Help with the HTTP Attacks TE.TE assesment

HTB Content Academy
1

Hello,

I tried to validate the lesson with the example request but it doesn’t work :

POST / HTTP/1.1
Host: 206.189.26.78:30943
Content-Length: 46
Transfer-Encoding:	chunked

0

GET /admin?reveal_flag=1 HTTP/1.1
Dummy:

Of corse \x20 between Transfer-Encoding: and the size has been replaced with \x09
I also tried to send the request with burp intruder and a null payload to have a request every 1s but the flag is never revealed.
Can you help me with that ? any clue :slight_smile:

2

Try to use other obfuscation methods explained previously and ensure you are sending the request to the right page.

3

image
I tried all the 5 techniques mentioned, no results. Did you solve it? (It is not admin.php, I am doing it through admin but I still get no result )