Single-endpoint Race Conditions
👩🎓👨🎓 Learn about Race Condition vulnerabilities and how to exploit them! This lab's email change feature contains a race condition that enables us to associate an arbitrary email address with our account. Someone with the address [email protected] has a pending invite to be an administrator for the site, but they have not yet created an account. Therefore, any user who successfully claims this address will automatically inherit admin privileges. To solve the lab, we need to identify a race condition that lets us claim an arbitrary email address, change our email address to [email protected], access the admin panel and delete the user carlos.
Overview:
0:00 Intro
0:19 Single-endpoint race conditions
1:50 Lab: Single-endpoint race conditions
3:08 Predict potential collision
4:04 Benchmark the behaviour
5:14 Probe with single-packet attack
6:07 Prove by claiming the victims email address
7:15 Conclusion
If you're struggling with the concepts covered in this lab, please review https://portswigger.net/web-security/... 🧠
🔗 @PortSwiggerTV challenge: https://portswigger.net/web-security/...
🧑💻 Sign up and start hacking right now - https://go.intigriti.com/register
👾 Join our Discord - https://go.intigriti.com/discord
🎙️ This show is hosted by / _cryptocat ( @_CryptoCat ) & / intigriti
👕 Do you want some Intigriti Swag? Check out https://swag.intigriti.com