bWAPP HTTP Verb Tampering
HTTP Verb Tampering - Low Security Level
Solution:
*Note: I am using BurpSuite pre-configured browser, in case if you are not using the pre-configured browser then please configure the browser with proxy and then follow the below steps.
Step 1. Check the source code of the lesson page. Follow steps as shown in the video.
$_REQUEST[] method allows both methods POST and GET hence this vulnerability can be exploited.
Step 2. On the lesson page give password as bug and click on Change.
Step 3. Go to BurpSuite, right click and send the request to the Repeater tab.
Step 4. Change the POST with GET and make necessary changes as shown in the video.
Step 5. Click on Send and check details in the Response. (Refer video for more details).
PseudoTime
