Please ask questions in this topic ONLY

[Stevenator01]

I feel like a retard... I have done this mission before and completed it.. I got to the file://C:/ Directory of course, found the admin page, and know about the one other exploit of the site. I, making sure I don't look at the spoilers in the g****b**k itself, can not figure out for the life of me what to do...

What protocol should i be using? SSI, directory transversal, trying to find the PERL codes? I've been up for over a day and I might just go to sleep before attempting this; I feel like I should know it

[Nathalos]

GAH!

I completed it after seeing some of the hints here.
I felt like an idiot for not realizing it.

Here's my hint: the contents of the enormous .txt file are an enormous red herring. Don't waste time reading them. The question is how you read it, not what's in it. This gives you the final piece you need to solve the puzzle.'

Here's another hint: the contents of C:\Windows are ALSO an enormous but very amusing red herring.

No esoteric protocols needed, no crazy exploits, no SQL or Javascript. Just plain old Windows and enough resourcefulness to see and exploit the enormous, enormous, enormous security hole. Seriously, it's big enough that you could drive a Death Star through it, and I am thoroughly ashamed I didn't see it earlier.

[Marros7]

Ok, I found the directories, used the g****b**k to view the a**** p****, which shows what I think are the username and password, but I don't know where to input these. Can someone point me in the right direction?

[cellardoor76]

Banging my head with this one and I will say this. Do not use chrome for this one, USE FIREFOX!!!!

[spencer12]

omg
just missed small detail and couldn't complete it ( diid it now)
just think.. what is your action????!!

[Removed] No spoilers -- Goatboy

[silvara]

I only found the source.pl and generated.html versions of the login page explicitely written in the book and I deduced everything else thank to a few clues here. Did I spoiled myself much?
If there is a realist way to deduce/guess/find the login page name, I'd be grateful to get some clue about it. Does it take much more time the realist way?

HTS teached me much up until now, and it's the one website I found covering such a wide range of notions and making many of them understandable for almost everyone just trying. So I'll also use the occasion to say thank.
And...The other book entries were fun. ^^

[iitalics]

Hopefully this isn't a spoiler, but someone should clear the guestbook eventually.

[johnyxx]

spent 30 minutes trying to open every file on browser, 15 trying syntaxes to open files on that page, knew of watching at source is basic 1, still failed at doing it and only realized after hours this was so simple and I was making it so complicated.