webProeasy
Провальный код (Failed Code)
hackerlab
Task: Web application with login page and redirect protection. Solution: Direct access to admin.php bypasses authentication - the redirect was only implemented on index.php, leaving admin panel unprotected.
$ ls tags/ techniques/
phpauthentication_bypassapacheunprotected_endpointredirect_bypasssecurity_through_obscuritydirect_accessmissing_auth_checkadmin_panel
Direct page access bypassUnprotected endpoint discoveryAuthentication redirect bypassWeb enumeration
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Запретный код (Forbidden Code)— hackerlab
- [web][Pro]Pryzhok— hackerlab
- [web][Pro]Физический доступ (Physical Access)— hackerlab
- [web][Pro]Ханипот (Honeypot)— hackerlab
- [web][Pro]Запретный код 2 (Forbidden Code 2) — HackerLab— hackerlab