Web - Server

hi i know about CRLF injections and how to inject \n\r to headers and change the response
but i couldnt find out how to authenticate or steal the content of the page using this vuln

any help ?

Hi th3ss,

Look at the log and guess what kind of data you can be asked to inject. 😉

yeah i tryed that,injecting html code is not an option or sql query’s
i even tryed injecting system commands ...
i have no idea what to do :(

hmm yeah. The major difficulty is may be to find out what is precisely requested.
What I can say is you will never find such thing as requested here for real. It only works here to make up an educational purpose CR/LF based challenge.

hope this can help finding a new approach :)

i wonder after i inject false log ,what else can i do to get the flag.

i get it...it should be exactly like the first log.

I don’t understand what mean inject false log is?

two way to inject crlf on username=injection&password=injection

Please tell me little guide for this.
Thanks my bros.
Cheers

Hi 133720, have a look at what her0kings1ey in the previous message wrote :)

Try use urlencode in your inject point and make the fake authentication log.

Where to do the injection in this challenge

One amendment to her0kings1ey’s comment. Don’t try to reproduce the log *exactly* in your injection. Only the minimum amount to make it look genuine is needed. This threw me off for a while.

Thank you so much, Technocratik! I finally understood why I could’nt validate this challenge!

Ahhhh stuck on this challenge for days. To the new readers, like me... look at the original log without any of your inserted entries... what users connected? How can you make it seem like a user you know exists also successfully connected?

look at the log ,please...

hii
i tried to wrote a fake access to log file and i didn’t get nothing
can someone help me?

[Th1b4ud : NO SPOIL PLEASE]

What is the false data mean??
Explain to me please
i try to input anything but it get only "failed to authenticate".

hey,
I got the solution but can’t understand why that is the only solution.
Please , tell me how that solution worked actually .