Basic Mission 3

[vandalize]

haha oops sorry fellas... I didn't think that was a spoiler :p

[Animan06]

aahh ok.. i easily figured this one out now... but i guess thats to be expected because ive already solved all of em cept 9, and my html skills have increased alot!

[DeathRaiser]

damn, I think I'm too dumb =/ I don't know how to do it i'm frustrated

[patriotfrosh15]

I think I know where to get the answer, but I forgot how to do it.
So is it a link? cause you said something about a URL

[patriotfrosh15]

I think I know where to get the answer, but I forgot how to do it.
So is it a link? cause you said something about a URL

i know almost exactly what im looking for but i cant find it...

[patriotfrosh15]

I have no idea, why would U like to change the path to the page, the page is on the server, that means it's pernamently there, more or less.
U' re looking at the right line, so think what the whole form does

Code: Select all

<form action="/missions/basic/template.php" method="get">
   <input type="hidden" name="lvl" value="3">
      <input type="hidden" name="file" value="missions/basic/lvl/3password.php">
      <input type="password" name="pass"><br /><br />
<input type="submit" value="submit"></form>

Well I got different kind of a problem, it's an easy mission, finding password is simple, but when I copy the password in or type it and then click SUBMIT, well nothing happened, like the page just reloaded! Any sugestions?

I figured it out after reading this post...the problem is, where did you get that code in the first place? All I found was

Code: Select all

<form action="/missions/basic/3/index.php" method="post">
                         <input type="hidden" name="file" value="password.php">
                         <input type="password" name="password"><br /><br />
                         <input type="submit" value="submit"></form>

After reading the post, I finally figured out after atleast and hour and a half of searching

[war devil]

lol, that took me so long! im not dumb after all!!!!

[UbiquitousWolf]

Those quotes seem kind of spoilerish to me but don't know might just be me . Anyways just look for what happens when you press that submit button in the code (ctrl + F is very helpful when looking through code). For example if the page has a label called Passphrase then in code do (ctrl + F) and look for "Passphrase" then you will be where that textbox will be and usually all the information you need is close to that. Just read the code of what happens when you press submit. Does it get the password from somewhere? Does it have a function in the code already to determine if it matches the password(usually for javascript)? Is it sending the password to an e-mail address? Stuff like that then from there you determine your path of attack hope it helps at least someone. Oh and one last thing you never know when a simple SQL Injection (' OR 1=1 --) will do the trick so you might want to try that as a first option since its a fast simple step.

[Don Real]

Ok, I have been lookinig at this code for quite sometime and still do not understand what I looking for. I do know I am suppose to look for a file which I don't know if the mission has a bug. I had this problem last time or maybe I am not understanding the mission which could be ture. I tried clicking on the text mission 3 and also the icon as well nothing really seems to change.

Thanks

[Don Real]

I finally understand and could not belive how easy it was. LOL