Please ask questions ONLY in this topic.

[cores]

Ha, whoopsie, sorry.

I'm using Mozilla on a Linux system. But I have tried using IE 8 on my windows partition to no avail. I only have downloaded the firebug add-on

To give you a better picture, when ever I submit an SQL injection, simply put nothing happens. There will be some indication of loading (like a loading sign appearing) but a new page doesn't even begin to load. But, if I try to put in just a simple incorrect username and password, the invalid username page will load.

Hopefully I have given enough detail. Second time is a charm.

Also, the tab says, instead of the page name, "Connecting..." if that helps with the trouble shoot at all. Thanks

[fashizzlepop]

I think whizz_kidd just had this problem. Try using a proxy to connect to HTS, login, and try your injection. I'd suggest left4quake.tk/pro

[cores]

No cigars. I used the recommended proxy and the connection still timed out.

My main problem is I have this problem with all the missions that require SQL injections (like 4 and 8). I'm guessing you're suggesting that my Internet provider is somehow blocking SQL injections from being transmitted? I do use a public university Internet connection, so maybe...

[Qwik Silver]

Not sure if this belongs here or if it's been mentioned in another thread (searched for "web forgery" but came up dry) but the "hidden" page in this mission has been reported as a web forgery according to Firefox. Since it's obvious the page wasn't designed to phish passwords I ignored the warning and reported it was not a forgery but not sure how many reports it'll take to have the warning lifted.

As far as the mission itself goes: I over-thought this one severely and so it took me about an hour of trying to do the injection in the wrong spot (using Firebug) before I realized how deceptively simple it was. If you're beating your head against a brick wall trying out where to test the codes found in the links provided earlier in the thread: take a step back and try the most obvious places.

That wasn't too spoilerish, was it?

[Natron3030]

Ok, well I've read every single page of this post, I've read every single link that was given, and I have read every SQL Injection pages that came up on google. So.....I give up. No idea what to do. I've gotten as far as the SQL Error page and that's it.

[adamsan]

Hi everyone!

When I try to solve the second realistic mission, I open the update.php, and firefoxes malware protection kicks in. Is this suppose to happen? Shall I ignore it? What's going on?

[hellow533]

Ignore it, firefox just thinks it's a phishing site.

[zNelson24]

Hey, I found the forms I needed, but it took me a while to find them. Mainly because I wondered off to another site trying to find it. I think that could use a fix, 'cause I have no clue thats a "real" site or not.

Though if I were allowed to eff that external site in the aye, that would be awesome!

[xhacker99x]

ive found the hidden page but how do i log in as the admin?

[mShred]

ive found the hidden page but how do i log in as the admin?

This kinda happens to be the whole point of the misson... Again, read through this thread. Post with SPECIFIC questions. We WLL NOT spoon feed you.