Hack This Site!

[Advertise With HackThisSite.org :: Hide These Ads]

" If you ask the government for permission to protest it, you deserve to be told no." --Manhattan Libertarian Party Chair, Jim Lesczynski

Hall of Fame

Pages:

#	Avatar	Username	Description	Reward
1		Nuticulus	Nuticulus found an sql injection flaw in the bug-report system, which allowed him to inject arbitrary sql code.	300 Points
2		Darkcoder	Darkcoder found a flaw in realistic 12 that allowed him to read any file through the guest.pl script. The bug was that user-input was checked before the uri escape was done, allowing him to specify any character he wanted.	200 Points
3		ace	ace and xenoix revealed some XSS holes and found a way to steal cookies and even plain text passwords of not logged in firefox users	300 Points
4		xenoix	ace and xenoix revealed some XSS holes and found a way to steal cookies and even plain text passwords of not logged in firefox users	300 Points
5		ace	ace and xenoix found a bug in the real3 mission. They were able to inject whatever javascript code they liked	50 Points
6		xenoix	ace and xenoix found a bug in the real3 mission. They were able to inject whatever javascript code they liked	50 Points
7		xenoix	ace and xenoix found a CSRF vulnerbility in the site that allowed them to edit user profiles, post news as administrators and submit articles and bug reports as members	400 Points
8		xenoix	xenoix and ace found a flaw in the HTS Art project that allowed them to manipulate the upload form. From this they were able to upload malicious files onto the server	200 Points
9		ace	xenoix and ace found a flaw in the HTS Art project that allowed them to manipulate the upload form. From this they were able to upload malicious files onto the server	200 Points
10		agentsteal	agentsteal found a vulnerability in HTS's password hashing algorithm. He was able to find users that had the same password and find regular users that had admin passwords.	75 Points
11		ace	xenoix and ace were able to abuse the avatar script which allowed them to upload malicious files onto the servers such as xss embedded images.	100 Points
12		xenoix	xenoix and ace were able to abuse the avatar script which allowed them to upload malicious files onto the servers such as xss embedded images.	100 Points
13		Kane	Kane found a CSRF vulnerability that allowed him to modify user profiles at his whim.	250 Points
14		StenoPlasma	A major SQL injection was found in the IRC stats page!	100 Points
15		StenoPlasma	StenoPlasma found a SQL injection in the search feature of the rankings page which potentially allowed him to read arbitrary data from the database.	100 Points
16		evinyatar	Nines9 and evinyatar found an XSS/CSRF vulnerability in realistic 11 that allowed them to edit user profiles, send PMs, submit articles and bug reports as members.	25 Points
17		StenoPlasma	StenoPlasma found a vulnerability in the source viewing script which allowed him to view any file on the server. He also found the same flaw in another script shortly after.	500 Points
18		StenoPlasma	Found a way to abuse old unused code to login as any user with just his passhash and userid. Proof of concept gave him to get full administrator access on the site.	25 Points
19		evinyatar	evinyatar and Nines9 found an SQL injection in Realistic 8, which allowed them to inject arbitrary SQL code.	100 Points
20		StenoPlasma	Nines9 and StenoPlasma found a CSRF vulnerability in the Forum BBCode that allowed them to make themselves site administrators, log out users, flag comments, accept and delete IRC linked Nicknames, etc.	50 Points
21		anonHacker	For finding a CSRF vuln in the profile editing system which allows for a password recovery attack.	60 Points
22		jokerrrr	jokerrrr found an SQL injection in the bug reporting system exploitable via XSS/CSRF.	150 Points
23		droptable	droptable found an SQL injection bug in the user API along with several XSS holes allowing him to gain admin privs.	200 Points

Pages:

This site is the collective work of the HackThisSite staff. Please don't reproduce in part or whole without permission.
Page Generated: Sun, 05 Jul 2009 04:18:06 +0000 Exec: 5
_{Page loaded in 0.10356 seconds!}
Current Code Revision: 35-Stable

Donate

Challenges

Get Informed

Get Involved

Communicate

About HTS

Translate

Partners