PhieuLang

Web_UNS

Aug 21st, 2013
166
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 1.14 KB | None | 0 0
  1. <?php
  2.     $array = Array('admin'=>'22abc2','guest'=>'123password'); #censored
  3.     $serial = base64_encode(serialize(Array("username"=>"admin","password"=>true)));
  4. ?>
  5. <!DOCTYPE HTML>
  6. <html>
  7.     <head>
  8.         <title>Login bypass</title>
  9.         <meta charset="uft-8"/>
  10.     </head>
  11.     <body>
  12.         <h1>Try to login with admin :D</h1>
  13.         <?php
  14.             if (isset($_POST['login'])){
  15.                 $data = unserialize(base64_decode($_POST['data']));
  16.                 var_dump($data['password']);
  17.                 printf("<br />");
  18.                 var_dump($array['admin']);
  19.                 printf("<br />");
  20.                 var_dump($data['password'] == $array['admin']);
  21.                 printf("<br />");
  22.                 if ($data['username'] == 'admin' && $data['password'] == $array['admin']){
  23.                     echo "This if Flag";
  24.                 }else if($data['username'] == 'guest' && $data['password'] == $array['guest']){
  25.                     echo "You are a <b>guest</b> users. Try to login with admin :D";
  26.                 }else{
  27.                     echo "Login Failed";
  28.                 }
  29.             }else{
  30.         ?>
  31.         <form action="http://peternguyen.uns.vn/challenges/" method="POST">
  32.             <input type="hidden" name="data" value="<?php echo $serial;?>"/>
  33.             <input type="submit" name="login" value="Login">
  34.         </form>
  35.         <?php
  36.             }
  37.         ?>
  38.     </body>
  39. </html>
Advertisement
Add Comment
Please, Sign In to add comment