downloading vulnurable sites

[dark159123]

@sanddbox ooh... blame my english teacher

@linkero what version of windows did you try it on? i got it working on my old xp computer (i did try to connect to it through the lan but i couldnt find it), but i couldnt make it work on my new windows 7 computer

[linkero]

im using 32 bit win7 ultimate

[GiSK]

Hi there!! I'm new here, so I'm using this to introduce myself by the way

I've just completed 10 of the basic missions and well, I can see the need for these "vulnerable sites" to download. It's not about having total access (what would be the point then?), I think it would be interesting to be able to try more than one correct syntax.

For those of you who have done the basic missions, which I suspect, is most of you, you must have noticed that in order not to compromise this page, the code you can write is (obviously) really limited. You have to type the exact thing in order to get the exploit working, when in real life you can't find a page where you can ONLY execute a "ls ../", because that would mean that piece of code has been purposedly made possible to execute.

As hacking means (leaving ethics apart) exploiting security flaws, that wouldn't be hacking, since it's not a flaw, it's on purpose. In a real site you might use a "ls blah-blah" instead, or another wide variety of options. Since this place is meant for training, I'm sure this would come in really handy, so I would be glad to hear about these sites to.


Oh! And sorry for the off-topic, but as I'm new, I feel I've got to say I'm very excited about this site, and I'm willing to learn everything I can. Keep up with it, guys!

[linkero]

@GiSK: Try the "Realistic Missions".....you will find theres more then one way to solve most of them. The point of the basic missions is to teach you different ways of exploiting the vunerabilities, its not meant to allow you to do EACH way on a single mission and such. Thus is why they are called "Basic" missions


Back on topic a bit, you get it working yet dark159123?

[sanddbox]

For those of you who have done the basic missions, which I suspect, is most of you, you must have noticed that in order not to compromise this page, the code you can write is (obviously) really limited. You have to type the exact thing in order to get the exploit working, when in real life you can't find a page where you can ONLY execute a "ls ../", because that would mean that piece of code has been purposedly made possible to execute.

I would disagree with that. Code isn't limited; you just have to sanitize all data that is inputted.