From c9c276907dcc2defd6014707c270b4e168b0d384 Mon Sep 17 00:00:00 2001 From: CPol Date: Mon, 7 Jun 2021 22:56:20 +0000 Subject: [PATCH] GitBook: [master] one page modified --- pentesting-web/oauth-to-account-takeover.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pentesting-web/oauth-to-account-takeover.md b/pentesting-web/oauth-to-account-takeover.md index fde1f5809..3cee794ec 100644 --- a/pentesting-web/oauth-to-account-takeover.md +++ b/pentesting-web/oauth-to-account-takeover.md @@ -215,11 +215,11 @@ The request to BF may look similar to: ```text POST /token HTTP/1.1 content-type: application/x-www-form-urlencoded -host: 172.16.64.192:3005 -content-length: 137 +host: 10.10.10.10:3000 +content-length: 135 Connection: close -code=77515&redirect_uri=http%3A%2F%2F172.16.64.192%3A3005%2Fcallback&grant_type=authorization_code&client_id=photoprint&client_secret=[bruteforce] +code=77515&redirect_uri=http%3A%2F%2F10.10.10.10%3A3000%2Fcallback&grant_type=authorization_code&client_id=public_client_id&client_secret=[bruteforce] ``` ## Closing