Sharkshop
Forensic Web Medium t-chen
開発途中のECサイトで管理者ユーザーのパスワードが流出した。現在、利用された可能性のある脆弱性は修正されたが、パスワードの変更はまだ行われていないようだ。その時にキャプチャされた攻撃者の通信記録から、パスワードを推測し"admin"ユーザーとしてログインしてください。
During the development of an e-commerce website, the password of the administrator user was leaked. The vulnerabilities that may have been exploited have already been fixed, but it seems the password has not yet been changed. From the captured communication logs of the attacker at that time, deduce the password and log in as the "admin" user.
Writeups
Official
No official writeup linked.
Community
No community writeups yet. Solved it? Share how.
Log in to add a community writeup.