头有点大
原题链接
分析
You don't have permission to access / on this server.
Please make sure you have installed .net framework 9.9!
Make sure you are in the region of England and browsing this site with Internet Explorer
修改http 请求头
具体的要去百度一下
对应的三个点是.NET版本，语言/地区，浏览器标识
使用TamperData拦截并修改请求：
- .net 9.9 -> User-Agent 添加;.NET CLR 9.9
- England -> Accept-Language 修改为 en-gb
- IE -> 修改User-Agent
我的最终payload
User-Agent: IE;.NET CLR 9.9
Accept-Language: en-gb
The key is:HTTpH34der
flag
HTTpH34der
知识点
http请求头
网友评论