Value Fuzzing

Off-topic
1

can someone help me with this question:
Try to create the ‘ids.txt’ wordlist, identify the accepted value with a fuzzing scan, and then use it in a ‘POST’ request with ‘curl’ to collect the flag. What is the content of the flag?

i have the id, but when I curl with this command:
curl http://admin.academy.htb:54659/admin/admin.php -X POST -d ‘id=73’ -H ‘Content-Type: application/x-www-form-urlencoded’

it tells me that I don’t have access to the flag

2

Hi,
don’t know which task you mean but you either:

  1. Should use cookie (if you are able to login)
  2. Bypass the security (exploit, LFI, etc.)
3

curl -X POST -d “id=73” http://admin.academy.htb:30746/admin/admin.php
i just used this command and get the flag