Jump to content
  • 0

[Sentry MBA] Help needed for dynamic token


ronnie32

Question

Hi everyone,
I'm trying to make a Sentry MBA config, which is a bit a special:
There's an user session ID which expires randomly, that ID is extractable from the previous page, I will try to explain:
URL 1 redirects to URL 2 which redirects to URL 3 (link expires after 20 minutes and is dynamically assigned by URL 2)
 

URL 2 is static and can be accessed directly, then will automatically points to URL 3
URL 3 contains the UserSessionId param
 
In Auth Stage, I defined the API I need to use for bruteforcing, which contains the dynamic UserSessionID value.
I'm struggling to extract the UserSessionId from URL:

<-----Bot Status: 421 - Parsing Error in the Intermediate Action Stage----->


Since we cannot access URL 3 directly, because it expires 20 minutes later and is dynamically assigned by URL 2 from the redirection, which URL to define where?
How can I use the parsed code as a variable in the Auth Stage additional data?
 
Thank you!

Edited by ronnie32
  • Like 2
Link to comment
Share on other sites

4 answers to this question

Recommended Posts

  • 0
il y a 27 minutes, demiurgo a dit :

Do u have a site with that situation? 

PM'd you.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...