Basic Mission 9

[Crown4]

i'm 99.999998% sure i'm doing this right but i'm not getting anything. i even found a spoiler that said to do exactly what i was already doing! i dont understand #feellikeanoobcuzthatswhatiam

[Snipeon]

i'm 99.999998% sure i'm doing this right but i'm not getting anything. i even found a spoiler that said to do exactly what i was already doing! i dont understand #feellikeanoobcuzthatswhatiam

ok, here's my advice to you: read up and learn the language, damnit! we are NOT here to babysit and spoon feed you the answer! if you're just here to look up new methods to add to your script kiddy list, here's the perfect place for you or else, the hints in this forum and this place are more than enough answers for you!

[Crown4]

i'm 99.999998% sure i'm doing this right but i'm not getting anything. i even found a spoiler that said to do exactly what i was already doing! i dont understand #feellikeanoobcuzthatswhatiam

ok, here's my advice to you: read up and learn the language, damnit! we are NOT here to babysit and spoon feed you the answer! if you're just here to look up new methods to add to your script kiddy list, here's the perfect place for you or else, the hints in this forum and this place are more than enough answers for you!

well thanks for nothing but i already took tutorials on html ssl and unix i've memorized as much as one can in two days... i've tried any commands that might work and after i gave up even watched two videos of other guys doing the mission and it working with the exact line of code i was using over and over again. the only thing left is to ask you guys...

so i just tried to go back and just solve 8 again and didn't work either. nor did i get the warning about changing my line of code is it broken? i actually didnt get the warning about changing my code throughout this whole level 9 process.

[Snipeon]

i'm sorry. i was too harsh on you, but i was under the impression that you just wanted to be supplied the answer. all in all, i'm sorry. i just checked the mission and it was still working perfectly fine. are you sure you're doing it correct? anyway, just to help you a bit, i'm gonna compile the list of hints for this mission:

1. as you have noticed, this mission is similar to mission 8. however, there's no place for you to run the commands. where could you run the commands? try thinking bout it. there is a big hint even in the mission itself. here:

In the last level, however, in my attempt to limit people to using server side includes to display the directory listing to level 8 only, I have mistakenly screwed up somewhere.. there is a way to get the obscured level 9 password. See if you can figure out how...

2. now that you figured out where to place the commands, try reading up a bit on directory transversal, as well as finding out which command in unix allows you to do just that...

3. after you find that command, think about where you are. and where you wanna go. there's also a big hint on where you want to go in the mission itself. no, should i say, it's the answer.

[Crown4]

i'm sorry. i was too harsh on you, but i was under the impression that you just wanted to be supplied the answer. all in all, i'm sorry. i just checked the mission and it was still working perfectly fine. are you sure you're doing it correct? anyway, just to help you a bit, i'm gonna compile the list of hints for this mission:

1. as you have noticed, this mission is similar to mission 8. however, there's no place for you to run the commands. where could you run the commands? try thinking bout it. there is a big hint even in the mission itself. here:

In the last level, however, in my attempt to limit people to using server side includes to display the directory listing to level 8 only, I have mistakenly screwed up somewhere.. there is a way to get the obscured level 9 password. See if you can figure out how...

2. now that you figured out where to place the commands, try reading up a bit on directory transversal, as well as finding out which command in unix allows you to do just that...

3. after you find that command, think about where you are. and where you wanna go. there's also a big hint on where you want to go in the mission itself. no, should i say, it's the answer.

thank you (really this time lol) i did try looking up other ways to navigate directories and what not but i only found the same thing so i sent you a pm to see if i at least have it right whether it works for me or not

[cluele55]

I hope these are acceptable non-spoiler hints for those still struggling:

Hint 1: Get the exact directory path from mission 9 instructions
Hint 2: Go back to mission 8
Hint 3: While in mission 8, type in the same code you used for mission 8 EXCEPT, instead of listing all files from an unknown directory, list all files from the exact directory you were given in mission 9 (see Hint 1)
Hint 4: When you find the hidden file, be sure that your URL points to mission 9, not 8.
Hint 5: Typos can seriously mess you up. Be mindful of spaces, characters, numbers, and spelling.


Mission 8 took me forever to work out, and it turned out to be a spacing issue. Once I overcame that hump, mission 9 came a lot easier. So maybe these hints will help. What people are saying, though, that you have to really study directory structure and certain commands, is true. But if you know all that and you're still stuck, check for typos.

[aliguy]

ONCE YOU HAVE THE LIST of shtml files look at http://www.computerhope.com/unix/uls.htm and try all the methods... Hope this helps

[zapalab]

OMG..... that felt WAY too easy..... hope this doesn't overspoil, but a site that really helps is :http://en.wikipedia.org/wiki/Directory_traversal anyway..... good luck all!

Thanks! This helped a ton. All I needed was an example of how to combine commands together.

If anyone is having trouble figuring out the syntax. His link is very helpful.

[N3nvy]

Wow this took me a long time to figure out...

It is very similar to mission 8, so if you can't remember exactly what you did, go back and try it again with the identical syntax. From here it's really only a small change in the command and it will take you where you want to be. Use the hints and more importantly the description of the mission, where a path for the file is given, it could come in handy...

Try and keep it straight forward, there is no need to over think the mission. There is nothing involved that you don't already know, except the information that is already given to you. I advise to briefly look over directory transversal attacks though, as it has some relation.