Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

article


ghost's Avatar
0 0

how long does an average article take to be published from the day that it is submitted??


ghost's Avatar
0 0

That would all depend on when admins are online, and if it IS accepted; which could very well be never if it's a bad article.


ghost's Avatar
0 0

ok my article got denied so i want to improve it here it is please comment on it

there are 2 ways to complete this mission that i know of
technique 1 is using javascript
technique 2 is using Opera(web browser)
ok so to start we are on HBH
go to exploit:
then click realistic
here we recieve good info
"Your goal for this mission is to log in as an registered 
user (johndoe/password) and analyze the site to gain administrator rights to change the price of the program to make it a lot more cheaper."
from this we learn:
our goal
& a username and password
Now go to the challenge site itself and login wit the info provided:
Username: johndoe
password: password
now go to the index and look around for anything that can lead us to a directory (images, link, etc..)
if u still cant find it its the image
copy the images location and paste it into the url
u will see the picture itself
take of the image1.jpg part and click enter
now you will be in a directory
(a directory is An organizational unit, or container, used to organize folders and files into a hierarchical structure)
ok to change the price of this product we need admin status
look for any admin info in this directory
found it yet you probably did (unless blind)
the info you see is the admins cookies
you currently have johndoes' cookies we need to change the cookies
to the admin cookies so we can hold supreme power lol
know there is a way to view your current cookies
paste this into the url bar
javascript:alert(document.cookie);
a popup will appear with your current cookies
does anything look familiar??
the AuthID
isnt that what youve seen  in the text file found at the directory??
hmm.......
but how do you change it????
first go to the toys.php
now-
there are two ways i know 
1) the first way is by inserting this into the url bar and hitting enter
javascript:void(document.cookie="AuthID=******");
---* stands for the AuthID
then click refresh and change the price to 1 dollar

2) the second way is by using Opera
to download opera go to
http://www.opera.com/download/
then go to toys.php
and click tools-advance-cookies
a little popup will appear, click on hellbounddhackers' folder then  double click the AuthID go to value and delete the value 
paste the AuthId instead and click ok
the AuthId cookie will close
clost the first popup
and refresh the page
vwola change the price to a dollar and submit

ghost's Avatar
0 0

how about instead of giving them the exact syntax they'll need for the javascript injection, you tell them that they need to use a javascript injection to edit the cookie info.

then if they don't know what a javascript injection is, they can google it and learn it themselves.


ghost's Avatar
0 0

thx any other suggestions??


ghost's Avatar
0 0

Just a few:

  1. Use correct spelling
  2. Better use of grammar and mechanics
  3. Paragraphs instead of creating new lines for one sentence.

All of these make the article easier to read and allows for better comprehension. I'm sure that this plays a role in the "reject or deny" phase of the article submission process.


Uber0n's Avatar
Member
0 0

turbocharged_06 wrote: how long does an average article take to be published from the day that it is submitted??

Up to a few days ^^


ghost's Avatar
0 0

Here'z a sugg3stion:

Give up y0ur pathet1c whitehat wayz, and actually gain some knowledge.

Close your webbrowser, and open a book.

G-line 0wnz.


ghost's Avatar
0 0

I'm confused, what kind of constructive criticism is that? How does that advice help improve his article?


ghost's Avatar
0 0

1t'z gr34t advice kid, t4k3 it.


ghost's Avatar
0 0

Oh, ok. Thanks for clearing that up for me.

[/sarcasm]


ghost's Avatar
0 0

Ethernet wrote: Here'z a sugg3stion:

Give up y0ur pathet1c whitehat wayz, and actually gain some knowledge.

Close your webbrowser, and open a book.

G-line 0wnz. how bout i keep my browser open and read an e-book lol ok


ghost's Avatar
0 0

It most likely got denied, because they finally stopped accepting articles on challenges that have already been written about in articles several times. Everyone is tired of seeing articles for the same challenges. Instead, look in the articles list, to see which challenges haven't been covered, and write one on one of those.


ghost's Avatar
0 0

i thought theyd accept this one because it shows 2 ways to complete this challenge all the others are the sameā€¦.