9/21/2023 0 Comments Burp suite payment hack![]() I edit the pizza toppings at the new location, simply ticking random boxes. While the UI for the new location does not allow me to create this combination, I can most certainly modify the input I send them to try to replicate the desired outcome.įrom here, I turn the “intercept” function on – this allows me to modify the POST request before it is submitted. Well, like any HTTP POST request, we are the masters of our own destiny here. ![]() I imagine that each topping is given a unique numerical value that allows the sum to be translated into the individual parts, sort of like file permissions in Linux. The former changes when removing default toppings and the latter changes when adding extra toppings. ![]() It seems that numbers are being sent for two relevant parameters – “currIngreds” and “extIngreds”. This triggered the following HTTP POST request, as showing in Burp: Using the browser tab for the old pizza location, I selected my desired ingredients and clicked on the “Update” button. Burp Suite is an application that allows us to inspect and modify HTTP requests – you can read more about it in my last post. But at least my memory was correct – the other location did indeed offer this ungodly option.Īt this point, I fired up my trusty Burp Suite and configured Firefox to proxy the requests through it. Well, you could probably make a case that ordering that particular ingredient and putting it on a pizza is far from sane, and I wouldn’t argue that. As you can see, the list of toppings at each location varies slightly: I configured the same pizza from the store near my old address. I called their number to ask what the deal was, and the person on the phone insisted I should be able to order it online.įirst, I opened a new private browsing tab in Firefox. I’d moved houses recently, and apparently the location near my new address didn’t offer the same toppings as their other store. Once the mental switch has been flipped on pizza, there is simply no going back. When I went to customize the order, I noticed that the special cheese I wanted was not listed as an option. The issue was this – I’d gone online to order a pizza on a Saturday evening. Read on to see how I overcame a restricted UI to triumphantly top my pizza just the way I wanted it. Web hacking skills can be used to solve critical challenges in business and life – like customizing a pizza order.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |