Basic Mission 8

[kyliekarnage]

To anyone who is having trouble after following all the advice given and is sure they are using the correct command, try messing around with the spaces in your command. i tried for hours until i finally just re-typed it fast and missed a space, then my command worked.

arghhh! most helpful tip ever ;(

[Elemenophee]

after spent a lot of time with the "you are in the right way...", my tip is read carefully! The file is unknown but no hidden.

[jainm2]

I am getting a long list of files when I executed the script. Could anyone help me in locating the right one?

[Shade_of_Gray]

I am getting a long list of files when I executed the script. Could anyone help me in locating the right one?

Are you looking in the right place?

[celsius_magnum]

read page 6 of this thread. specifically, read the post about going up one level in the directory. try using a SSI script that allows you to use directory-specific UNIX shell commands.

the shell command for listing directories
the shell command for changing directories

the above shouldn't be too direct. reading the thread before you post in a forum is essential to learning anything in such an environment. users post a lot of good information that is often overlooked by panicked users only wanting to get an immediate answer.

ganbattemasu - work hard/good luck!

[not_essence2]

If the challengers of the challenge really do freak out, then calm them down. They still do have their entire lives in front of them.

[celsius_magnum]

exactly right, not_essence2. it is important to spend a good amount of time learning about the tools used in these missions. while one needn't know everything about every tool, it isn't recommended to search for the command needed just for a specific mission and move on. one may need these tools in the future, so why not get well-acquainted with them now?

on the helping side of things, read the wikipedia article on the Server Side Includes (SSI) server-side scripting language and view the tables of directives. in these tables one should find directives and example script uses. choose which one pertains to the mission directly, study its form and what you can alter, and try increasing your available options with agglutination of command suffixes.

[not_essence2]

Well, that's the hidden challenge behind the challenge, isn't it? To see if they will go above and beyond the requirements, which is required in the world of hacking, to learn everything about the exploit, where it came from, and more about the languages used.

[Aermad]

well , if i got "If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level." am i getting near to get the password or what ? thanks in advance

[Shade_of_Gray]

You're getting close. You just need to figure out the correct syntax.