Please ask questions ONLY in this topic.

[Biddaum27]

This a note to anyone who is having trouble with this mission: Firephp for firefox alters your useragent, atleast it did for me so if your having trouble try disabling it first.

[__Dragon__]

Ok I realize that I must change my user agent. But what I don't understand is two things. First, how did you know that you were supposed to change the user agent? And second, how did you know what to change it to? I don't want to finish the mission without understanding what I'm doing or why I'm doing it

[eXPeri3nc3]

Hi all. Thanks for all the pointers and I manage to finish this mission. =D It's fun!

Regardless, I never expected the username to be 'that', however I have a rough idea on what the password is haha. I keep banging at the wrong username at first gah.

[Defience]

Ok I realize that I must change my user agent. But what I don't understand is two things. First, how did you know that you were supposed to change the user agent? And second, how did you know what to change it to? I don't want to finish the mission without understanding what I'm doing or why I'm doing it

Once you login as an administrator you are given a message which in part reads, "that access to the staff administration area is restricted to the district-supplied '****_*******' web browser." That's the answer to both of your questions.....

[maroxe]

I am stuck, i don't know where to start.
i belive teachers/grade tables are vulnerable to sql injection, but i don't know how?
am i missing something?

[Defience]

I am stuck, i don't know where to start.
i belive teachers/grade tables are vulnerable to sql injection, but i don't know how?
am i missing something?

Start with the mission description. It gives you some info you can use once you're in the site. From there, do the usual, look around, click things, check source codes, watch the url, and note anything of interest. Obviously a student level isn't going to be helpful so look for something that may lead you to a level with more privileges. Use what you've learned so far from other missions to complete your task. Also, read through all of the posts in this forum for other hints.

[maroxe]

I am stuck, i don't know where to start.
i belive teachers/grade tables are vulnerable to sql injection, but i don't know how?
am i missing something?

Start with the mission description. It gives you some info you can use once you're in the site. From there, do the usual, look around, click things, check source codes, watch the url, and note anything of interest. Obviously a student level isn't going to be helpful so look for something that may lead you to a level with more privileges. Use what you've learned so far from other missions to complete your task. Also, read through all of the posts in this forum for other hints.

well i tried staff.php only by chance
is it me or there is no gym teacher in the stafflist.php ?

also, how can i guess the password? it's purely chance!

[theknuckster]

I've just finished this mission, and I must say, I never had that sudden moment of realisation like I did in the other missions
However, I noticed that I didn't once use the holy_father user agent, but that could be because I found out where the login page was by pure luck.
So is that user agent how you're meant to find out the location of the login page?

[superit23]

I know how to do it. But whenever I do, it just doesn't work. I use my add-on (the same one someone else gave the url to) and it does not work. I checked my config and it did what it was supposed too, but it still won't let me in.

[samfox]

You will need to find out who will most likely be the admin by looking around. Now you should have an idea which account you will be wanting to login to, go ahead to the login page which you should have already found. This is now your time to play around with the username and password ... you will get it eventually.

Your greeted with 3 buttons and the obvious one you need to click but it says you are not an administrator so you cannot change grades. Think what you could do to give the account administrator privileges...
Now you can change grades you will notice it says you are too late to change grades, so you will have to find bits to work around this.

& Thats it. Done Hope ive not given too much away, tryed not to spoil it as much as possible.

[Edited by: Defience]