Go

Platform: web-kids20 | Category: Web | Type: Challenge | Difficulty: Easy | OS: Linux | Author: XESXOR | Date: 2026-03-09 | Status: Solved Techniques: http_request_interception, parameter_tampering

Summary

A task from the burp category on the Web Kids 2.0 platform. URL: https://burp.2537ly.space/task2/

Go - Web Kids 2.0

Description

A task from the burp category on the Web Kids 2.0 platform. URL: https://burp.2537ly.space/task2/

Analysis

The task requires intercepting and modifying an HTTP request. When submitting the form, parameters are sent to the server that can be modified before they reach it. The key point is the presence of hidden form fields or parameters whose values need to be changed.

Solution

Step 1: Intercept the request

Use Burp Suite or curl to intercept the HTTP request when submitting the form. ‍​‌‌​​​​‌​‌‌​​‌‌​​‌‌​​‌‌​​‌‌​​‌​​​​‌‌​​​​​‌‌​​‌‌​​‌‌​​‌​‌​‌‌​​‌​‌‍

Step 2: Modify parameters

Change the value of the hidden field or parameter before sending it to the server.

 bash read-only • copy allowed Copy
# Example with curl - parameter modification
curl -X POST 'https://burp.2537ly.space/task2/' \
  -d 'param=modified_value'

Step 3: Get the flag

After modifying the parameters and sending the request, the server returns the flag. ‍​‌‌​​​​‌​‌‌​​‌‌​​‌‌​​‌‌​​‌‌​​‌​​​​‌‌​​​​​‌‌​​‌‌​​‌‌​​‌​‌​‌‌​​‌​‌‍