webPromedium
Админ
hackerlab
Task: PHP login/registration app where you must authorize as admin. Solution: exploit logic gap between registration (exact match) and login (trim on DB result) by registering ' admin' with leading space.
$ ls tags/ techniques/
php_trim_bypass_via_leading_whitespaceregistration_login_logic_gapadmin_impersonation_without_sqli
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Ограничения (Restrictions)— hackerlab
- [web][Pro]Провальный код (Failed Code)— hackerlab
- [web][Pro]Pryzhok— hackerlab
- [web][Pro]Запретный код (Forbidden Code)— hackerlab
- [web][Pro]Базовая авторизация 2 (Basic Auth 2)— hackerlab