Basic Mission 5

[Sideshow1987]

I enter code into the URL, and for some reason, It doesnt allow the script to run.

Doesnt even load anything, its like it has been blocked...

Any ideas

[FurryDonkeyy]

OK I got it. To complete it with the referrer bug you must do this task in 2 separate parts. You don't download and save the html doc. You only use the js injection twice in the url bar. The first to change your email and the second to confirm it. Once you've that done click on the button. I hope that helps ppl out who got it right but couldn't get it to work.

Dude thanks alot. The only thing I did wrong was I never click the send to Sam button. I just assumed I wasn't doing it right but I guess not.

[Kutch]

I have beaten the mission, but I would like to know how I SHOULD be able to tell that the method from mission 4 doesn't work. The form seems pretty much exactly the same, no? How can I tell that the method from 4 isn't enough without just trying it? What exactly was the extra security measure Sam put in?

[Phat Pie Man]

lol, i sat here for 2 hours pasting the code onto the end of the url, but it was just overwrited and injected
...

THIS IS SOO FRIKIN COOL!

[H4XFLAME]

Uhm..cant get my head around this 1hr 30mins passed. changed my email and i get confused with the JS script, wished someone would just explain in detail, instead of explaining certain parts of it, if you got time can someone pm a detailed how to do this.

Thanks.

[H4XFLAME]

Cant get my head around this at all, can someone pm me a how to, all this is doing is stressing me out, did 1-4 inspace of about 10minutes each, just confused with javascript.

Thanks

[c24lightning]

I have beaten the mission, but I would like to know how I SHOULD be able to tell that the method from mission 4 doesn't work. The form seems pretty much exactly the same, no? How can I tell that the method from 4 isn't enough without just trying it? What exactly was the extra security measure Sam put in?

It checks the HTTP headers to see where you are viewing the page from. If the url is not /missions/basic/5/ or /missions/basic/5/index.php then it will give an error. Very simple actually.

Hence firebug works for this mission.

[dirtymongrel]

i used the ff route the first time as i knew you could change the ref with various plugins then i used the js route and managed to get that to work also

i have got the correct page displaying password sent a whole lot of times but have not recieved any emails.

should i be expecting the email to come through? or am i missing something as some people mentioned that the password was on the next page asper mission 4

can someone let me know ifthe scheduled task which sends out emails is only run once an hour or something

[slightly]

Has noone heard of tamper data? I guess it kind of defies the point of this exercise but whatever is easiest eh?

[-realpro]

pffff i really dont know how to do this
some ppl told you have to use JS but... i dont know anything about it at all...
Can someone plz give me a hint or something so i can try some more...?
ty
grtz