You are a PHP ninja! You can’t get enough of this language. When you learned that others hate it and gave it bad reviews you felt the need to “correct the situation”. You’ve learned of an API that all…
You are a PHP ninja! You can’t get enough of this language. When you learned that others hate it and gave it bad reviews you felt the need to “correct the situation”. You’ve learned of an API that allows you to delete reviews. Muhahahah! The problem is that only the site moderator can do this and you don’t have his credentials. This has not stopped you in the past.To earn your flag you must perform the following actions.Find the suitable API that will allow you to accomplish your goal above.You have previously registered with the site as a “reviewer” and remember your username is “python_guru1” and password is “The_sql_injection_vulnerabilities_are_false”. Use these to get your token from the “flag4token” API.Analyze the token and do research to find a way to “upgrade” your token so that you can fool the API into thinking you are a “moderator”.Leverage your newly crafted token to delete all of those incriminating PHP reviews and earn your flag.
OR