Please ask questions ONLY in this topic.

[ipcain1]

hey guys first off update.php is the way to go and its not vulnerable to sql this is more of a social engineering to logical reasoning on it

[Theist]

Social engineering and UserAgent switching seem to be the major sticking points for people in this mission.

If your average computer user(not security-minded) were to create a login for something, what would their password likely be?

A: Something close to them (Birth-date, children's names, favorite color, etc.)

B: Something having to do with their name

C: A variation or even an identity of their username

What do all these things have in common?

More importantly, what information is there to which you have access?


As for the UserAgents, don't let it get too complicated. Remember, this is not a security-conscious place. They're not going to require a complicated system of anything here.

[stud_muffin22]

I have got to the page were i logged in as smiller and changed the User Agent Switcher to holy_teacher. I cannot seem to turn off cookies to access grade changing because I must be the admin. Any hints are appreciated.

Also will this method work on a normal website to change grades? I know it would not be exactly the same but the same idea?

-- Sun Sep 06, 2009 1:22 pm --
nevermind. i beat it. you have to download to different add-ons for firefox. the User Agent Switcher and the Cookie Editor
Hope it isnt much of a spoiler

[b0r15]

This one has me ripping my eyes out. Someone made a good point a few posts back and its something that should be repeated. Certain FF addons(very useful ones IMO) can disrupt this level and stop a user from changing user agents. I was going crazy refreshing for hours wondering what I did wrong.
,
Anyway, so I got into Smillers acct and am having a problem switching the grades. Do I have to go back, start allover and log in as Admin,now?


Edit- Gotta be an injection..ya? no? Someone? Anyone?

-- Sun Sep 13, 2009 10:33 am --

Sorry for bumping my own post, but I been on this a week and am stuck.

Please, someone point me in the right direction! I have switched user-agents and im at s****, I have narrowed it down to an injection, but I have tried many and I cant seem to change the grade.. The ** code I have written technically(I believe shouldve changed the grades, Can someone check out my code? PLEASE!?

note= I have run into bugs in Linux with all the addons I have been adding in the past few levels..mainly the user-agent switch, but I have been working around it. One of which has helped me through EVERY level in one way or another. Please help me..?

[go6o]

I cant access the page where we can change the grades. I tried to change the USER AGENT but it doesn't work =( . Could someone help please X-|
[Edited by: Defience]

I've refreshed the pae like 50 times nothing =X =(

[Defience]

Your user agent isn't the only thing that needs changed to give you access. Check around.

[cybernetic toaster]

I must have missed something somewhere and I can't figure out for the life of me what. I changed the grades yadyadayada with the U** then I get the Grades Updated page and that's it nothing else. No congratz, nothing. What could I have messed up on?

EDIT: Never mind, I figured it out. I'm not really sure if I did it right. It was really tedious process doing one at a time but I did get the congratz

[DeadHack]

Ive got that firefox add-on working and such but it wont change the page. I get that it should but I've done this like eighteen times and its not changing anything at all I don't understand what's wrong with it but even though my agent is correct as to spelling and where I should be putting the name ***y_t******. Please if anyone knows what it is I've done wrong. Pm me or respond.

[insomaniacal]

Changing your user agent won't change the entire site, it'll only change the page which tells you what to set your user agent too.

If you haven't gotten there yet, you'll see what I mean as soon as you do.

[DeadHack]

That's the problem though. I'm at that page where it tells me to change it but it doesn't seem to accept that I have changed it. It's really weird, like I'm at the point where it should be working but it doesn't accept that my user agent has been changed to the one it wants it to be.