Uncle Arnold’s Local Band Review: HackThisSite - Challenge - - Realistic

 HackThisSite Playlist:

Of course why not?

I should help my friend so how am I gonna hack this site?

First I rewied the source code:

Imposing Republic
<form action="v.php" method="get">
   <input type="hidden" name="PHPSESSID" value="abcaeadfc31a5c43b2534bf995c0553f" />
   <input type="hidden" name="id" value="4" />
   <select name="vote">
    <option value="1">1</option>
    <option value="2">2</option>

Every band had different values I first thought it was the factor deciding the rank but it was not.

The only functionality was the voting feature but it didn’t made any change to the rating, so I intercepted the request:

It was a GET request, interesting.

I changed it to POST and change the number of votes to 25.

And it worked my friend's band is the most rated on the list now.