webProeasy

Level 18 - URL Encoding POST Data

kslweb1

Task: Send POST data with ampersand character in field value. Solution: URL-encode the ampersand as %26 and bypass anticheat proxy by sending HTTP request line by line with delays.

url_encoding anticheat http_protocol post_request form_data

tcp_timing_bypassurl_encodingraw_http_post

$ ls tags/ techniques/

url_encoding anticheat http_protocol post_request form_data

tcp_timing_bypassurl_encodingraw_http_post

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub, Discord, or Google to continue. No email required.

$sign in

$ grep --similar

Similar writeups

[web][Pro]level19— kslweb1
[web][Pro]Level 20— kslweb1
[web][Pro]Level 16 - Anticheat Proxy Bypass— kslweb1
[web][Pro]Level 17 - 100 Cookies Challenge— kslweb1
[web][Pro]Level 22— kslweb1