Forum Discussion

GusC's avatar
GusC
Icon for Bronze III rankBronze III
10 months ago
Solved

Threat Research: AMPscript Analysis

This is one of those labs that I return to periodically and then abandon after half an hour whilst scratching my head........Does anyone have any pointers about how to approach this? Which fields ne...
defensive cyber
  • steven's avatar
    steven
    10 months ago

    so, base for this hack is this --> https://www.assetnote.io/resources/research/gaining-access-to-ubers-user-data-through-ampscript-evaluation

    try for the message:

    Message:
%%[
SET @firstName = Lookup('driver_partners', 'firstname', 'partner_uuid', "5....")
]%%
Hi there I'm %%=V(@firstName)=%% and I created this tool.

    btw, you'll find all the nessesairy messages to solve the lab in the log. maybe you need to use cyberchef and urldecode.

netcat's avatar
netcat
Icon for Silver III rankSilver III
10 months ago

You have the issue that the response is always ""?
And also curl with the address or local IP just gives a HTTP 500?
And if you enter an invalid endpoint, it's still ""? 
Same here.