MENU

burp 随机爆破Token 值

November 13, 2019 • Read: 682 • 安全测试阅读设置

环境:dvwa
关卡:Brute Force high


代码分析

从代码方面看最高等级的Brute Force,添加了随机user_token的验证,我们要爆破的话需要这个user_token才能进行爆破

//添加token,session
if( isset( $_GET[ 'Login' ] ) ) {
    // Check Anti-CSRF token
    checkToken( $_REQUEST[ 'user_token' ], $_SESSION[ 'session_token' ], 'index.php' );

    // Sanitise username input
    $user = $_GET[ 'username' ];
    //stripslashes()删除反斜杠
    $user = stripslashes( $user );
    $user = ((isset($GLOBALS["___mysqli_ston"]) && is_object($GLOBALS["___mysqli_ston"])) ? mysqli_real_escape_string($GLOBALS["___mysqli_ston"],  $user ) : ((trigger_error("[MySQLConverterToo] Fix the mysql_escape_string() call! This code does not work.", E_USER_ERROR)) ? "" : ""));

    // Sanitise password input
    $pass = $_GET[ 'password' ];
    $pass = stripslashes( $pass );
    $pass = ((isset($GLOBALS["___mysqli_ston"]) && is_object($GLOBALS["___mysqli_ston"])) ? mysqli_real_escape_string($GLOBALS["___mysqli_ston"],  $pass ) : ((trigger_error("[MySQLConverterToo] Fix the mysql_escape_string() call! This code does not work.", E_USER_ERROR)) ? "" : ""));
    $pass = md5( $pass );

开干

请求使用随机token值防止爆破
b2f126ec-3d95-4938-a968-680192fd7f9a.png

我们可以通过burp自带提取器进行获取随机爆破token值
注意:爆破随机token值,线程只能为1
f32e9bc0-10e6-4fb8-9f5f-b94da7187695.png

获取需要伪造的token值
9475f708-2b7e-4d18-85ff-217329b814f9.png

设置payload为伪造的token,注意需要添加一个
948974cf-75ba-4076-93da-82bad2220417.png

返回200k,正常爆破
51f68b6f-c64d-4bc8-af0b-15b818b11709.png

Archives QR Code Tip
QR Code for this page
Tipping QR Code
Leave a Comment

已有 1 条评论
  1. admin admin

    example@example.com(。•ˇ‸ˇ•。)( ๑´•ω•) "(ㆆᴗㆆ)>﹏<o(*////▽////*)q ╮(╯▽╰)╭ ( ,,´・ω・)ノ"(´っω・`。)Σ(っ °Д °;)っ(ó﹏ò。)( ง ᵒ̌皿ᵒ̌)ง⁼³₌₃ヾ(´・ ・`。)ノ"φ( ̄∇ ̄o)(╯°A°)╯︵○○○(ฅ´ω`ฅ)⌇●﹏●⌇(´இ皿இ`)(ノ°ο°)ノ٩(ˊᗜˋ*)و୧(๑•̀⌄•́๑)૭→_→(๑•̀ㅁ•́ฅ)∠( ᐛ 」∠)_(/ω\) ̄﹃ ̄(╯‵□′)╯︵┴─┴(☆ω☆)ヾ(≧∇≦*)ゝ|´・ω・)ノOωO#(中刀)#(扇耳光)#(击掌)#(中枪)#(献黄瓜)#(献花)#(深思)#(看热闹)#(坐等)#(肿包)#(长草)#(便便)#(吐血倒地)#(投降)#(蜡烛)#(暗地观察)#(阴暗)#(哭泣)#(汗)#(黑线)#(锁眉)#(观察)#(鼓掌)#(想一想)#(害羞)#(无奈)#(欢呼)#(无所谓)#(看不见)#(中指)#(赞一个)#(愤怒)#(咽气)#(喷血)#(喷水)#(尴尬)#(装大款)#(不出所料)#(不说话)#(吐舌)#(吐)#(口水)#(内伤)#(抽烟)#(抠鼻)#(得意)#(狂汗)#(亲亲)#(脸红)#(喜极而泣)#(呲牙)#(期待)#(傻笑)#(无语)#(小怒)#(小眼睛)#(惊喜)#(大囧)#(邪恶)#(皱眉)#(不高兴)#(高兴)@(灯泡)@(音乐)@(蜡烛)@(红领巾)@(药丸)@(便便)@(香蕉)@(手纸)@(沙发)@(OK)@(haha)@(胜利)@(大拇指)@(蛋糕)@(茶杯)@(钱币)@(星星月亮)@(太阳)@(彩虹)@(礼物)@(玫瑰)@(心碎)@(爱心)@(勉强)@(懒得理)@(小红脸)@(犀利)@(吐)@(挖鼻)@(笑尿)@(睡觉)@(惊讶)@(委屈)@(呀咩爹)@(酸爽)@(疑问)@(what)@(狂汗)@(啊)@(酷)@(鄙视)@(阴险)@(惊哭)@(喷)@(真棒)@(泪)@(黑线)@(汗)@(怒)@(不高兴)@(你懂的)@(滑稽)@(捂嘴笑)@(乖)@(小乖)@(花心)@(笑眼)@(太开心)@(吐舌)@(哈哈)@(呵呵)(。•ˇ‸ˇ•。)( ๑´•ω•) "(ㆆᴗㆆ)>﹏<o(*////▽////*)q ╮(╯▽╰)╭ ( ,,´・ω・)ノ"(´っω・`。)Σ(っ °Д °;)っ(ó﹏ò。)( ง ᵒ̌皿ᵒ̌)ง⁼³₌₃ヾ(´・ ・`。)ノ"φ( ̄∇ ̄o)(╯°A°)╯︵○○○(ฅ´ω`ฅ)⌇●﹏●⌇(´இ皿இ`)(ノ°ο°)ノ٩(ˊᗜˋ*)و୧(๑•̀⌄•́๑)૭→_→(๑•̀ㅁ•́ฅ)∠( ᐛ 」∠)_(/ω\) ̄﹃ ̄(╯‵□′)╯︵┴─┴(☆ω☆)ヾ(≧∇≦*)ゝ|´・ω・)ノOωO#(中刀)#(扇耳光)#(击掌)#(中枪)#(献黄瓜)#(献花)#(深思)#(看热闹)#(坐等)#(肿包)#(长草)#(便便)#(吐血倒地)#(投降)#(蜡烛)#(暗地观察)#(阴暗)#(哭泣)#(汗)#(黑线)#(锁眉)#(观察)#(鼓掌)#(想一想)#(害羞)#(无奈)#(欢呼)#(无所谓)#(看不见)#(中指)#(赞一个)#(愤怒)#(咽气)#(喷血)#(喷水)#(尴尬)#(装大款)#(不出所料)#(不说话)#(吐舌)#(吐)#(口水)#(内伤)#(抽烟)#(抠鼻)#(得意)#(狂汗)#(亲亲)#(脸红)#(喜极而泣)#(呲牙)#(期待)#(傻笑)#(无语)#(小怒)#(小眼睛)#(惊喜)#(大囧)#(邪恶)#(皱眉)#(不高兴)#(高兴)@(灯泡)@(音乐)@(蜡烛)@(红领巾)@(药丸)@(便便)@(香蕉)@(手纸)@(沙发)@(OK)@(haha)@(胜利)@(大拇指)@(蛋糕)@(茶杯)@(钱币)@(星星月亮)@(太阳)@(彩虹)@(礼物)@(玫瑰)@(心碎)@(爱心)@(勉强)@(懒得理)@(小红脸)@(犀利)@(吐)@(挖鼻)@(笑尿)@(睡觉)@(惊讶)@(委屈)@(呀咩爹)@(酸爽)@(疑问)@(what)@(狂汗)@(啊)@(酷)@(鄙视)@(阴险)@(惊哭)@(喷)@(真棒)@(泪)@(黑线)@(汗)@(怒)@(不高兴)@(你懂的)@(滑稽)@(捂嘴笑)@(乖)@(小乖)@(花心)@(笑眼)@(太开心)@(吐舌)@(哈哈)@(呵呵)(。•ˇ‸ˇ•。)( ๑´•ω•) "(ㆆᴗㆆ)>﹏<o(*////▽////*)q ╮(╯▽╰)╭ ( ,,´・ω・)ノ"(´っω・`。)Σ(っ °Д °;)っ(ó﹏ò。)( ง ᵒ̌皿ᵒ̌)ง⁼³₌₃ヾ(´・ ・`。)ノ"φ( ̄∇ ̄o)(╯°A°)╯︵○○○(ฅ´ω`ฅ)⌇●﹏●⌇(´இ皿இ`)(ノ°ο°)ノ٩(ˊᗜˋ*)و୧(๑•̀⌄•́๑)૭→_→(๑•̀ㅁ•́ฅ)∠( ᐛ 」∠)_(/ω\) ̄﹃ ̄(╯‵□′)╯︵┴─┴(☆ω☆)ヾ(≧∇≦*)ゝ|´・ω・)ノOωO#(中刀)#(扇耳光)#(击掌)#(中枪)#(献黄瓜)#(献花)#(深思)#(看热闹)#(坐等)#(肿包)#(长草)#(便便)#(吐血倒地)#(投降)#(蜡烛)#(暗地观察)#(阴暗)#(哭泣)#(汗)#(黑线)#(锁眉)#(观察)#(鼓掌)#(想一想)#(害羞)#(无奈)#(欢呼)#(无所谓)#(看不见)#(中指)#(赞一个)#(愤怒)#(咽气)#(喷血)#(喷水)#(尴尬)#(装大款)#(不出所料)#(不说话)#(吐舌)#(吐)#(口水)#(内伤)#(抽烟)#(抠鼻)#(得意)#(狂汗)#(亲亲)#(脸红)#(喜极而泣)#(呲牙)#(期待)#(傻笑)#(无语)#(小怒)#(小眼睛)#(惊喜)#(大囧)#(邪恶)#(皱眉)#(不高兴)#(高兴)@(灯泡)@(音乐)@(蜡烛)@(红领巾)@(药丸)@(便便)@(香蕉)@(手纸)@(沙发)@(OK)@(haha)@(胜利)@(大拇指)@(蛋糕)@(茶杯)@(钱币)@(星星月亮)@(太阳)@(彩虹)@(礼物)@(玫瑰)@(心碎)@(爱心)@(勉强)@(懒得理)@(小红脸)@(犀利)@(吐)@(挖鼻)@(笑尿)@(睡觉)@(惊讶)@(委屈)@(呀咩爹)@(酸爽)@(疑问)@(what)@(狂汗)@(啊)@(酷)@(鄙视)@(阴险)@(惊哭)@(喷)@(真棒)@(泪)@(黑线)@(汗)@(怒)@(不高兴)@(你懂的)@(滑稽)@(捂嘴笑)@(乖)@(小乖)@(花心)@(笑眼)@(太开心)@(吐舌)@(哈哈)@(呵呵)