base64 encoded Web bruteforcing

  1. send the request to the intruder

  2. select the ended part with add

  3. go to payload pick custom iterator for payload 1, set a username "admin"

  4. pick position 2 and paste rockyou.txt content

  5. for payload processing, add > Base64-encode

start the attack

make sure the port is correct~! https://medium.com/@bamroatbabak/seppuku-1-vulnhub-walkthrough-beea41846775

Previousmongo db creds found?NextWeb app source

Last updated