webeasy

GETman и POSTman

hackerlab

Task: a uvicorn-served web endpoint required a specific GET parameter together with POST data to return the flag. Solution: send a POST request with want_flag=YES in the query string and a JSON body where admin is numeric 1 and message is Hello.

$ ls tags/ techniques/
jsonuvicornget_parameterspost_parameterstype_validation
combined_get_post_requestjson_type_matching
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub to get started.

$ssh [email protected]