头有点大

原题链接

分析

You don't have permission to access / on this server.

Please make sure you have installed .net framework 9.9!

Make sure you are in the region of England and browsing this site with Internet Explorer

修改http 请求头
具体的要去百度一下
对应的三个点是.NET版本，语言/地区，浏览器标识

使用TamperData拦截并修改请求：

• .net 9.9 -> User-Agent 添加;.NET CLR 9.9
• England -> Accept-Language 修改为 en-gb
• IE -> 修改User-Agent

我的最终payload

User-Agent: IE;.NET CLR 9.9
Accept-Language: en-gb


The key is:HTTpH34der

flag

HTTpH34der

知识点

http请求头