Challenge:
Name: Privacy Policy Inspection
Description: Prove that you actually read our privacy policy.
Difficulty: 3 star
Category: Security Through Obscurity
Expanded Description: https://pwning.owasp-juice.shop/part2/security-through-obscurity.html
Tools used:
Burp Suite, FoxyProxy
Resources used:
None.
Methodology:
First, as usual, I read the expanded description.
Without the highlighter, that description is much more cryptic. But I decided to try dragging my mouse along the text and was shortly rewarded with a “hot” indicator.
After mousing over every single word, I came up with this:
Initially I was a little confused as to why the localhost address was there, until I decided to try using the hot words as a link, and capture the packets with Burp Suite.
When given a link like that, it’s usually a good idea to pay that url a visit.
