Please ask questions ONLY in this topic.

[Lynks]

ok I'm really stuck with this one,

I managed the process of listing all the web clients and managed to successfully steal the session cookie from the radio site. Now I'm really stuck, I have set this cookie for firefox to use (checked the url, path and cookie name several times) but I am not being given access to anything.

I have not found the page which uses cookies yet (I expected the 'main' page to auto log me in upon request+cookie, but I was clearly mistaken)

any chance of a hint regarding applying the cookie?

Thanks,
Lynks

[Biddaum27]

Ok, I'm sorry for being noob but do any of you know of a hosting site that won't get you put in prison if you make a cookie stealer on one of their sites?

[eljonto]

Ok, I'm sorry for being noob but do any of you know of a hosting site that won't get you put in prison if you make a cookie stealer on one of their sites?

I used http://www.110mb.com on an existing account, i dont think it's illegal, check the TOS though

[-HellBound]

A fun challenge with lots of techniques from earlier missions, A+!

[Defience]

Ok, I'm sorry for being noob but do any of you know of a hosting site that won't get you put in prison if you make a cookie stealer on one of their sites?

t35.com is another one that you can use.

[JakeMS]

Eh folks, is the bit working?

the bit where your eh semi but not full privileged? where you type stuff into and it gives an output..?

That probably made no sense by trying to abide by the no spoilers thing

I keep getting errors such as follows:

*B*::***::d* p*****e failed: near ".": syntax error(1) at dbdimp.c line 271 at ./pages/****pl line 16.

*B*::****::d* p****e failed: near "databases": syntax error(1) at dbdimp.c line 271 at ./pages/****.pl line 16.

.............. or is supposed to do this?

[Defience]

Eh folks, is the bit working?

the bit where your eh semi but not full privileged? where you type stuff into and it gives an output..?

That probably made no sense by trying to abide by the no spoilers thing

I keep getting errors such as follows:

*B*::***::d* p*****e failed: near ".": syntax error(1) at dbdimp.c line 271 at ./pages/****pl line 16.

*B*::****::d* p****e failed: near "databases": syntax error(1) at dbdimp.c line 271 at ./pages/****.pl line 16.

.............. or is supposed to do this?

Yes, it's working. Those error messages mean that your sql syntax is wrong.

[JakeMS]

Eh folks, is the bit working?

the bit where your eh semi but not full privileged? where you type stuff into and it gives an output..?

That probably made no sense by trying to abide by the no spoilers thing

I keep getting errors such as follows:

*B*::***::d* p*****e failed: near ".": syntax error(1) at dbdimp.c line 271 at ./pages/****pl line 16.

*B*::****::d* p****e failed: near "databases": syntax error(1) at dbdimp.c line 271 at ./pages/****.pl line 16.

.............. or is supposed to do this?

Yes, it's working. Those error messages mean that your sql syntax is wrong.

Ok, after some investigation after reading that message I discovered it was already connected, so tried other things and am now complete

[sanddbox]

I need help on this one.

I have tried everything but I cannot figure out how to exploit the perl script to run the l* command. I've tried a million variations and looked at like 10 pages on it from google but none of them tell me what I need. Any help on how to phrase commands such that the perl script will execute and display the results of l*?

[bgonzales999]

Sanddbox please read the forum in its entirety, if you have think about the directory you're accessing.

Also I can't figure out the cookie stealer part. I got to the message that says your cookie stealer appears to have worked but nothing seems to have happened. Also it says Nothing happened. Method or object not found. on the top left of the message. Finally, when I launch cookie editor it first shows me the cookie for the cookie stealer url. Am I supposed to put a hackthissite.org url in my javascript?