Privacy Policy Inspection - DuckyMomo20012/owasp-juice-shop GitHub Wiki

Privacy Policy Inspection

Difficulty: 🌟🌟🌟

Description: Prove that you actually read our privacy policy.

Category: Security through Obscurity

Tags: Shenanigans, Good for Demos

Solution:

Open http://localhost:3000/#/privacy-security/privacy-policy While reading and moving the cursor along paragraphs, I noticed the special effect when the cursor hovers on some text, So I use DevTools to inspect it

image

Note down all text inside <span class="hot"></span> tags, which are http://localhost, We may also, instruct you, to refuse all, reasonably necessary and responsibility

Combine those into URL http://localhost:3000/we/may/also/instruct/you/to/refuse/all/reasonably/necessary/responsibility and visit it

image

It's 404 error, but the challenge is solved

image

⚠️ **GitHub.com Fallback** ⚠️