3rd question - Skills Assessment - using web proxies

1

can somebody help figure out this problem I have been stuck for weeks?

Question: Once you decode the cookie, you will notice that it is only 31 characters long, which appears to be an md5 hash missing its last character. So, try to fuzz the last character of the decoded md5 cookie with all alphanumeric characters, while encoding each request with the encoding methods you identified above. (You may use the “alphanum-case.txt” wordlist from Seclist for the payload)

1 Like
2

You need to take the original cookie, then put into burp or ZAP then send to intruder, use the list provided, then from there you will need to put in payload process the original cookie, then encode in ascii and hex because thats what the original cookie was encoded, this should work and get you the flag