weak_auth

Posted _4_FUN

tags:

篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了weak_auth相关的知识，希望对你有一定的参考价值。

 

 

It\'s a simple login page, so first, we try to catch a HTTP Header with BurpSuite to analyze. 

 

 The annotation hints us the true username is admin and the password is weak password. 

 

 BurpSuite can blast password witch a specific dictionary.

 

 

If you have no weak password dictionaries, click the below github link:

https://github.com/SnowMeteors/Blasting_dictionary

 

Both the password and the flag we get. 

以上是关于weak_auth的主要内容，如果未能解决你的问题，请参考以下文章