Basic Mission 7

[Sponkeeman]

ok this is killing me. I can see the file that I assume has the password in it but I can't, for the life of me, figure out how to view the contents of said file. The commends I have tried that I thought should work haven't :/




Nevermind! I FINALLY got it.

[-Ninjex-]

For anyone still having trouble, although you shouldn't with all of the information for this mission on this thread, try this:

Google: Shell Injection & Command Injection

Also, anyone using tor web browser, you may want to google it yourself or turn proxy settings on instead of using that link, it is not filtered or searched via hyper text transfer protocol security.

-Ninjex-

[s34n_f0x]

when i try to think of things in code its hard because im a beginer i need a straight up answer on how to enter the unix code without getting a blank page thanks

ThE gH0st

[n3tadm1n]

Anyone having issues with this mission, know that there is more than ONE WAY to execute more than one command on a single line.....

[LoGiCaL__]

Anyone having issues with this mission, know that there is more than ONE WAY to execute more than one command on a single line.....

Just tested it out. It's working correctly.

[jainm2]

This mission just requires very basic UNIX command. Here is a useful link to learn basic Unix commands.
http://www.math.utah.edu/lab/unix/unix-commands.html

[rephy2]

i got the right answer but i have a question..??? i got 2 passwords one which is valid and works and the other which is f866d6b9 and doesnt work does anyone know why i got 2 seperate passwords from the same file???

[kylewatson98]

Ok, I am new to this site and I am a real noob at the moment. I have learned a bit of HTML, Javascript, Actionscript, a tiny bit of C++ but that's it. I thought this site looked good to learn skills that I need to be accepted into a hacking community. I have started looking into PHP and server side code but I'm not too sure on it yet. I have started of with the basic missions to get a feel of the website but I am already stuck. I am not asking for an answer to the problem because that is just lame, I am asking for some guidance as I feel I am going in the wrong direction. I am on mission 7 of the basic missions and I have tried editing the HTML code to my advantage but this is clearly not the answer. I have tried looking for scripts to edit and launch but I haven't got very far. I still feel that I am needing to somehow call a different UNIX command via the form calling the cal command, maybe the ls command to find the file but I'm am very baffled. I decided to go onto the next mission and I am starting to think that I need to somehow gain access to the server side code. Has this site given out a way to access the server files or what because I have no idea how I am going to complete these tasks without it.
If someone responded it would help me greatly for me to achieve my goals and get started in the hacking community.
Thanks in advance, Kyle.

I do know the difference between hacking and cracking. I am not looking for a way to maliciously gain unauthorized access to data to corrupt and/or damage it, thanks.

*merged with Basic 7 help thread*

[limdis]

Hey there welcome to HTS.
You have the right idea but you plan of attack is a little off. You don't need to edit anything, you just need to understand what is happening and 'trick' the script into giving you the information that you need. Lets take a look at what we have to work with:

Code: Select all

This time Network Security sam has saved the unencrypted level7 password in an obscurely named file saved in this very directory.

In other unrelated news, Sam has set up a script that returns the output from the UNIX cal command. Here is the script:

From the source:

Code: Select all

<form action="/missions/basic/7/cal.pl" method="post">

What is cal?
http://en.wikipedia.org/wiki/Cal_%28Unix%29


So, based on the information you have you want to complete the cal command and then list the contents in the current directory, not actually direct yourself to it. Look over this:
http://www.wsanford.com/help/commd.htm

[limdis]

i got the right answer but i have a question..??? i got 2 passwords one which is valid and works and the other which is f866d6b9 and doesnt work does anyone know why i got 2 seperate passwords from the same file???

No, not sure how you got that. PM me what you did.
(post one more time, required 2 posts before you can PM)