Monday, September 01, 2014 Login · Register
    Login
Username

Password


Remember Me

Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.

 

    Users Online
  • · Members on IRC: 32   
  • · Total Members: 15,997
  • · Newest Member: ansar313
  •  

     

        Related Ads
     

     

     

        Top 10 Forum Posters
    UserPosts
    bluechill1411   
    madf0x1291   
    cruizrisner1062   
    Qwexotic1034   
    Null Set870   
    Override604   
    auditorsec603   
    godofcereal599   
    TurboBorland585   
    Teddy477   
     

        Affiliates




  • iExploit


  • iExploit


  • WeChall





  • Thisislegal.com

  •  

        Related Ads
     

    View Thread
         
    Security Override Hacking Challenges Realistic Hacking Challenges
    Realistic 3: So close!
    Register FAQ Members List Today's Posts Search

    Print Thread
    11-16-2013 12:32 PM Realistic 3: So close! | Edited by Slyth 11-16-2013 01:53 PM
    Alright, I know that I am really close to getting part 1 right, I'm injecting the CSRF img tag into the feedback page using a crafted url, however I am not quite sure what the exact right way to do this is. I definitely understand the premise of this attack, but the only problem is I don't know if I am crafting the URL correctly. I though maybe the checked_out parameter could be changed to checked_in or maybe checkout.php could be changed to checkin.php, but apparently neither are correct because all I'm getting is, 'Success, you have submitted feedback!'.
    I'd really appreciate a bump in the right direction for this. This kind of attack is really interesting and crafty and I understand it completely, but I don't know how to make the URL for the img tag correct.
    Thanks for any help,
    -cMp

    EDIT: Finished, that was a great experience. Any admin can delete this, it is a waste of space now.
     
    Offline
    03-23-2014 08:12 AM RE: Realistic 3: So close!
    ??????
     
    Offline
    04-25-2014 10:10 AM RE: Realistic 3: So close!
    i got the exact same problem Slyth,
    i made a topic so i hope some people can explain it to me Smile
     
    Offline
    Jump to Forum:
    Forum powered by fusionBoard