Skip to content

Commit

Permalink
Add -i back to curl examples
Browse files Browse the repository at this point in the history
  • Loading branch information
paul-ion committed Sep 29, 2023
1 parent 963e73c commit ad5854f
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ <h5>Challenge Tips and Tricks</h5>
<br>
<pre class="pre-scrollable">

curl -H 'Cookie:JSESSIONID=_YOUR_SESSION_ID_' '_COMMAND_PROC_URL_SUBMIT_COMMAND_ACTION_URL' -H 'Content-Type: multipart/form-data;' --form-string 'object=rO0ABXNyAApzZXJpYWwuQ2F0mJizcryhARMCAAFMAARuYW1ldAASTGphdmEvbGFuZy9TdHJpbmc7eHB0AApTZXJpYWwgQ2F0'
curl -H 'Cookie:JSESSIONID=_YOUR_SESSION_ID_' -i '_COMMAND_PROC_URL_SUBMIT_COMMAND_ACTION_URL' -H 'Content-Type: multipart/form-data;' --form-string 'object=rO0ABXNyAApzZXJpYWwuQ2F0mJizcryhARMCAAFMAARuYW1ldAASTGphdmEvbGFuZy9TdHJpbmc7eHB0AApTZXJpYWwgQ2F0'

</pre>
Replace the base64 object in the curl command with the object generated by ysoserial using the command of your choice.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ <h5>Challenge Tips and Tricks</h5>
<br>
<pre class="pre-scrollable">

curl '_COMMAND_PROC_HOST_LOGIN_FORM_ACTION_URL_' -H 'Content-Type: multipart/form-data' --form-string 'document=&lt;?xml version=\"1.0\"?&gt;&lt;credentials&gt;&lt;user&gt;admin&lt;/user&gt;&lt;password&gt;&lt;/password&gt;&lt;/credentials&gt;'
curl '_COMMAND_PROC_HOST_LOGIN_FORM_ACTION_URL_' -i -H 'Content-Type: multipart/form-data' --form-string 'document=&lt;?xml version=\"1.0\"?&gt;&lt;credentials&gt;&lt;user&gt;admin&lt;/user&gt;&lt;password&gt;&lt;/password&gt;&lt;/credentials&gt;'

</pre>
- You can also save the response of the login page to an HTML file to see how it looks.
Expand Down

0 comments on commit ad5854f

Please sign in to comment.