2021/11/6-burpsuit packet capturing and web page source code modification

2021/11/6 Attack and defend the world

WEB

1.cookie

Open the web page

utilize burpsuit Grab the bag

Line eight ：cookie：look-here=cookie.php
Then on the web page IP Add url Suffix name cookie.php Refresh the page again and capture the package
Get this interface , stay burpsuit,HTTP In response, we get flag

2.disabled_button

Open the web page
Get a button that can't be pressed
Ctrl-u Open the web page source code , To discover its existence disabled attribute （ It can be set so that the button cannot be pressed ）, Modify the web page source code to delete disabled attribute
Modify the web page source code method ：
Save as web page to desktop , Right click to select open mode and open its source code with a notebook , Save the code after modifying the source code , Open a new web page again , Modification successful
Delete disabled attribute （ That is, the selected part ）

At this point, you can click the button to get flag