Open redirect question

I am having a real hard time identifying the date in which the open redirect exploitation happens in the access log provided. I answered the other two questions just fine but the first question is no good. I have tried many of the date and time stamps and I keep getting not correct. I really need help with this.

Good morning Travis,
Did you manage to find the solution for question 1 in the Open Redirect question?
I struggle with the same thing you mentioned.
I hope you will have time to reply.
Thank you in advance.
Kinds regards,
Solomon

Hi TravisW, falled into the same trap, if you found a solution by now please share, we would all apreciate that. Thank you!

27/Apr/2023 15:45:22 is the right answer.
You probably typed in this answer 27/Apr/2023:15:45:22

If you copied and pasted the answer in, it would mark it as wrong because of the colon and no spacing in the answer.

2 Likes

It can definitely be tricky to pinpoint the exact moment, especially with all those timestamps to sift through. Sometimes it just takes a fresh pair of eyes or a new approach. Maybe try narrowing down your search to specific patterns or keywords in the log entries?

i was having the same issue, but now i managed to solve it, here is how :

the reason that none of log answers is correct, is simply because there might some issues within you regex, try this one instead :

grep -E ‘^."GET.?.=(%2f%09%2f[a-z0-9-]+%2e[a-z]{2,}).HTTP/.".$’ access.log

Thanx Brotha! 11 hours of me pulling my hair until I saw the answer fromat which aligned whit
what you commented. Thank you!