{"url":"https://writeups.es/writeups/portswigger/auth-bypass-info-disclosure/juanluismm520","machine":{"name":"Auth Bypass Info Disclosure","slug":"auth-bypass-info-disclosure","platform":"PortSwigger Web Security Academy","platform_slug":"portswigger","difficulty":"muy_facil","difficulty_label":"Muy fácil","operating_system":["Web"],"tags":["web","information-disclosure"],"original_url":"https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-authentication-bypass","all_writeups":"https://writeups.es/maquinas/portswigger/auth-bypass-info-disclosure"},"author":{"nickname":"juanluismm520","url":"https://writeups.es/u/juanluismm520","bio":null},"summary":null,"outline":[{"level":1,"title":"Auth Bypass Info Disclosure","anchor":"https://writeups.es/writeups/portswigger/auth-bypass-info-disclosure/juanluismm520#auth-bypass-info-disclosure"},{"level":2,"title":"📝 Resumen","anchor":"https://writeups.es/writeups/portswigger/auth-bypass-info-disclosure/juanluismm520#resumen"},{"level":2,"title":"🔍 Explotación","anchor":"https://writeups.es/writeups/portswigger/auth-bypass-info-disclosure/juanluismm520#explotacion"}],"cves":[],"code_languages":[],"stats":{"words":124,"reading_minutes":1,"votes":0},"content_markdown":"# Auth Bypass Info Disclosure\n\n> Plataforma: **PortSwigger Web Security Academy** | Dificultad: **Muy Fácil** | IP: `<IP>`\n\n---\n\n## 📝 Resumen\n\nMáquina de tipo **muy_facil** en la que nos dice que debemos borrar a Carlos aprovechando una fuga de datos que tienen en el panel de administrador.\n\n## 🔍 Explotación\n\nBásicamente nos vamos a admin y nos aparece que \n![Imagen](https://heqkdeabwizixwftdumf.supabase.co/storage/v1/object/public/writeup-images/318f5db5-2777-441d-bccc-080db9bfff1e/92a33c8f-038c-420d-85c8-a24df43b1a30.webp)\n\nPuesto que nos dice solo los usuarios locales pueden acceder al panel (y a eso le añadimos la pista que nos da el enunciado) basta con añadir algunas cabeceras indicando que la ip solicitada es localhost (aunque sea mentira).\n\nPara ello pruebo las cabeceras `X-Real-IP, X-Custom-IP-Authorization y X-Forwarded-For`\nFinalmente tenemos que:\n`X-Custom-Ip-Authorization: 127.0.0.1` \n\nTeniendo en cuenta que las otras no funcionan pero X-Custom-Ip-Authorization si. \n\nSolucionamos el lab borrando a Carlos\n","published_at":"2026-06-08T18:02:04.811496+00:00","updated_at":"2026-08-14T18:15:44.659871+00:00","license":"CC BY-SA 4.0","attribution":"Writeup de juanluismm520 publicado en writeups.es — https://writeups.es/writeups/portswigger/auth-bypass-info-disclosure/juanluismm520"}