Web - Server

Monday 3 August 2015, 16:05  #1
Web - Server-User-Agent
Nifo
  • 1 posts

Hello guys i couldn’t pass the user-agent challenge !?
First-I used Tamper data plugin to tamper the challenge page and i found the user agent
I used both Chrome and Firefox User-Agent switcher to enter the user-agent that i found
Finally i refreshed the page and the message is the same  🙁
Wrong user-agent : exiting !

Wednesday 5 August 2015, 01:54  #2
Web - Server-User-Agent
gmsan05
  • 1 posts

Pay attention to the page before the challenge starts! It is quite dumb...

Friday 2 October 2015, 21:19  #3
Web - Server-User-Agent
amine
  • 1 posts

No clue, what do i need to learn ?

Friday 2 October 2015, 21:25  #4
Web - Server-User-Agent
zM_
zM_
  • 36 posts

Don’t think too much guys : it’s only a 10 points challenge.

Monday 26 October 2015, 12:49  #5
Web - Server-User-Agent
Numlock90
  • 1 posts

Think about if you were the site Admin.
What user would you want to be able to see your secret password reminder?
(its a commonly used default password).
Use Tamper Data.

Thursday 14 January 2016, 16:16  #6
Web - Server-User-Agent
ayadi
  • 2 posts

use tamper data to manipulate the request !

Wednesday 18 May 2016, 22:18  #7
Web - Server-User-Agent
bob
bob
  • 1 posts

I can´t manipulate anything because i get no request...
_doesn´t get it.
where is this page before "User Agent error"?

Thursday 5 January 2017, 18:01  #8
Web - Server-User-Agent
Steve Nice
  • 3 posts

Set the user agent to something.

Wednesday 18 January 2017, 04:06  #9
Web - Server-User-Agent
stillfree
  • 1 posts

don’t have a clue what i suppose to do!

Thursday 26 January 2017, 17:19  #10
Web - Server-User-Agent
PepaPig
  • 1 posts

The dumbest person is me :) I ’ve done script in python trying with ALL User-Agent from the universe  🙁 .

This is the clue to success:

Think about if you were the site Admin.
What user would you want to be able to see your secret password reminder?
(its a commonly used default password).

Monday 20 February 2017, 09:29  #11
Web - Server-User-Agent
xgbcoder
  • 3 posts

thanks @gmsan05
i found the password.

Tuesday 28 November 2017, 17:38  #12
Web - Server-User-Agent
TryOrDieTrying
  • 1 posts

First I tried manipulating the GET request (actually the value of the needed header) directly inside Firefox and resend it, but that didn’t work. Setting it browserwide inside about:config did the trick. Can anyone explain why the first attempt wasn’t enough? Is it because of redirects?