Page 53 of 53

Re: Please ask questions ONLY in this topic.

PostPosted: Sun May 24, 2020 4:40 pm
by conscience
naclo3samuel wrote:Was wondering if anybody could help me..

I completed the exercise but for some reason it doesn't automatically pass it. I obtained the emails but it isn't registering the mission as complete yet..

If anyone's got an idea as to why this happens I would be happy to hear your suggestions.


Send a message through HTS Messages Center to the proper recipient.

Explanation of the Challenge

PostPosted: Mon Jun 15, 2020 4:35 pm
by bhuvesh00
I have a question regarding the solution of this challenge. Do you know where can I post it? If I post my question then it may give out the solution too but it is not allowed I guess ?

Re: Please ask questions ONLY in this topic.

PostPosted: Fri Jul 24, 2020 12:52 pm
by Th3L4stW4rP1g
I think I understand what I'm doing and what I have to do, but currently it is not working and I'm not sure why. I'm afraid to spoil it for others, is there anyone I can PM to discuss this?

Re: Please ask questions ONLY in this topic.

PostPosted: Wed Jul 29, 2020 5:53 am
by conscience
Both of you can ping me if you like

Re: Please ask questions ONLY in this topic.

PostPosted: Thu Nov 12, 2020 4:18 pm
by yaidel22
Hey guys, hope you doing good. If you are stuck right now in this challenge pls keep reading this...


First: I'm kind of new to this world, of hacking. Have a little bit of experience with python, and C# ... but nothing major... changing the topic:

For this challenge you MUST!!! understand SQL injections, you know that same thing everyone has been telling you...but here is the catchy thing --- DON'T over do it.
I new nothing about SQL injections before last week but i started the challenge yesterday, I went all in and start reading and looking in google all about SQLi like crazy, even though i understand it after 5 hours straight reading it didn't click, i wasn't sure about the syntax and it kept giving me error... i stop when i notice i was getting frustrated and went to sleep ... long story short after coming back from work today, i thought about something to try in this challenge ... and walla it putted me in the right track....

Summary:
1-Study the syntax and examples of SQL injections, and make an effort to understand it -- *not cheating just use your browser to execute the codes*
2-You DON'T UNDERSTAND it at the beginning, it's ok -- just get some sleep, and come back later with afresh mind, it helped me!

Resources that can help: https://www.sqlinjection.net/union/

Re: Please ask questions ONLY in this topic.

PostPosted: Wed Jan 06, 2021 11:26 am
by CaptainWoof
I got the emails
Tried submitting them to SaveTheWhales, but got this response:

`Your response did not generate a victory condition for the challenge. Please try again!`

I sent the emails in a newline-separated manner.

Re: Please ask questions ONLY in this topic.

PostPosted: Thu Jan 14, 2021 1:35 pm
by conscience
CaptainWoof wrote:I got the emails
Tried submitting them to SaveTheWhales, but got this response:

`Your response did not generate a victory condition for the challenge. Please try again!`

I sent the emails in a newline-separated manner.


Can't promise I'll be quick, but if you'd like, forward me your message to SaveTheWhales and I can try to figure out what might be wrong with it.

Re: Please ask questions ONLY in this topic.

PostPosted: Thu Feb 11, 2021 7:25 pm
by butchnan
alright, so I found the emails, I know where to send them, etc.

my problem is every email is in the form of a .jpg file titled the name of the email (example: your@email.com.jpg). is there any way to get them as a list of emails in text form?
if the list was longer, I would have just copied the page's source code and did a 'find' function on .com, .org, .edu etc. but given the length of the list I just went through and copied each down.

Re: Please ask questions ONLY in this topic.

PostPosted: Tue Feb 16, 2021 1:46 pm
by conscience
butchnan wrote:alright, so I found the emails, I know where to send them, etc.

my problem is every email is in the form of a .jpg file titled the name of the email (example: your@email.com.jpg). is there any way to get them as a list of emails in text form?
if the list was longer, I would have just copied the page's source code and did a 'find' function on .com, .org, .edu etc. but given the length of the list I just went through and copied each down.


There are multiple fields for each... erm... item that are rendered to the page. Use one that does not correspond to the image URL.