Using a forward proxy, I have logged two payloads that are POST requests to a site, and I was curious as to what the best way to determine how a particular attribute in the payloads was generated. Below are the two payloads:
dedup_counter=2&leaderboard=2&scores=3563736&session=4FMzmwStjaRC&verifier=7e9282dbce68fe787be15f6633246fcd8297eb18
dedup_counter=3&leaderboard=4&scores=10448&session=4FMzmwStjaRC&verifier=07bdb58cb2147b4ef0ca01110a74e4fb4c8e99c1
I believe that the verifier
attribute is an SHA-1 checksum since that's the most common 20-byte hashing method, though I cannot confirm this. The issue is, I don't know what it's a checksum of and I'd like to know how to go about determining the process that was used for generating it. Any advice? I'll be happy to provide more specific information upon request.