Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-22 12:43:23 +00:00
Code Issues Projects Releases Packages Wiki Activity

GitBook: [master] one page modified

Browse source
This commit is contained in:
CPol 2021-06-07 22:56:20 +00:00 committed by gitbook-bot
parent b4e5d5d911
commit c9c276907d
No known key found for this signature in database
GPG key ID: 07D2180C7B12D0FF
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
pentesting-web/oauth-to-account-takeover.md
View file

@ -215,11 +215,11 @@ The request to BF may look similar to:
```text ```text
POST /token HTTP/1.1 POST /token HTTP/1.1
content-type: application/x-www-form-urlencoded content-type: application/x-www-form-urlencoded
host: 172.16.64.192:3005 host: 10.10.10.10:3000
content-length: 137 content-length: 135
Connection: close Connection: close
code=77515&redirect_uri=http%3A%2F%2F172.16.64.192%3A3005%2Fcallback&grant_type=authorization_code&client_id=photoprint&client_secret=[bruteforce] code=77515&redirect_uri=http%3A%2F%2F10.10.10.10%3A3000%2Fcallback&grant_type=authorization_code&client_id=public_client_id&client_secret=[bruteforce]
``` ```
## Closing <a id="996f"></a> ## Closing <a id="996f"></a>