Sentry MBA config vs Browser

[jankko60 Rare]

Browser response

Sentry Debug

same invalid combo input

wher's the problem ?

Alpha config inside

This is the hidden content, please

• Sign In
• or
• Sign Up

Thank you all

Edited June 11, 2017 by jankko60

[pacifico Rare]

17 hours ago, jankko60 said:

Browser response

Sentry Debug

Your post data is right, you just missed to include this header ---->  X-CSRFToken: 

You can get its value from the cookie csrftoken  value. You'll get this cookie when you'll load login page. So capture that cookie value using HParsing or Cookie in Sentry variables stage.

Just make a new variable selecting as Stage ----> Login Page

Input 1 ----> Costant (with value X-CSRFToken: )

Operator ----> &

Input 2 ---->  Cookie (with value csrftoken= )

Now send this variable as Post Action Header and you 're  done

FIXED CONFIG ----->  

This is the hidden content, please

• Sign In
• or
• Sign Up

Edited June 11, 2017 by pacifico

[caergybi69]

thanks for the post intresting

[jankko60 Rare]

1 hour ago, pacifico said:

 you just missed to include this header ---->  X-CSRFToken:

 

another brick in the wall ........  only 997 left....

Thank you again

 

Edited June 11, 2017 by jankko60

[jankko60 Rare]

Problem solved

"Topic can be closed"