Walk Through of Bepractical.tech lab #2

6 months ago 47

BOOK THIS SPACE FOR AD

ARTICLE AD

Walk-Through of Bepractical.tech lab #2

Today I am going to walk through bepractical.tech Lab #2. I have found this site to be especially helpful and enjoyable. I look forward to trying more of it’s content as/if it comes available. I am new to ethical hacking and would really like to help out others while learning. I am using Firefox and BurpSuite Pro in Kali Linux. This will not include any information on how to setup and use BurpSuite. I will show a littel bit about my errors and should let you know that the captcha can make this a bit tricky. There were a couple times that I had to refresh the lab.

https://temp-mail.org/en/

You are logged in.

Intercept Captured

This is our baseline of a correct request/response.

Notice “200 OK” and the content length(1)

This is the point where I tried to use techniques that worked in lab #1 without success. These are some examples of what I tried. I wanted to put this in incase anybody wanted to avoid mistakes. Move to step #7 to continue correctly

Here I just tried to change the email. No Luck though!! But atleast notice the difference in content length(0)

I try to change the email and forward the request just for the heck of it

Just trying.

Hoping I could change the response before passing it forward but no luck.

Oh Well

Back to the Beginning:

“200 OK” and matching content-length

Notice the Content Length is the same as when we signed in with our own account credentials and that there is a “200 OK” message

Admin Account……. HACKED!!!

Read Entire Article