Multi-endpoint Race Conditions
👩🎓👨🎓 Learn about Race Condition vulnerabilities and how to exploit them! This lab's purchasing flow contains a race condition that enables you to purchase items for an unintended price. To solve the lab, we need to successfully purchase a Lightweight L33t Leather Jacket. When experimenting, it is recommended to purchase the gift card as you can later redeem this to avoid running out of store credit.
Overview:
0:00 Intro
0:30 Hidden multi-step sequences
2:45 Methodology: Predict, Probe, Prove
5:09 Multi-endpoint race conditions
5:54 Aligning multi-endpoint race windows
8:19 Lab: Multi-endpoint race conditions
9:55 Predict: identify a potential collision
11:04 Probe: benchmark the behavior
13:17 Prove: exploit the race condition
14:42 Recap
15:14 Bonus: solving without proper methodology
18:22 Conclusion
If you're struggling with the concepts covered in this lab, please review portswigger.net/web-security/... 🧠
🔗 Portswigger challenge: portswigger.net/web-security/...
🧑💻 Sign up and start hacking right now - go.intigriti.com/register
👾 Join our Discord - go.intigriti.com/discord
🎙️ This show is hosted by / _cryptocat ( @_CryptoCat ) & / intigriti
👕 Do you want some Intigriti Swag? Check out swag.intigriti.com
Пікірлер: 9
i was able to go into the negative changing the values of the gift card i was purchasing. it put me exactly as negative into my account as the addition gift cards i got. interesting tho, cuz if i just took those gift cards to a seperate account i could gain purchasing power. (had this been real). Hey thank you so much for these videos! i can't wait to watch them all. Note to anyone here in the comment section feeling lost: we all do. don't judge yourself for it. and don't judge yourself for judging yourself. just accept that it's complicated and that's ok. then keep APPLYING THE LABS. walk around the house and try again till it feels better.
@intigriti
10 күн бұрын
Good point on the transferring gift cards to a new account!
for some reason my response time for my 1st packet is typically shorter than my other requests. some times they're the same. i'll send 3-8 at once trying to test for that "longer response" i'm supposed to see.
I don't think the 17:17 bonus solution will work. Because although we are able to buy the overprice jacket, our store credit still being reduced, as seen in 15:20. So even we can buy 1000 gift cards, our store credit will be reduced to minus the price of 1000 gift cards.
@intigriti
Ай бұрын
Hmmm IIRC the bonus solution was how I originally solved the challenge, so it did work? 🤔
Why is it that I can only succeed when I remove the first 'get warm' request? Keeping this 'warm' request doesn't solve the lab？
@intigriti
2 ай бұрын
Hmmmm weird! Probably the race condition labs are quite temperamental, by nature.
I don't get it
@intigriti
5 ай бұрын
Which part? Did you check the previous labs, especially the first one which covers the background of race conditions?