- Jul 4, 2020
- 219
- 750
It's obviously base64 but somehow "newline" character (%0A) polluted the url.
The redirction page actually works with that newline character in... but there's referer check.
The redirction page actually works with that newline character in... but there's referer check.