Basic Mission 5

[ifail]

If you completed them then you must have done something right. Keep in mind that there is usually more than one way to finish these. Try doing some research to find out why certain exploits work and what makes some sites vulnerable. Learning is the goal

Sort of true I guess, I'll try and find some info and see if I can understand what really happened. Sorry if there was too much info about how I did it (I see it's edited) in my previous post btw, that was not my intention at all. Would you mind if I ask you a more direct question in a pm ?
Greetz and thanks for the fast reply

[Defience]

If you completed them then you must have done something right. Keep in mind that there is usually more than one way to finish these. Try doing some research to find out why certain exploits work and what makes some sites vulnerable. Learning is the goal

Sort of true I guess, I'll try and find some info and see if I can understand what really happened. Sorry if there was too much info about how I did it (I see it's edited) in my previous post btw, that was not my intention at all. Would you mind if I ask you a more direct question in a pm ?
Greetz and thanks for the fast reply

I don't mind, that's what I'm here for.

[Slow02GT]

So I solved both mission 4 and mission 5 with no problem, but they didn't do what I expected. Instead of emailing me the passwords, both the PHP scripts just spit the password out on the screen.

What gives?

[Defience]

So I solved both mission 4 and mission 5 with no problem, but they didn't do what I expected. Instead of emailing me the passwords, both the PHP scripts just spit the password out on the screen.

What gives?

That's what it's supposed to do, it just simulates an exploit and assumes that you did it correctly so it gives you the password.

[Slow02GT]

Oh ok, I thought it would actually email the password. Durr

[Kyriakos]

Hello,

i already know javascript and im done with the basic missions and with basic mission 5 where we can use javascript injection..but really now..where else can i use this injection and with what profit??..and what do i have to type in the browser or whatever to make the injection possible in any case??

Please some1 answer, im excited somehow

[Phelpsy20]

Hello

i am sure i have the right js injection but i am confused about what value i have to enter in to the forms[0] section of it.

any info on this

Thanks

[Defience]

Hello

i am sure i have the right js injection but i am confused about what value i have to enter in to the forms[0] section of it.

any info on this

Thanks

Well, if you decide to try this method I'd suggest doing some research on it because there are tutorials and such out there. Let me ask you this....how do you know you have the right js injection and if you do, shouldn't there be more info from wherever you got it?

[-_n00b]

Ok so I finally got it after a day and a half. This site helped alot. http://nexodyne.com/archive/index.php?t-14736.html. Read over it and compare the sections to the source. Which one matches?

[here_comes_trouble]

javascript is 100% neccessary. Your gonna need to learn it either way so start here. Its not complicated, just use your head.

Not a spoiler: you want to CHANGE where the pw is being sent to via js. Re-read this forum- http://nexodyne.com/archive/index.php?t-14736.html

good luck guys