webPromedium

Доступ запрещён (Access Denied)

hackerlab

Task: Web application with IP filtering and PHP cookie-based authentication. Solution: Bypass IP filter with X-Forwarded-For header, then exploit PHP type juggling by replacing password with boolean true in serialized cookie data.

$ ls tags/ techniques/
phpauthentication_bypasscookie_manipulationx_forwarded_forip_spoofingdeserializationtype_jugglingserializationboolean_comparison
X-Forwarded-For header IP spoofingPHP insecure deserializationPHP type juggling (boolean true vs string)Cookie-based authentication bypass
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups