Understand the cookie of the http field

(1) Open the link to the web page with the following title

(2) Decoding the prompt

DXNlcl9sb2dpbj0yMTIzMmYyOTdhNTdhNWE3NDM4OTRhMGU0YTgwMWZjMzsgcGFzc3dvcmQ9NGM3ODM4NDVkM2E0ODk0ZmFmYTNhMWJmOGE4ZDRlN2U7IGFzZGNhc2M7IFBIUFNFU1NJRD02bzA3Z3E1a2szOXE2NnI5NmFvMmQ4OWo3MDsgcGF0aD0v]

User_login=21232f297a57a5a743894a0e4a801fc3; password=4c783845d3a4894fafa3a1bf8a8d4e7e; asdcasc; PHPSESSID=6o07gq5kk39q66r96ao2d89j70; path=/

(3) We see that there are two values path and phpsessid in the prompt, and we determine this to be the value of the cookie field. So, we add it to the obtained message to see if it can be successful.

GET / login.php HTTP/1.1Host: b73bef3389f1a266.yunyansec.comContent-Length: 45Cache-Control: max-age=0Origin: http://b73bef3389f1a266.yunyansec.comUpgrade-Insecure-Requests: 1Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/* Q=0.8Referer: http://b73bef3389f1a266.yunyansec.com/index.htmlAccept-Language: zh-CN,zh;q=0.9cookie: user_login=21232f297a57a5a743894a0e4a801fc3; password=4c783845d3a4894fafa3a1bf8a8d4e7e; asdcasc; PHPSESSID=6o07gq5kk39q66r96ao2d89j70; path=/Connection: close

So far, there is nothing of value.

(4) start scanning the catalog on the tool.

Found a file.

(5) try to link

Let's grab the bag and add cookie in the way we just did.

Got it