Basic Mission 9

[ravingraver]

I don't really understand this... I'll try to be as discreet as possible (so I don't give away any answers) and maybe someone could pm me about it...

I dont understand how if "...the first occurance of '<--', and looks to see what follows directly after it. If it matches "#exec cmd="ls"-->" or "#exec cmd="ls /home/xec96/public_html/missions/basic/8/"-->" it accepts it. If it does not match any of the situations above, then it kicks the user out." and yet we can still execute something else in that input that is not one of those 2 options. Am I missing something?

P.S: I have the answer so please don't try to hide it (if you pm me). I just really don't understand it. Thanks

[Defience]

I don't really understand this... I'll try to be as discreet as possible (so I don't give away any answers) and maybe someone could pm me about it...

I dont understand how if "...the first occurance of '<--', and looks to see what follows directly after it. If it matches "#exec cmd="ls"-->" or "#exec cmd="ls /home/xec96/public_html/missions/basic/8/"-->" it accepts it. If it does not match any of the situations above, then it kicks the user out." and yet we can still execute something else in that input that is not one of those 2 options. Am I missing something?

P.S: I have the answer so please don't try to hide it (if you pm me). I just really don't understand it. Thanks

Did you really execute something else in there?

[austinlab]

was that a hint or a correction. cause ya i looked it up and your right its a directory traversal or transversal. is there a difference between parent directory and directory traversal?

[Defience]

was that a hint or a correction. cause ya i looked it up and your right its a directory traversal or transversal. is there a difference between parent directory and directory traversal?

The parent directory is like the 'main folder' and directory traversal is a way to navigate to it, or to subfolders of it.

[banda]

I don't really understand this... I'll try to be as discreet as possible (so I don't give away any answers) and maybe someone could pm me about it...

I dont understand how if "...the first occurance of '<--', and looks to see what follows directly after it. If it matches "#exec cmd="ls"-->" or "#exec cmd="ls /home/xec96/public_html/missions/basic/8/"-->" it accepts it. If it does not match any of the situations above, then it kicks the user out." and yet we can still execute something else in that input that is not one of those 2 options. Am I missing something?

P.S: I have the answer so please don't try to hide it (if you pm me). I just really don't understand it. Thanks

I think you are correct.

BTW to execute #exec cmd="ls /home/xec96/public_html/missions/basic/8/"--> how do you even think of this path??? I have no clue. To complete level8 I executed a command different from both above.

[Defience]

I don't really understand this... I'll try to be as discreet as possible (so I don't give away any answers) and maybe someone could pm me about it...

I dont understand how if "...the first occurance of '<--', and looks to see what follows directly after it. If it matches "#exec cmd="ls"-->" or "#exec cmd="ls /home/xec96/public_html/missions/basic/8/"-->" it accepts it. If it does not match any of the situations above, then it kicks the user out." and yet we can still execute something else in that input that is not one of those 2 options. Am I missing something?

P.S: I have the answer so please don't try to hide it (if you pm me). I just really don't understand it. Thanks

I think you are correct.

BTW to execute #exec cmd="ls /home/xec96/public_html/missions/basic/8/"--> how do you even think of this path??? I have no clue. To complete level8 I executed a command different from both above.

It's giving you that path as a hint.

[ravingraver]

Well by putting in something else, I meant the answer to mission 9.
And I didn't put the file path, i put ../ instead, for mission 8.

[banda]

Well by putting in something else, I meant the answer to mission 9.
And I didn't put the file path, i put ../ instead, for mission 8.

This also works.

[banda]

It's giving you that path as a hint.

Hint I get in the page is

Sam remains confident that an obscured password file is still the best idea, but he screwed up with the calendar program. Sam has saved the unencrypted password file in /var/www/hackthissite.org/html/missions/basic/8/

However, Sam's young daughter Stephanie has just learned to program in PHP. She's talented for her age, but she knows nothing about security. She recently learned about saving files, and she wrote an script to demonstrate her ability.


I dont get such a path or am I missing something???



[Edited By: Monica]

[orwell84]

This is basic mission 9, right? So go to mission 9 and it gives you the path. Learn about absolute paths vs. relative paths, if that's not too spoiler-ish. It's the same thing as mission 8, but just a bit more...not difficult, but tricky, because you're trying to do the same thing, but to a different location.