9ae5824674666c9866527a9dc65a8500 to your computer and use it in GitHub Desktop.
Save saru2017/9ae5824674666c9866527a9dc65a8500 to your computer and use it in GitHub Desktop.
Download ZIP
CTF: http06_form.php
Raw
http06_form.php
<?php
session_start();
$nonce = hash("sha256", session_id());
$_SESSION["csrf_nonce"] = $nonce;
?>
password is 3 digit number.
<form action="http06_login.php" method="POST">
<input type="hidden" name="csrf_nonce" value="<?php echo($nonce);?>"/>
<input type="text" name="name"/>
<input type="text" name="pass"/>
<input type="submit" value="send"/>
</form>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment