Realistic 3 - 'Peace Poetry' Guide

A little girl made a website to post poetry related to peace and understanding. American fascists have hacked this website replacing it with Hitler-esque propaganda. Can you repair the website?

Re: Realistic 3 - 'Peace Poetry' Guide

Post by conscience on Sun Aug 06, 2017 9:41 pm
([msg=94067]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

lekman2017 wrote:well how do I get the software pls i really need your help :?


whatware?
Let him who hath understanding reckon the number of the beast, for it is a human number: His number is 0x029A.
conscience
Poster
Poster
 
Posts: 299
Joined: Thu Jan 08, 2009 9:05 pm
Location: 127.0.0.1
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by dejaShawn on Tue Aug 28, 2018 8:34 pm
([msg=96164]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Hint!!
For those stuck... you can overwrite files though it does not show the functionality... This had me hung up.
dejaShawn
New User
New User
 
Posts: 1
Joined: Tue Aug 28, 2018 8:31 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by lundymundy on Thu Jan 03, 2019 9:09 pm
([msg=97036]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

I am unable to determine how one directly correlates the overwriting proceedure. In other words, how is a person supposed to test the solution is supposed to work?
lundymundy
New User
New User
 
Posts: 1
Joined: Thu Jan 03, 2019 9:07 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by Vixikats on Sat Jan 05, 2019 1:02 am
([msg=97054]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Yeah, I definitely don't feel like I actually learned anything particularly useful with this. The solution is very much out-of-the-blue since there aren't actually any hints or symptoms that would lead you to deduce naturally how the variables are actually used on the backend.

The solution felt a lot more like trying a bunch of completely random and weird stuff until something finally worked.
Vixikats
New User
New User
 
Posts: 1
Joined: Sat Jan 05, 2019 12:54 am
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by zxdssb on Sat Feb 09, 2019 2:11 am
([msg=97403]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

a test submit can not upload a real file, this puzzled me a little
zxdssb
New User
New User
 
Posts: 1
Joined: Sat Feb 09, 2019 2:08 am
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by p03t3 on Tue Jul 30, 2019 3:37 pm
([msg=98784]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

zxdssb wrote:a test submit can not upload a real file, this puzzled me a little


Agree!! I was trying to figure out how the directory structure works on submit, but none of my trials gave any result i could measure. I guess the site is built in a way to prevent files cluttering by our experiments, but at least we need some feedback so we can understand how things work. eventually i guessed my way to the solution....
p03t3
New User
New User
 
Posts: 1
Joined: Tue Jul 30, 2019 3:31 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by Schlonk on Sat Sep 21, 2019 10:54 am
([msg=99221]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Finally the penny dropped on this. Spent way too long looking for hidden poetry files and folders. :D
Schlonk
New User
New User
 
Posts: 2
Joined: Mon Sep 16, 2019 7:06 am
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by h4bit4t on Wed Nov 13, 2019 5:56 pm
([msg=99644]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Unfortunately, this is one of the challenges where knowing too much can actually hurt you. If you know about SQL injections you'll spend a bunch of time trying them out, only to discover later that they are of no use here.

Similar with Unix commands. Someone who understands command line and how it executes in PHP would try out the exec() PHP function with the cp unix command, but all in vain. That's why it has been so frustrating to some :P

It's all about taking time to understand how the website functions (and how it stores data, if not in an SQL database).
h4bit4t
New User
New User
 
Posts: 1
Joined: Wed Nov 13, 2019 5:47 pm
Blog: View Blog (0)


Previous

Return to (Real 3) Peace Poetry: HACKED

Who is online

Users browsing this forum: No registered users and 0 guests