https://blog.darkity.top/posts/Recent content in Posts on Darkity BlogHugoen-usSat, 11 Jan 2025 00:00:00 +0000https://blog.darkity.top/posts/testyouriq/Sat, 11 Jan 2025 00:00:00 +0000https://blog.darkity.top/posts/testyouriq/<h2 id="introduction"> Introduction <a class="heading-link" href="#introduction"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>I was doing an IQ test on <a href="https://testyouriq.org/" class="external-link" target="_blank" rel="noopener">https://testyouriq.org/</a> (also known as <a href="https://intellitest.io/" class="external-link" target="_blank" rel="noopener">https://intellitest.io/</a>, <a href="https://iqtesting.online/%29" class="external-link" target="_blank" rel="noopener">https://iqtesting.online/)</a>, but when I finished, it presented a payment page.</p> <p><img src="images/payment.png" alt="Image"> I already completed my test and was only notified it would be paid AFTER I wasted my time on it. So as any hacker, I started digging on the page.</p> <h2 id="discovery"> Discovery <a class="heading-link" href="#discovery"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>The website had a simple structure with no backend or subdomains. The main target was a single webpack JS bundle.</p>