Bugku Administrator System

Topic links

Open the Web page, as is the case.

Guess the admin username is mostly admin, then the password randomly loses a test. The following page returns as follows.

What happens to IP-forbidden access? Then with the BP grab packet, found that there is a note in the source code ( <!-- dGVzdDEyMw== --> ), found to be BASE64 encryption, immediately online decryption to get test123, it is estimated that this is the password.

Retry, or IP disable access, consult the data and discover the X-forwarded-for header that can be implemented by using HTTP. Then add a pair of key pairs in the headers: x-forwarded-for:127.0.0.1 disguised as local access.

After the change, go a bit, then got flag:flag{85ff2ee4171396724bae20c0bd851f6b}

X-forwarded-for Bypass server IP address filtering

Bugku Administrator System