| |
|
K32.nix
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 78
|
| |
|
|
|
 |
|
|
Post here hints and doubts about toys rc challenge!
good luck!
|
|
|
| |
|
|
Ratinho
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 52
|
| |
|
|
|
|
|
|
well, i manage to manipulate the site to show Bruce (and his last name) as the provider of the x-hellicopter
what should i do now??
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
you've got bruce's last name? type it in the submit score..
Edit by : cp77fk4r At 14/01/2010, 14:15:26
|
|
|
| |
|
|
Ratinho
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 52
|
| |
|
|
|
|
|
|
oh true, that really makes sense=]
passed, really nice challenge=]
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
dermischa
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 2
|
| |
|
|
|
|
|
|
Someonaegot a Hint ?
Is this challenge a kind of sql-injection ?
I found some files but still stuck there - no ideas left in my head...
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
it's not a sql injection issue, try to read word by word what the information you have about this level.
|
|
|
| |
|
|
prohacker
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 10
|
| |
|
|
|
|
|
|
cp77fk4r, i am sure i find the hint (I programming only under IIS and Apache and use Edit Plus (by the way : why edit plus put in my site file with no php extension?). )
i tried to find some file with no extension or like that : x.php.txt
but i didn't find ...
can you give another hint ?
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
nope. try to think like real hacker.. how can you find this files?
|
|
|
| |
|
|
prohacker
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 10
|
| |
|
|
|
|
|
|
OK, this level was fixed :P
Edit by : prohacker At 12/09/2010, 20:34:47
|
|
|
| |
|
|
Alias
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 27
|
| |
|
|
|
|
|
|
| cp77fk4r: | | [tcolor=red]it's not a sql injection issue[bcolor], try to read word by word what the information you have about this level. |
Are you sure? Because I found a specific individual case which allows to inject SQL queries..
If it's not that, I guess I found another way to pass this level, but this way is not feasible because it's not taken into account in advance.
|
|
|
| |
|
