Basic Mission 5

[mookalovesgloop]

peace

firebug for firefox or the "inspect element" feature in chrome is a more timesaving and simple way to solve this challenge, even though these methods are kinda frowned upon by the ones who really know what they're doing...you're trying to accomplish the same thing as mission 4...get the info sent to you when the button is clicked instead of sam hope this was helpful

hetepu
mooka

[vaibhavdiwase]

Just use 'firebug' add-on for Firefox or 'inspect element' on Chrome. As simple as that!
Thank you guys for suggesting it. Cheers

[NoobAnonKS]

the hardest part about this mission was figuring out how to use firebug. lol

[QSpec]

Question:

What stops Basic 5 from being exploitable like Basic 4? As in, what line in the HTML requires a difference approach (assuming you did Basic 4 differently).

Sorry if this has been asked and answered. I did sort through a number of pages and the closest I found is why Basic 4 and 5 can be solved with the same approach (which I think I understand). This is not really what I am looking for though.

Thanks in advance.

[hand0fg0d]

I went through the first 20 pages of this post and still haven't seen my answer so I figured Id reply and ask. Why is an email required for this mission? I solved it injecting JS which was interesting enough and I see people say there is more than one way to do this but is there a way to recieve the email with the password or no? if there is could you PM me as to not spoil it for anyone else and help me figure things out as far as the other ways to crack this one. I think knowing more than one way to skin the cat if you will would be helpful for the future projects.

[fashizzlepop]

To answer a few questions:
Basic 4 can be solved in a very basic way since the PHP (not html) on the server side does Not require a valid referrer (this is for basic 4). Basic 5 Does require a valid referrer which is why JS injection or inspect element/firebug are required as it will then have a valid referrer. Look up what a referrer is if you are unsure how/why this works.

As to if you need a valid email to inject, No. Normally and realistically you would need a valid email to use (preferably anonymous so your hacking attempt can't be traced back to you). This mission, however, is simplified so instead of emailing you and making you check your emails it just gives you the password to continue on.

[Helinnis]

Is the solution for mission 5 supposed to be the same as mission 4? Or is there a bug in both missions and I've stumbled upon it?

[illusion_]

Is the solution for mission 5 supposed to be the same as mission 4? Or is there a bug in both missions and I've stumbled upon it?

Similar, but not the same. Basic 5 imposes some extra restrictions that fixes some (but not all) of the methods that solve 4

[fashizzlepop]

Is the solution for mission 5 supposed to be the same as mission 4? Or is there a bug in both missions and I've stumbled upon it?

This has been answer SO MANY times in the this thread alone.

[WallShadow]

Is the solution for mission 5 supposed to be the same as mission 4? Or is there a bug in both missions and I've stumbled upon it?

This has been answer SO MANY times in the this thread alone.

obvious fact is obvious