Please ask questions ONLY in this topic.

Uptight religious fanatics are failing free-thinking students for questioning their faith. Fulfill every teenage hacker's ultimate fantasy: hack into the school database and change grades! This level has several different layers of security and several different ways of completing it. Enjoy!

HuGe Hint

Post by ipcain1 on Sat Aug 22, 2009 2:32 pm
([msg=28287]see HuGe Hint[/msg])

hey guys first off update.php is the way to go and its not vulnerable to sql this is more of a social engineering to logical reasoning on it
ipcain1
New User
New User
 
Posts: 2
Joined: Fri Aug 21, 2009 8:57 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by Theist on Fri Sep 04, 2009 8:39 am
([msg=29068]see Re: Please ask questions ONLY in this topic.[/msg])

Social engineering and UserAgent switching seem to be the major sticking points for people in this mission.

If your average computer user(not security-minded) were to create a login for something, what would their password likely be?

A: Something close to them (Birth-date, children's names, favorite color, etc.)

B: Something having to do with their name

C: A variation or even an identity of their username

What do all these things have in common?

More importantly, what information is there to which you have access?


As for the UserAgents, don't let it get too complicated. Remember, this is not a security-conscious place. They're not going to require a complicated system of anything here.
Theist
New User
New User
 
Posts: 2
Joined: Thu Sep 03, 2009 12:12 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by stud_muffin22 on Sat Sep 05, 2009 3:45 pm
([msg=29146]see Re: Please ask questions ONLY in this topic.[/msg])

I have got to the page were i logged in as smiller and changed the User Agent Switcher to holy_teacher. I cannot seem to turn off cookies to access grade changing because I must be the admin. Any hints are appreciated.

Also will this method work on a normal website to change grades? I know it would not be exactly the same but the same idea?

-- Sun Sep 06, 2009 1:22 pm --
nevermind. i beat it. you have to download to different add-ons for firefox. the User Agent Switcher and the Cookie Editor
Hope it isnt much of a spoiler
stud_muffin22
New User
New User
 
Posts: 1
Joined: Sat Sep 05, 2009 3:40 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by b0r15 on Tue Sep 08, 2009 9:51 pm
([msg=29386]see Re: Please ask questions ONLY in this topic.[/msg])

This one has me ripping my eyes out. Someone made a good point a few posts back and its something that should be repeated. Certain FF addons(very useful ones IMO) can disrupt this level and stop a user from changing user agents. I was going crazy refreshing for hours wondering what I did wrong.
,
Anyway, so I got into Smillers acct and am having a problem switching the grades. Do I have to go back, start allover and log in as Admin,now?


Edit- Gotta be an injection..ya? no? Someone? Anyone?

-- Sun Sep 13, 2009 10:33 am --

Sorry for bumping my own post, but I been on this a week and am stuck.

Please, someone point me in the right direction! I have switched user-agents and im at s****, I have narrowed it down to an injection, but I have tried many and I cant seem to change the grade.. The ** code I have written technically(I believe shouldve changed the grades, Can someone check out my code? PLEASE!?

note= I have run into bugs in Linux with all the addons I have been adding in the past few levels..mainly the user-agent switch, but I have been working around it. One of which has helped me through EVERY level in one way or another. Please help me..?
Basic: (1) (2) (3) (4) (5) (6) (7) (8) (9) (10) (11)
Realistic: (1) (2) (3) (4) (5) (7) (9) (10) (12) (13)
Application: (1) (2) (3)
Programming: (1)
Javascript: (1) (2) (3) (4) (5) (6) (7)
Extbasic: (1)
b0r15
New User
New User
 
Posts: 25
Joined: Fri Aug 21, 2009 6:56 pm
Location: port 8118->9050->exit node= Me
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by go6o on Mon Nov 23, 2009 10:44 am
([msg=30687]see Re: Please ask questions ONLY in this topic.[/msg])

I cant access the page where we can change the grades. I tried to change the USER AGENT but it doesn't work =( . Could someone help please X-|
[Edited by: Defience]

I've refreshed the pae like 50 times nothing =X =(
User avatar
go6o
New User
New User
 
Posts: 1
Joined: Mon Nov 23, 2009 10:24 am
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by Defience on Mon Nov 23, 2009 11:18 am
([msg=30690]see Re: Please ask questions ONLY in this topic.[/msg])

Your user agent isn't the only thing that needs changed to give you access. Check around.
User avatar
Defience
Addict
Addict
 
Posts: 1265
Joined: Thu Jun 12, 2008 3:16 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by cybernetic toaster on Sat Jan 23, 2010 8:36 pm
([msg=33790]see Re: Please ask questions ONLY in this topic.[/msg])

I must have missed something somewhere and I can't figure out for the life of me what. I changed the grades yadyadayada with the U** then I get the Grades Updated page and that's it nothing else. No congratz, nothing. What could I have messed up on?

EDIT: Never mind, I figured it out. I'm not really sure if I did it right. It was really tedious process doing one at a time but I did get the congratz
$DO || ! $DO ; try
try: command not found
WINDOWS: Will Install Needless Data On Whole System
MICROSOFT: Most Intelligent Customers Realize Our Software Only Fools Teenagers
User avatar
cybernetic toaster
New User
New User
 
Posts: 8
Joined: Sun Jan 10, 2010 8:12 am
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by DeadHack on Tue Jan 26, 2010 2:24 pm
([msg=33934]see Re: Please ask questions ONLY in this topic.[/msg])

Ive got that firefox add-on working and such but it wont change the page. I get that it should but I've done this like eighteen times and its not changing anything at all I don't understand what's wrong with it but even though my agent is correct as to spelling and where I should be putting the name ***y_t******. Please if anyone knows what it is I've done wrong. Pm me or respond.
DeadHack
New User
New User
 
Posts: 4
Joined: Tue Feb 24, 2009 7:20 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by insomaniacal on Tue Jan 26, 2010 4:40 pm
([msg=33944]see Re: Please ask questions ONLY in this topic.[/msg])

Changing your user agent won't change the entire site, it'll only change the page which tells you what to set your user agent too.

If you haven't gotten there yet, you'll see what I mean as soon as you do.
It's not who votes that counts, it's who counts the votes
insomaniacal.blog.com
User avatar
insomaniacal
Addict
Addict
 
Posts: 1210
Joined: Sun May 24, 2009 10:21 am
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by DeadHack on Wed Jan 27, 2010 12:28 am
([msg=33965]see Re: Please ask questions ONLY in this topic.[/msg])

That's the problem though. I'm at that page where it tells me to change it but it doesn't seem to accept that I have changed it. It's really weird, like I'm at the point where it should be working but it doesn't accept that my user agent has been changed to the one it wants it to be.
DeadHack
New User
New User
 
Posts: 4
Joined: Tue Feb 24, 2009 7:20 pm
Blog: View Blog (0)


PreviousNext

Return to (Real 10) Holy Word High School

Who is online

Users browsing this forum: No registered users and 0 guests