Please ask questions ONLY in this topic.

[mat12345]

where do sent them?? i have them 2.. :/

[canassassin]

On the left side of the screen under your username(while on homepage), there is a link that says HTS Messages center. Click on that link and use the following info:

To: SaveTheWhales

Subject: Just leave the subject blank.

Content:
Your list of email addresses (all 9)

Hope this is what your looking for. It took me a while to figure it out.

[shred_da_gnar]

hmm well i havent done it either but ill try to give you a shove in the right direction...
i dont really know if this will get you on the right track or not but...
when you click on the two links that are shown pay attention to what is in the address bar after you click on the first one.
notice what kind of file it is...

[f22]

I've carefully checked the source of every page and experimented with different inputs on every field I could find, but I can't find the lead to this mysterious "thing that happens when you register a user". Ive even figured out to get the l****.s** file and dec****** it to find out about the c*****.txt file, which I assume that I need to overwrite so it points to a different file, but I have no idea what I would exploit to do this.

Can someone please post (or PM) where specifically this clue lies?

[Elligari]

The names aren't sanitized, so you can use some 'unusual characters' in there. Wonder what would happen if our name was a command... That command could reach something, right?

[f22]

Well yeah, I know that, but that doesn't really help me unless I know what is actually happening with that value. I don't even know what language the server is using to process it. Everyone seems to keep mentioning some clue somewhere, but I can't seem to find it. Or maybe it's something you are just supposed to know if you have some web developing experience (which I don't).

[f22]

Alright, I just finished this mission, but only really by looking at all the hints. I'm still very curious as to how I was supposed to figure out how the system stored the user information (which is the only way I would have known what to do on my own).

[Poopsicle]

Im stuck. I found c*****.***. I found a***_****=a***.***.I found A*****=f****.From there I dont know where to go.I got Sothinks FD but i dont know what to do with it.I captured the Admin login but what after that? Plus I dont know where to overwrite the something Im supposed to verwrtie.Any push would help.Thanks









'

[Damascus2k8]

stuck at the overwrite portion. I would assume I must get rid of the numerical value follow by the semi-colon some how but that field only take numerical value...?

Can someone offer some hint / suggestion on how to approach this issue?

Thanks.

This is my problem also. I have everything else, (and managed to work it all out myself by the way ), but after turning to the article im even more lost now.

Is this supposed to be just a character you stick on the end of your "expoit text", ie: what you are overwriting the file with? Because i cannot find anything! ive googled for hours upon hours, and theres nothing out there, and everything i try just causes the flash movie to hang...

I've been watching everything that is getting sent between flash and the server, using a combination of wireshark/smartsniff/tamperdata so i know none of what im trying is even close to working.

-more to the point, i know that much about load variables now that if i see another article on the subject i swear my head will explode!

Another thing: am i correct in thinking this all has to be in one box? and the others empty?

Can anyone help me/us on this please?

DamascuS

[xelix]

Damascus2k8,

Remember, you can comment out certain things in the file. So, make sure your line doesn't end with anything you wouldn't want it too.