Page 11 of 11

Re: Basic Mission 9

PostPosted: Fri Apr 19, 2019 3:11 pm
by infinite_redirect
This one really is as everyone says, unix paths... I got annoyed and looked it up, and the solution is what I thought I already tried :twisted: Would love to see my history and find what dumb typo I made.

Re: Basic Mission 9

PostPosted: Sat Jul 06, 2019 5:18 am
by VioleXOR
I managed to get through Missions 1 - 8 in about 2 Days, However I'm really Stumped on this one.
I understand we need Path Traversal and the [Script]? is relative to Mission 8.
But how am I supposed to know what the [Script] is called? Also am I supposed to be doing Challenge 9 from Challenge 8? or just traverse from 9?

Please give me some Tips. :)
Thank you all.

Re: Basic Mission 9

PostPosted: Mon Jul 22, 2019 5:52 pm
by 92dagray
This was a Very good lesson for me in directories. I didn't sketch out the directories like some people suggested. I did however use the browser tools like suggested. I also payed attention to the address bar. This was way easier than mission 8 (because mission 8 is already completed).

Re: Basic Mission 9

PostPosted: Tue Sep 10, 2019 4:25 pm
by Matt_Murdock
Oh for crying out loud...

It threw me because of the amount of commands that weren't allowed previously, but I got it as soon as I stopped thinking.

Re: Basic Mission 9

PostPosted: Tue Sep 10, 2019 4:26 pm
by Matt_Murdock
VioleXOR wrote:I managed to get through Missions 1 - 8 in about 2 Days, However I'm really Stumped on this one.
I understand we need Path Traversal and the [Script]? is relative to Mission 8.
But how am I supposed to know what the [Script] is called? Also am I supposed to be doing Challenge 9 from Challenge 8? or just traverse from 9?

Please give me some Tips. :)
Thank you all.


Stop over thinking it and think about what's got you to this point.

Re: Basic Mission 9

PostPosted: Wed Oct 09, 2019 5:48 am
by zergutgutgut
I found the answer after 1 hour and trying various commands.

I found out, It was actually the first command I tried at the beggining, I think i made a small syntax error i didn't see...
Then i moved on to try other way to figure this out with all the possible commands.
What a stupid mistake :oops: :oops:

Anyways guys check your code is well written or will end up loosing time like me. :D

Ps : as mentionned the answer is very simple don't try to overthink.

Re: Basic Mission 9

PostPosted: Wed May 20, 2020 6:59 pm
by themindguy
YAAAAASSSSSS! Level 8 took me 2 weeks, Level 9 took 2 minutes! Feeling so good right now! xD

Re: Basic Mission 9

PostPosted: Fri Jul 10, 2020 3:59 pm
by AlphaScript
Hi All,
I'm getting
"If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level."
I'm stuck lul, any hints?

Re: Basic Mission 9

PostPosted: Sat Aug 15, 2020 3:58 pm
by arashkamangir
YESSSS i finally did it.

After i read the first post. The tips they give you about having to use SSI and directory traversal is key to it.

You used SSI for mission 8 so you know what you're doing.

Google what directory traversal is and like people said think about the directory structure, then that should make sense.

I think the command you need to use is really case sensitive so yeah.

Re: Basic Mission 9

PostPosted: Mon Sep 28, 2020 8:04 pm
by walpha
WELL...

I sat on this one for a while, throwing a few attempts here and there during free times over the past week or so. I guess in a way I was overthinking things a little, but in my defense I've never used the command to solve this level or level 8 in my modest Linux experience.

Here's what I would suggest for anyone stuck: Hopefully you've solved level 8 and remember the solution. Make sure you know how that solution works, where the code your submitting is going, and how it is related to what is being returned to you. Ultimately, I had to make a mock directory with several subdirectories and folders on my local machine and then view it as a tree; then I could test commands to see if I could access the contents of the location matching the goal for the actual level.

Hope that makes sense.