---
description: March 30, 2024
---

# Value Fuzzing

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2Fy3mta135tYBR44j3fYkR%2Fimage.png?alt=media&#x26;token=85a9a899-5e92-4a21-abf3-cbacefb98cbd" alt=""><figcaption></figcaption></figure>

{% code overflow="wrap" %}
```
ffuf -w ids.txt -u http://admin.academy.htb:36035/admin/admin.php -X POST -d 'id=FUZZ' -H 'Content-Type: application/x-www-form-urlencoded' -fs 768
```
{% endcode %}

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FejioJiTuaI1dX8CYLDF8%2Fimage.png?alt=media&#x26;token=364fff4d-be5c-4d27-8f7f-e5132304331e" alt=""><figcaption></figcaption></figure>

{% code overflow="wrap" %}
```
curl http://admin.academy.htb:36035/admin/admin.php -X POST -d 'id=73' -H 'Content-Type: application/x-www-form-urlencoded'
```
{% endcode %}

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FsjtgOx9hGPD0uNkykfzY%2Fimage.png?alt=media&#x26;token=b318c088-d643-4203-b905-0d0137aaabbc" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FD64v3ejbeEf8P6Fu2mPp%2Fimage.png?alt=media&#x26;token=0205f375-effa-4f41-bfde-329534fb1993" alt=""><figcaption></figcaption></figure>
