diff --git a/pentesting-web/oauth-to-account-takeover.md b/pentesting-web/oauth-to-account-takeover.md index fde1f5809..3cee794ec 100644 --- a/pentesting-web/oauth-to-account-takeover.md +++ b/pentesting-web/oauth-to-account-takeover.md @@ -215,11 +215,11 @@ The request to BF may look similar to: ```text POST /token HTTP/1.1 content-type: application/x-www-form-urlencoded -host: 172.16.64.192:3005 -content-length: 137 +host: 10.10.10.10:3000 +content-length: 135 Connection: close -code=77515&redirect_uri=http%3A%2F%2F172.16.64.192%3A3005%2Fcallback&grant_type=authorization_code&client_id=photoprint&client_secret=[bruteforce] +code=77515&redirect_uri=http%3A%2F%2F10.10.10.10%3A3000%2Fcallback&grant_type=authorization_code&client_id=public_client_id&client_secret=[bruteforce] ``` ## Closing