Web - Server

Tuesday 4 August 2020, 22:07  #1
Web - Server need help with challenge: HTTP - Open redirect
TurtleMaster64
  • 1 posts

Hi, I got stuck on the 2nd Web - Server challenge: HTTP - Open redirect. Was wondering if anyone could help me/teach me how to complete the challenge and get the password?

Thanks,
TurtleMaster64

Friday 7 August 2020, 16:28  #2
Web - Server need help with challenge: HTTP - Open redirect
neophyte
  • 1 posts

Make sure you read through the related resource, it explains the vulnerability you’ll need to try and leverage to solve the challenge. Pay special attention to how the redirection URLs are being formed (you should be able to see them in the source code of the page).

As long as you can prove that vulnerability can be leveraged, the flag should be displayed (ie. in the related resource, they mention redirecting to http://EvilWebsite.com, but any website should work to solve the challenge).

Hope this helps a bit,
Neo