Please ask questions ONLY in this topic.

[-mouse-]

I only use linux and I know how to use linux. I generally know of perl but I am stump on what pipe command to use to get a file list or admin password hash or how to find it. That demo.exe I have no ideal what it and no way to know.

EDITED BY FAITH

Please ask questions only in this topic.
Just to keep the forum neat, and hopefully your post more noticed.
Please help us to keep the forum clean by report trashy posts. :>
You may start a new post if you're making a tutorial. However, if the tutorials are similar, please do not make two.

I wish you best luck with this mission, and hope you enjoy it.

<3 faith.

[djpitagora]

you don't need any pipe comands or to run that demo.exe. You should focus a bit on XSS. That's the way to go on this one

[chalkie1983]

Hi there,
So far i have managed to get to realistic 9 without any problems, just trial and error, but this one really has me stumped, i have created a cookie stealer that works perfectly, and ive tested it from a few different machines... But i just cant seem to work out how to access the system as m-crap the boss. being in perl i have also exhausted all my knowlege trying to figure a way of finding the database for system users but again unsuccsessfull... some help/advice would be great

many thanks in advance

[djpitagora]

I know it's frustrating. Apparently the script wants a particular type of cookie stealer. I don't know...it compares strings I guess and when it finds what it likes in it the script will give you the cookie. I tested like 3-4 different script (all working!!!) until I finally got the right one.

[chalkie1983]

many thanks for your help, i figured it out

[chalkie1983]

does the site take you back to HTS when you complete the last mission of clearing your tracks??

[generalacc]

Ok if i encode my XSS in base64 will it work? I know- try it... the "realistic" 9

[jmillican]

Ok, i've succeeded in logging in as his boss and paying him. Now it's telling me to subscribe to some log to clear it but I've got no idea what it's on about. Have explored the website and found no log files, and have tried appending /log /logfiles etc to the url. No spoilers please (of course) but I'm a little stuck

[djpitagora]

Ok if i encode my XSS in base64 will it work? I know- try it... the "realistic" 9

you don't need to encode it or look for complicated solution. The solution is easy and straight forward...you just have to use one specific solution out of the several that would work in the real world

[djpitagora]

Ok, i've succeeded in logging in as his boss and paying him. Now it's telling me to subscribe to some log to clear it but I've got no idea what it's on about. Have explored the website and found no log files, and have tried appending /log /logfiles etc to the url. No spoilers please (of course) but I'm a little stuck

then you haven't explored it enough. In one particular page you should find a directory (not the one with the logs) but from there you can browse through the directory structure until you find the logs. I can't say anything more without ruining the fun