diff --git a/Images/login_response.gif b/Images/login_response.gif new file mode 100644 index 0000000..ba8acfd Binary files /dev/null and b/Images/login_response.gif differ diff --git a/Phase 2/03 Web Exploitation.md b/Phase 2/03 Web Exploitation.md index 1c17ad6..b9d1243 100644 --- a/Phase 2/03 Web Exploitation.md +++ b/Phase 2/03 Web Exploitation.md @@ -85,7 +85,7 @@ We are given a website `http://saturn.picoctf.net:50920/`, which opens to a logi We open our browser's network tab and enter meaningless data in the input fields. After that we open the request titled `secure.js` and go into its *Response* tab. -https://github.com/lucky-vers/Cryptonite-Taskphase/assets/51952975/e08177a5-6516-4291-98d0-47a89f523bd6 +![Response](../Images/login_response.gif) We find the following (very insecure!) JavaScript code that checks whether the username and password are that of the admin's or not