QUESTION ABOUT OPENBULLET IMG.PHP BYPASS

QUESTION ABOUT OPENBULLET IMG.PHP BYPASS - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: QUESTION ABOUT OPENBULLET IMG.PHP BYPASS (/showthread.php?tid=6242745)

QUESTION ABOUT OPENBULLET IMG.PHP BYPASS - FS1337 - May 28, 2023

Hi, today i was trying to figure out how to bypass or create variables for an site like this:

https://polishsource.cz/img.php

since login is -> username=wffewfwe&password=fwefewfewfwe&vImageCodP=1sj3niez

is there a way to create an variable to capture the data from the image?

when i use "get" method on the request block and put in the url, the result is this below, which is obviously not helpful and not the right way

{"$type":"System.Collections.Generic.List`1[[RuriLib.BlockBase, RuriLib]], mscorlib","$values":[{"$type":"RuriLib.BlockRequest, RuriLib","Url":"https://polishsource.cz/img.php","RequestType":0,"AuthUser":"","AuthPass":"","PostData":"","RawData":"","Method":2,"SecurityProtocol":0,"CustomHeaders":{"$type":"System.Collections.Generic.Dictionary`2[[System.String, mscorlib],[System.String, mscorlib]], mscorlib","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36","Pragma":"no-cache","Accept":"*/*"},"CustomCookies":{"$type":"System.Collections.Generic.Dictionary`2[[System.String, mscorlib],[System.String, mscorlib]], mscorlib"},"ContentType":"application/x-www-form-urlencoded","AutoRedirect":true,"ReadResponseSource":true,"EncodeContent":false,"AcceptEncoding":true,"AllowEmptyHeaderValues":false,"MultipartBoundary":"","MultipartContents":{"$type":"System.Collections.Generic.List`1[[RuriLib.Functions.Requests.MultipartContent, RuriLib]], mscorlib","$values":[]},"ResponseType":0,"DownloadPath":"","OutputVariable":"","SaveAsScreenshot":false,"ProtocolVersion":{"$type":"System.Version, mscorlib","Major":1,"Minor":1,"Build":-1,"Revision":-1,"MajorRevision":-1,"MinorRevision":-1},"ProtocolVersions":{"$type":"System.String[], mscorlib","$values":["1.1","2.0","2.1"]},"Label":"REQUEST","Disabled":false}]}

(May 28, 2023 09:23 AM)FS1337 Wrote: Hi, today i was trying to figure out how to bypass or create variables for an site like this:

https://polishsource.cz/img.php

since login is -> username=wffewfwe&password=fwefewfewfwe&vImageCodP=1sj3niez

is there a way to create an variable to capture the data from the image?

when i use "get" method on the request block and put in the url, the result is this below, which is obviously not helpful and not the right way

‰PNG IHDRØÁóG pHYsÄÄ•+«IDATxœí›1OÛ@ÇŸ«.ˆOÐ `gae-LEà34•c«2¦ê”ŠdmÇtˆêDº•®]2Ó ˜» ŽîðÐérg_ÎwïìãŸ"ëîÝ³ý÷ÿÝ ÄIŒß^$w£ýé‹¹ÁttjÍœÛÜ±*BÓ½¹îÞ\gmÅq5z0Ëxce{rD´w–O®Ìm¦¯ÿõ—l¢™s³«"ÝÎ&¼9úíÐñy€|\Xë/Ùk±‚!ÝÎ¦ƒ‘ÃõgúQZ;$g{r7ÞX):‹Š|TˆpqDxò¦8hÕìœß‡Ë$+þ*VB|Rè²Ë¤-Ïî„¨*!æŒ§nôîT‘3A¥B¨„˜9¨DD.D‘þðbù¦‰(‹<5¡(2ÜÐ„vùñäê!Ÿí=V›ˆùKP‡.< Kx9bi´jLî½#m>´v ûˆ9›ñ°YŽ0 ÎïZ±×ÙL‚™ï3ßo6uP‘Ý~}2îV¦An‡ƒ#âåÀibÐ Ÿ Zµ¨ÑÓ_ÜˆÐ"þˆ=´ÆB“J†×ññÂõ³ÝKq¹ßD^Û‡>p^Õ†&UˆXý×§–OzÀêî±a‚˜˜2²‘!$™/èé›VÍ!öq3ÅÛË3Hw…´§BžÓø,Zõ¦[7ô YáÛ«9SÀªÙP ³ÎÚ;Ëº#‚ëÑgÕ¬hÈ!H™¬ÝäÿY‘ ´¬hÑüCbA¿ë…XÃ·)|² ±jŽ‡ÍùŽH5Y4à B•#zb^‡²‚gžV¥9„ÅdÑ¼àMóB¹ã“*aee~iòEƒ*2y$ð4’É«³Ui„ðETa¢5êcÙ8h±ˆ—åÈ61$Ûª™V‹ÂQ[²Î”QøKPèû?O¸å£“¡4psÑSŽiƒÿ|ñW>¸T`â@Ò ÎÙJ³%èc>Æœ¸fDá_ê3y,‰¦£SXÝ=vèüãÝ^~|eß_ŸèÃ9„Z ¾}¿Àøuj9Æúüç×áúU´ÿòÍp5’6IEND®B`‚