Forum Discussion

GusC's avatar
GusC
Icon for Bronze III rankBronze III
7 months ago
Solved

Threat Research: AMPscript Analysis

This is one of those labs that I return to periodically and then abandon after half an hour whilst scratching my head........Does anyone have any pointers about how to approach this? Which fields ne...
defensive cyber
  • steven's avatar
    steven
    7 months ago

    so, base for this hack is this --> https://www.assetnote.io/resources/research/gaining-access-to-ubers-user-data-through-ampscript-evaluation

    try for the message:

    Message:
%%[
SET @firstName = Lookup('driver_partners', 'firstname', 'partner_uuid', "5....")
]%%
Hi there I'm %%=V(@firstName)=%% and I created this tool.

    btw, you'll find all the nessesairy messages to solve the lab in the log. maybe you need to use cyberchef and urldecode.

netcat's avatar
netcat
Icon for Silver III rankSilver III
7 months ago

You have the issue that the response is always ""?
And also curl with the address or local IP just gives a HTTP 500?
And if you enter an invalid endpoint, it's still ""? 
Same here.