Extbasic 2

[edilVin]

the answer is obvious if you read something like this http://forums.htmlhelp.com/lofiversion/ ... t2922.html please if this is a spoiler remove my post

[flava]

IS it asking for the information that should be replacing filename in $_POST['filename'] or the info that should be method='post'-ed?

[Hecates_avatar]

nvm, my bad.

[msbachman]

Jeez,

I finally got this one after reading pretty much everything I could find on $_POST and file_get_contents on w3schools and php.net.

Confused as hell as to WHY it worked though. I won't spoil it for others, but isn't it true that the answer (i.e. the source code for hack...site.org/index.php) would be stored in the variable $lvl_text? Or maybe I misconstrued how to go about solving this one, I guess the one hint I could give is not to think that what you enter is supposed to cat the whole thing out to your screen or whatever.

In short, then, I was wondering from someone more knowledgable of php than I am as to whether or not the whole "source code" is going to be stored in "$lvl_text", the variable.

[h4ck3rz]

think of where your starting... where is the form your sending this info too... in relation to where you are trying to get?

i hope thats enuf without being a spoiler... I really dissaprove of this question as it is labeled blocking extensions but thats not the tricky part....

yeah, thanks for this.

but I wonder, why normal hackthissite.org/index doesn't work? It should work either. also, the index.php is located at the r*** of hackthissite.org, so a simple s***h should do it too, right? but why it doesn't work..?

[eljonto]

think of where your starting... where is the form your sending this info too... in relation to where you are trying to get?

i hope thats enuf without being a spoiler... I really dissaprove of this question as it is labeled blocking extensions but thats not the tricky part....

yeah, thanks for this.

but I wonder, why normal hackthissite.org/index doesn't work? It should work either. also, the index.php is located at the r*** of hackthissite.org, so a simple s***h should do it too, right? but why it doesn't work..?

Imagine the script is executed from the extbasic page, so any filename you enter will be opened from that current directory, that's where you are, where do you need to be? Think directory transversal

[AngelicPain93]

I am totally confused, i though that its impossible to obtain the source of php files like you would do with html

EDIT: done the mission, and thinking a bit more made me understand that the function is launched by the website so it serves the source to me ^^

[faazshift]

I am totally confused, i though that its impossible to obtain the source of php files like you would do with html

You aren't trying to access the code directly. Your goal is to get a vulnerable script to give you the code. A vulnerable script would have access to the code. Trying directly with your browser, you wouldn't have access, except to the generated HTML. So, this just plays on that vulnerability.

[Primux]

For some reason I had thought that part of the address of the page was different directories, that was throwing me off. Got it hough.

Hint if you're lost, look where you are and look where the file is you want to get.

EDIT: After posting this of course I see that someone else (can't see who because I clicked edit before I looked at your name) already gave this hint like 3 posts ago. :-p

[UNL2009]

wow. Took me 4 tries (2 of which because I spelled the file wrong...lol). Its not that hard really... As the other people said, thing of file/directory trans-versing...