题目来源于:bugku
题目难度:简单
题目 描 述: > Wanna learn about some types of headache? > Let's dig right into it!
下面是题目源代码:
<!DOCTYPE html>
<html>
<head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Headache</title><link rel="stylesheet" href="/static/bulma.min.css"><style type="text/css">img {width: 400px;height: auto;}</style>
</head><body><section class="section"><div class="container"><h1 class="title is-primary">HEADACHE</h1><p class="subtitle"> In this challenge you'll discover some types of <strong class="is-primary">Headache</strong>! </p> <img src="/static/meme.png"><p>Otherwise, if you want the flag just ask for it politely :D</p> </div></section>
</body>
</html>
下面我们开始解题:
这道题我们直接用“ BurpSuite ”抓包工具
直接在抓包到的页面添加请求头“ Wanna-Something:can-i-have-a-flag-please ”,就能获取到flag,完成题目了
原文链接: CTF网络安全大赛简单的web抓包题:HEADache - [红客网]网络编程与渗透技术笔记
红客网:blog.hongkewang.cn