webeasy

Ханипот (Honeypot)

hackerlab

Task: Get access to admin page without falling into the honeypot trap. Solution: Use DELETE HTTP method instead of GET/POST to bypass the fake password form.

$ ls tags/ techniques/
authentication_bypasshttp_methodsmethod_tamperingdelete_methodhoneypottrap_avoidancecurlhttp_verbs
HTTP Method Tampering (DELETE instead of GET/POST)Honeypot trap recognition and avoidanceAlternative HTTP verb exploitation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]