Realistic 3 - 'Peace Poetry' Guide

[dejaShawn]

Hint!!
For those stuck... you can overwrite files though it does not show the functionality... This had me hung up.

[lundymundy]

I am unable to determine how one directly correlates the overwriting proceedure. In other words, how is a person supposed to test the solution is supposed to work?

[Vixikats]

Yeah, I definitely don't feel like I actually learned anything particularly useful with this. The solution is very much out-of-the-blue since there aren't actually any hints or symptoms that would lead you to deduce naturally how the variables are actually used on the backend.

The solution felt a lot more like trying a bunch of completely random and weird stuff until something finally worked.

[zxdssb]

a test submit can not upload a real file, this puzzled me a little

[p03t3]

a test submit can not upload a real file, this puzzled me a little

Agree!! I was trying to figure out how the directory structure works on submit, but none of my trials gave any result i could measure. I guess the site is built in a way to prevent files cluttering by our experiments, but at least we need some feedback so we can understand how things work. eventually i guessed my way to the solution....

[Schlonk]

Finally the penny dropped on this. Spent way too long looking for hidden poetry files and folders.

[h4bit4t]

Unfortunately, this is one of the challenges where knowing too much can actually hurt you. If you know about SQL injections you'll spend a bunch of time trying them out, only to discover later that they are of no use here.

Similar with Unix commands. Someone who understands command line and how it executes in PHP would try out the exec() PHP function with the cp unix command, but all in vain. That's why it has been so frustrating to some

It's all about taking time to understand how the website functions (and how it stores data, if not in an SQL database).

[Aguijon99]

anyone know if this game still works ?? .... I already tried everything. I have the old index, I know where to send it, I know that I have to overwrite the index, I know that everything is in the same directory as submitpo ** s, I know the name association of the poem that corresponds to the directory where I have to send it, etc. I know everything, but when I send it nothing happens, I do not see any indication that anything is being saved ... I do not even know if this game still works or just spend my time ... the only thing I get is a message saying that the directory does not exist or that the poem was added but nothing happens

I only see old comments from 10 years ago saying that it was easier than they thought, but nothing relevant or useful to me, and the worst thing is that I have not learned anything new in this exercise, I do not even think that this is applicable in the world real current ... the other games on this page were interesting, but I find this absurd and meaningless, it seems more like a riddle than a real hack, and I do not know if it still works, I guess I will just abandon it and move on to the next ..

Or maybe I am missing something, but it is the first time that I get stuck on this page and unfortunately I got stuck in the least interesting of all ..

[conscience]

I quickly checked and it works.

The real world applicability is sorta abstract, but it does have some merits.

One or more of your assumptions might be misleading you here. Maybe it's the location or the target name.

Here are a couple of hints:

• Where and how the poems are stored?
• The poems are not stored where you want your data, are they? How could you save where you want?
• Verify your target. Make absolutely sure you have the correct location and name.

The simulation is very limited (which I think is a problem), thus won't let you to actually upload anything.
It will just check your input and if you sent the correct data to the correct location, you get your flag.

[Th3L4stW4rP1g]

Finally made it, I can't believe it was that easy. In my opinion the tip to look into basic 8/9 was a bit misleading, as it made me think about unix commands. Great challenge anyway!