Ext 12

I find this mission very confusing. Basically, to solve it, you have to pretend you dont know what $userpass is assigned.

by **Mortecai4** on Tue Jun 02, 2009 10:16 am ([msg=24760]see Re: Ext 12[/msg])

What does a variable with 2 $ in front of it mean?
$$key

by **eljonto** on Tue Jun 02, 2009 10:57 pm ([msg=24788]see Re: Ext 12[/msg])

Mortecai4 wrote:What does a variable with 2 $ in front of it mean?
$$key

Do you know what people who don't code in php did when they saw that in the mission? They went to google, you should give it a go.

by **xen** on Thu Jun 18, 2009 1:13 pm ([msg=25548]see Re: Ext 12[/msg])

YAY! i finally did it...
ok people:

READ EVERY POST in this thread from the start up until now, have another go at it after you read each post!!!!!!

it tells you to use "moo.com/anything=something" to declare the info to input

reading thru this thread mentions you need to declare more than one, which you should know how to do from years of internet browsing and looking at your address bar.

the script is very basic, there are only so many variables in it which narrows it down ALOT...

if you try something and think it should work but it doesn't (like i did), try it the other way round

after reading thru this thread if you haven't already got it by the time you get to this post,,, you should have it now!!

by **pSub** on Sat Nov 28, 2009 8:05 am ([msg=30823]see ExtBasic 12[/msg])

Is there any special way to submit the solution? Because after a few attempts I tested the script on my webserver, and there I am able to exploit the script.

I tried the following:
moo.com?<the answer>
moo.com/index.php?<the answer>
http://moo.com/index.php? <the answer>

But nothing works.

by **st0w** on Tue Jun 29, 2010 7:54 pm ([msg=41040]see Re: Ext 12[/msg])

I have to concur with something that's already been said. If these are supposed to be realistic, then the answer that's expected isn't accurate. With the scenario as presented, the expected answer is extraneous.

Think redundancy.

by **shill** on Tue Sep 21, 2010 3:35 pm ([msg=46258]see Re: Ext 12[/msg])

Remember, you have to exploit it, not match the pass that's given to you. Pretend you don't know that password.

by **dhldhldhl** on Sun Jan 02, 2011 12:17 pm ([msg=51545]see Re: Ext 12[/msg])

Hey there, I've gotten the answer and it's pretty easy actually. The problem remains though, that I don't get where I have to put the answer. Is it possible that moo.com has been bought by another company? Because there's an entire website overthere so where should I put my answer?

Any help would be grateful. :-)

--edit
got it

by **lezazA** on Sat Jan 15, 2011 3:33 pm ([msg=52216]see Re: Ext 12[/msg])

This challenge was very confusing. If the script were really like that there would be no need to set an extra variable... anyway, even with the confusing text, solving it was trivial.