Basic Mission 7

[KthProg]

Does that mean that all it takes to prevent this is a type conversion to string then?
also, is there code you could type that would tell the script to interpret your command as a command no matter what?

[fashizzlepop]

Does that mean that all it takes to prevent this is a type conversion to string then?

No. You should still sanitize input.

also, is there code you could type that would tell the script to interpret your command as a command no matter what?

Nope. It depends solely on the code in the backend that doesn't sanitize input. That's what allows vulns.

[19r3ka]

Think of the input box for the year as one line of code. The year is one piece of code. It's probably taken and put through a function to give the calendar. However, you want to execute another command. As you may have learned, you can't put just the command you want in the box--it only works if you put in a year. What you have to do is make both happen at once. How?

(if you're still stuck, read my first sentence again)

It took me 2 years (OK I totally forgot about this brain teasing missions for more than a year) but I finally saw the light. My fellow noobs, all you need is in this wise lines. So take the red pill, rest your eyes and open your mind to see codes. <-- that's my Morpheos smiley, right there.

[1njustice]

Try literally googling - running-multiple-unix-commands.

First link, smashed it within a minute after reading this. I noticed people saying you don't need to enter a date in order for the cal to respond, I however used a date. Works either way it would seem.

Hope this helps!

[hoxtonspecial]

GaRRR! Took me a while to get this one!
Can't believe it was so obvious!

[occamsrzr]

Pfft....I'm retarded....I already completed this mission about a year ago, took year break from the site and I'm going back through it....good thing, cuz it took me two days to complete this mission...

Yeah, Windows command prompt commands don't work *nix

[W_i_l_l_i_a_m_s_o_n]

Wow. I feel so stupid. I figured it out. I was 'over thinking' that just a little

[mutsop]

Found it!!!! Thanks to "orwell84"'s post.
Quite alot of fun

[wizd00m]

So i've found the right command by searching around a bit. No idea why this command even works in the first place. But even though i was able to put together two commands and get it the program to show me whats happening i cannot find the password. Any chance someone could PM me to discuss this? I am pretty sure my command is right because I was able to get out of the cal program. I just don't really know what it is I am doing here.

EDIT: Ok so i've found the obscurely named file and my idea is to vim the file so that i can look at its contents but this is not working

[limdis]

Sure, PM me. Make another post though, you'll need 2 before you can PM.