Realistic 3 - 'Peace Poetry' Guide

A little girl made a website to post poetry related to peace and understanding. American fascists have hacked this website replacing it with Hitler-esque propaganda. Can you repair the website?

Re: Realistic 3 - 'Peace Poetry' Guide

Post by conscience on Sun Aug 06, 2017 9:41 pm
([msg=94067]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

lekman2017 wrote:well how do I get the software pls i really need your help :?


whatware?
Let him who hath understanding reckon the number of the beast, for it is a human number: His number is 0x029A.
conscience
Poster
Poster
 
Posts: 309
Joined: Thu Jan 08, 2009 9:05 pm
Location: 127.0.0.1
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by dejaShawn on Tue Aug 28, 2018 8:34 pm
([msg=96164]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Hint!!
For those stuck... you can overwrite files though it does not show the functionality... This had me hung up.
dejaShawn
New User
New User
 
Posts: 1
Joined: Tue Aug 28, 2018 8:31 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by lundymundy on Thu Jan 03, 2019 9:09 pm
([msg=97036]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

I am unable to determine how one directly correlates the overwriting proceedure. In other words, how is a person supposed to test the solution is supposed to work?
lundymundy
New User
New User
 
Posts: 1
Joined: Thu Jan 03, 2019 9:07 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by Vixikats on Sat Jan 05, 2019 1:02 am
([msg=97054]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Yeah, I definitely don't feel like I actually learned anything particularly useful with this. The solution is very much out-of-the-blue since there aren't actually any hints or symptoms that would lead you to deduce naturally how the variables are actually used on the backend.

The solution felt a lot more like trying a bunch of completely random and weird stuff until something finally worked.
Vixikats
New User
New User
 
Posts: 1
Joined: Sat Jan 05, 2019 12:54 am
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by zxdssb on Sat Feb 09, 2019 2:11 am
([msg=97403]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

a test submit can not upload a real file, this puzzled me a little
zxdssb
New User
New User
 
Posts: 1
Joined: Sat Feb 09, 2019 2:08 am
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by p03t3 on Tue Jul 30, 2019 3:37 pm
([msg=98784]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

zxdssb wrote:a test submit can not upload a real file, this puzzled me a little


Agree!! I was trying to figure out how the directory structure works on submit, but none of my trials gave any result i could measure. I guess the site is built in a way to prevent files cluttering by our experiments, but at least we need some feedback so we can understand how things work. eventually i guessed my way to the solution....
p03t3
New User
New User
 
Posts: 1
Joined: Tue Jul 30, 2019 3:31 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by Schlonk on Sat Sep 21, 2019 10:54 am
([msg=99221]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Finally the penny dropped on this. Spent way too long looking for hidden poetry files and folders. :D
Schlonk
New User
New User
 
Posts: 2
Joined: Mon Sep 16, 2019 7:06 am
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by h4bit4t on Wed Nov 13, 2019 5:56 pm
([msg=99644]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

Unfortunately, this is one of the challenges where knowing too much can actually hurt you. If you know about SQL injections you'll spend a bunch of time trying them out, only to discover later that they are of no use here.

Similar with Unix commands. Someone who understands command line and how it executes in PHP would try out the exec() PHP function with the cp unix command, but all in vain. That's why it has been so frustrating to some :P

It's all about taking time to understand how the website functions (and how it stores data, if not in an SQL database).
h4bit4t
New User
New User
 
Posts: 2
Joined: Wed Nov 13, 2019 5:47 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by Aguijon99 on Fri Apr 10, 2020 1:44 pm
([msg=102251]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

anyone know if this game still works ?? .... I already tried everything. I have the old index, I know where to send it, I know that I have to overwrite the index, I know that everything is in the same directory as submitpo ** s, I know the name association of the poem that corresponds to the directory where I have to send it, etc. I know everything, but when I send it nothing happens, I do not see any indication that anything is being saved ... I do not even know if this game still works or just spend my time ... the only thing I get is a message saying that the directory does not exist or that the poem was added but nothing happens

I only see old comments from 10 years ago saying that it was easier than they thought, but nothing relevant or useful to me, and the worst thing is that I have not learned anything new in this exercise, I do not even think that this is applicable in the world real current ... the other games on this page were interesting, but I find this absurd and meaningless, it seems more like a riddle than a real hack, and I do not know if it still works, I guess I will just abandon it and move on to the next ..

Or maybe I am missing something, but it is the first time that I get stuck on this page and unfortunately I got stuck in the least interesting of all ..
Aguijon99
New User
New User
 
Posts: 1
Joined: Fri Apr 10, 2020 1:27 pm
Blog: View Blog (0)


Re: Realistic 3 - 'Peace Poetry' Guide

Post by conscience on Sat Apr 11, 2020 8:52 am
([msg=102260]see Re: Realistic 3 - 'Peace Poetry' Guide[/msg])

I quickly checked and it works.

The real world applicability is sorta abstract, but it does have some merits.

One or more of your assumptions might be misleading you here. Maybe it's the location or the target name.

Here are a couple of hints:
  • Where and how the poems are stored?
  • The poems are not stored where you want your data, are they? How could you save where you want?
  • Verify your target. Make absolutely sure you have the correct location and name.

The simulation is very limited (which I think is a problem), thus won't let you to actually upload anything.
It will just check your input and if you sent the correct data to the correct location, you get your flag.
Let him who hath understanding reckon the number of the beast, for it is a human number: His number is 0x029A.
conscience
Poster
Poster
 
Posts: 309
Joined: Thu Jan 08, 2009 9:05 pm
Location: 127.0.0.1
Blog: View Blog (0)


PreviousNext

Return to (Real 3) Peace Poetry: HACKED

Who is online

Users browsing this forum: No registered users and 0 guests