So how do you do it?

Post by **floodhound2** » 05 Sep 2006, 15:44

Ok so I can write code but not good at haxorz on a website. Please give me some knowledge on how this wargame1 was infiltrated. Perhaps you can begin pointing my ass in the right direction. Some html knowledge needed? Help me out !!!

₣ĽΘΘÐĦΘŮŊÐ

sternbildchen · Post by **sternbildchen** » 06 Sep 2006, 08:45

No code writing needed here. Don't think to complicated...

Post by **pseudo_opcode** » 06 Sep 2006, 09:07

ok a big hint:
here's all the tools you need for both wargames:-
1.Web browser

Thats it..

Post by **floodhound2** » 06 Sep 2006, 21:33

All right people I spent a few hours at work trying to get into Good_Brain account. I am sure I need to put something in to the web browsers address like user.php = 0 or something added to the already listed address, but I can get it. Please feel me in on some details; I am trying to learn this but no assistance is hurting my progress. I have viewed the source code but I am stumped. Email me some info will you.

Post by **Gogeta70** » 06 Sep 2006, 22:34

Well, i'm glad you're trying the challenges, that's what i coded them for. Your in the right direction, url manipulation is the key in this challenge.

Post by **DNR** » 07 Sep 2006, 08:31

flood,
The answer will be released soon. You are in the right direction, you are attempting to traverse the directories to bypass login. The answer is in the code, and you'll need to craft the URL to match.

Good job brah,

DNR

Post by **floodhound2** » 08 Sep 2006, 11:15

All right I don’t care to hack the website unless I know more about the .php and some web site information in general. I know what is going on in this particular security flaw; however as you all know I don’t know how to properly type in the correct addressing link. I have since tried to catch some of you on mIRC and so far no success. I just need a little one on one to learn some more details on the particulars I am lacking in.

Peace and hope to get to see some of you on mIRC soon.

I will google and gain !!!!!!

TheKingOfHearts · Post by **TheKingOfHearts** » 26 Nov 2006, 02:57

well look i am a noob but this is how i passed it

Guide (no spoiler):

you know about php where it put the thing in the back?

well look :

sitesite.com/index.php?crap=bla

well thats what lvl one is about...

you might need to sign up and view what happens when you are logged in

Spoiler :
------------------------------------#
URL bar
------------------------------------#

suck-o.com

So how do you do it?

So how do you do it?

answers

;(