webProeasy
Lab 16 — FileGate — Authentication Bypass in API Login
hackadvisor
Task: File storage platform with JSON API login endpoint vulnerable to JavaScript type coercion in password comparison. Solution: Send boolean true as password in JSON body to bypass authentication via loose comparison, then access admin config page for the flag.
$ ls tags/ techniques/
session_hijackingjavascript_type_coercion_bypassboolean_password_injectionjson_type_abusehoneypot_flag_detection
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Lab 303 — DevGateway — Broken Access Control in Admin API— hackadvisor
- [web][Pro]Lab 12 — NewsGrid — JWT Algorithm Confusion— hackadvisor
- [web][Pro]Lab 326 — PulseBoard — NoSQL Injection in Authentication— hackadvisor
- [web][Pro]Lab 350 — VaultKeeper— hackadvisor
- [web][Pro]Lab 80 — GateGuard — SQL Injection in Organization Filter API— hackadvisor