webProeasy
Lab 233 — PulseAPI — Regex Auth Bypass via Query String Injection
hackadvisor
Task: API management platform with regex-based authorization middleware protecting admin routes. Solution: Logged in as developer, discovered admin endpoints via robots.txt, accessed /api/v1/admin/users directly — regex auth middleware failed to enforce admin role check, exposing flag in user table.
$ ls tags/ techniques/
nodejsauthentication_bypassauthorization_bypassnginxrobots_txtexpressregexadmin_panelrbachoneypot_flag
honeypot_flag_identificationregex_path_matching_bypassauthorization_bypass_via_regex_flawrobots_txt_endpoint_discoverysession_cookie_authentication
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Lab 326 — PulseBoard — NoSQL Injection in Authentication— hackadvisor
- [web][Pro]Lab 275 — GatewayPulse — Proxy ACL Bypass via Path Case Normalization— hackadvisor
- [web][Pro]Lab 322 — NetPulse — IP Spoofing to RCE via Polling Agent API— hackadvisor
- [web][Pro]Lab 248 — PulseBoard — Next.js Middleware Authorization Bypass— hackadvisor
- [web][Pro]DevPulse — CSRF via JSON Content-Type Bypass— hackadvisor