Please ask questions ONLY in this topic.

[fashizzlepop]

Please PM mods first, not admins. Admins don't have time for this stuff. Also, hop on IRC and ask there as someone has probably beaten it.

Please don't bother Kage or Weekend with this unless you ask in IRC and they voluntarily respond.

Also, much appreciated that you didn't spoil the mission.

[spencedj]

Thanks for your help you guys


After a few more hours of looking at this thing, I managed to see what I was doing wrong. I just completed the challenge.

[fashizzlepop]

Congrats.

[impulse_x]

Hi,

I've 'completed' this mission, but what I realized is that I also need to delete the log. Is there a need to do that?
Looking at it, I noticed it contains the first three #s of my IP. Surely, a hacker needs to cover his/her tracks, no?

Ix

[White_C_Wolf]

Hi everyone it seems to be my first post so i'm kinda excited =P
Btw i'm little stuck at the Right Way Radio part... actually i thought i made everything correct since i got the hts message that tell's me my stealer did worked and to check... but when i check to my txt file nothing appears! of course i test my php script before and it seems to work... can anybody please help me ?

[bjornsnoen]

Same as White_C_Wolf. My cookie stealer works, using the one I set up for the CrappySoft mission but didn't get to use then. I get the thumbs up from the radio, but nothing gets written to my file.

[xaajjaax]

I feel like I might have cheated this one. I had no use for a cookie stealer or XSS; the conservative radio admin account profile simply let me change the password!

[R0ot_]

This challenge was a challenge indeed. Some people have said "it did not take cookie stealing and they could get right in". I'm not that good, this took me a while to do. I used firebug and user agent which are addons through firefox. Oh and I needed a good script for stealing cookies. So you will need possibly a hosting account somewhere and know how to create documents etc. I did have problems with some of the javascript code "javascript:void(document.cookie************************** sometimes it worked in my browser and sometimes it did not. That is an issue I will need to check on my computer why that happened.

This one can take a while and there are many steps if doing it my way I guess. But during that process you will find a learning curve. I guess the first step in this challenge is to look at the url, take a poke around and see how they are handling the pages.

Good Luck guys and gals!

[limdingwen]

When I login as the m*d (a***_******_*****) with the changed password, I click on m*d link to get to the m*d panel, it logs out and gives me the "access denied". When I log back in, I get returned to the home page and the process repeats again. I am unable to get into the m*d panel.

I have cookies enabled, and I have cleared them and tried it again already. For some reason it just won't stay logged in.

Can anyone shine a light on this? Thanks.

Edit: I can access it now. The computer got confused and used the non-mod account's session ID, and it was expired. I cleared EVERYTHING and it works now.

[cyberdrain]

Edit: I can access it now. The computer got confused and used the non-mod account's session ID, and it was expired. I cleared EVERYTHING and it works now.

Heh, I should not answer quesions more often. Congrats on finishing the mission though.