Basic Mission 9

[pianoisland]

haha after getting beat over the head with the whole

"If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level."

Thing, I was too afraid to try anything other than the few commands that worked in the previous mission. I'd probably take a break after completing mission 8 before doing this one, I'd even say people would solve this one prior to 8 without even knowing it.

[the_kid999]

Ok I admit I got stuck on this way longer than I should be. The only reason being I didn't understand where to put the command. It's mentioned in the first few posts and I overlooked that...

[person3143]

I've noticed several comments that seem to suggest the use of an absolute path as opposed to a relative one. I solved the mission using a relative path though, and it seems to block any attempts with the absolute. Just out of curiosity, is it possible to solve this using the absolute path or were those comments misleading hints?

[Enzime59]

If you know what you did in mission 8, reading the wiki page of directory transversal is the only thing you need.

[Timmy109]

Hello

I found Level 8 quite hard and took me awhile to work out the command, had to learn unix command, of which was a good thing. Anyway to get pass level 9 is quite easy and you will be kicking yourself when you work it out.

I hope this is not a spoiler, if so please edit, I am just trying to help people learn.

Anyway go back to level 8 and study the command you used to gain access to the files.

Read this link about Unix commands : http://www.computerhope.com/unix/uls.htm

Finally think "How do I move between dirs using CMD??"

Hope this helps... stuck on level 10 at moment!

[ProblemSolva]

completed it cool mission.
the hint is already in the description at level 9

[alibaba42]

Hello everyone,

I appologize in advance for being such a noob, but i have very little experience with programming.

I have completed mission 8, probably by a slightly cheated method. Anyway, I did not specify a directory in my SIS command i simply asked for a list of files in the (one up) directory and found the password file. Now, I have read the relative pathing etc and i do understand it. So the idea is to move out of the mission 8 directory so that level 9 is available and the move into that. However, I do not know how to specify a directory in my SIS command. Also, It seems you have to move up twice, but it only lets me move up once from the mission 8 home dir. Please help i have been stuck for a long time and i am sorry for the noob post.

thanks

Alibaba

EDIT: solved it


but i now have a new question. I was not exactly sure why i had to go up 2 directories. how would i be able to find out how many dir i need to traverse in a real life example?



In the question it says that the server checks against <-- etc. so does that mean that the server actually checks if you got the password from the correct directory? and by sending a sis command to get to this directory we are overcoming this validation process? perhaps someone could explain a bit further as im not sure i understand

[CIDE]

Okay, I solved Mission 9 but only by doing some reading up on the structure of UNIX and trying to visualise in my head where I was in the directory and where I wanted to be.
For people that are still struggling to solve this one, one post on here that really is the most useful is, stop over thinking it.
Where are you? Where do you want to be?
I cannot stress the importance of the first post containing special stuff
If you still don't understand what the special stuff is doing, read up on UNIX structuring and commands.

[piex17]

I executed a command that should have taken me where I wanted to go, but it was blocked. How do you figure out the exact command you're allowed to use!?

[Johnny117]

Ok this took me 2 hours or so, but I still have no idea about directory transversal. I messed about a lot with my scripts and the urls until i solved it. I am fairly sure I am not doing it as it is meant to be done. is there not any private forums on here for those of us that have completed missions to be able to discuss the hows and whys of things. I seem to be going through these at a pretty good pace for a complete NooB. I started last night and just finished this one, I would say I have about 12 hours in these 9 missions so far, but I still don't think I am understanding how I'm getting to the solution. Must say these are big fun though.

If a mod would allow me to message them my solution for this exercise, maybe he/she could see if I am on track with the way it is meant to be done.
TY