DIVA - Hardcoding Issues - Part 1

Now let’s come to our next vulnerability which is Hardcoding Issues

The one common mistake which many developers do while either making the web application or mobile application, they unintentionally forget to remove the hardcoded password or keys, which help an attacker to access sensitive information.
To solve this challenge we need to follow the same steps which we did in the last challenge

We need to use jad again to see the clear text of the file

KEY= “vendorsecretkey”
As you can see inside the code we can see the key, let’s try it inside application


Mükemmel As you can see the key worked perfectly and the access has been granted to us.

~ tavşanı sever

Twitter / Hack The Box / CTF Team / Teck_N00bs Community Telegram