완료됨
maybe there's a problem with the bot?
my payload reflected but when i try to report it to the bot, nothing happen. i try multiple of webhook platform but nonw of them work. when i get into the docker and try to run something like python3 ./bot/bot.py report.php, this is what i get
Navigating to: http://127.0.0.1:8000/report.php
Traceback (most recent call last):
File "/app/./bot/bot.py", line 69, in <module>
read_url(argv, {"name": "flag", "value": FLAG})
File "/app/./bot/bot.py", line 63, in read_url
driver.add_cookie(cookie)
File "/usr/local/lib/python3.10/site-packages/selenium/webdriver/remote/webdriver.py", line 767, in add_cookie
self.execute(Command.ADD_COOKIE, {"cookie": cookie_dict})
File "/usr/local/lib/python3.10/site-packages/selenium/webdriver/remote/webdriver.py", line 429, in execute
self.error_handler.check_response(response)
File "/usr/local/lib/python3.10/site-packages/selenium/webdriver/remote/errorhandler.py", line 232, in check_response
raise exception_class(message, screen, stacktrace)
selenium.common.exceptions.UnableToSetCookieException: Message: unable to set cookie
(Session info: chrome=133.0.6943.98)
Stacktrace:
#0 0x55b446271bba <unknown>
#1 0x55b445d0f5e3 <unknown>
#2 0x55b445d1cdf8 <unknown>
#3 0x55b445dbf1d6 <unknown>
#4 0x55b445d86a52 <unknown>
#5 0x55b445dacccc <unknown>
#6 0x55b445d86823 <unknown>
#7 0x55b445d52a88 <unknown>
#8 0x55b445d53bf1 <unknown>
#9 0x55b44623b15b <unknown>
#10 0x55b44623f0e2 <unknown>
#11 0x55b44622801c <unknown>
#12 0x55b44623fcd4 <unknown>
#13 0x55b44620c48f <unknown>
#14 0x55b4462604f8 <unknown>
#15 0x55b4462606c9 <unknown>
#16 0x55b446270a36 <unknown>
#17 0x7fc2c1ef3ea7 start_thread
maybe this is the library problem or something like that?
#web
답변
1
limelee
웹해킹 초심자
While testing, I found that when the FLAG value is ' ' (a single space), it causes the same error as yours.
{'name': 'flag', 'value': ' '}
Message: unable to set cookie
(Session info: chrome=132.0.6834.197)
If this is indeed the case, I recommend setting the FLAG to any valid string and testing again.
FLAG = "DH{{This_is_flag}}"