Web - Server

Hi,

I got stuck with this challenge.
Managed to find the open redirect vuln, and I’m able to exploit it, but no idea what the chall password should be?!

So you are able to redirect to another site and you have the hash? Pass will spit out before redirect so use something to pause the browser for capture

How to check for hashes?

Hi,

I have managed to get the redirect work to a different domain and I can see the password in a split second before the redirect happens. Can someone point me into the right direction how to stop before the redirect takes place? I have tried different things but without success.

Thank you very much in advance.

Nevermind...got it.

yo guys anyone can help me to solve this level? I ain’t understand how to do it. What will i need to do?

I think burp suite can help u , intercept the http request and all things will be done