Pen 1, new
i figured that since the last pen 1 forum had 60+ replys, its time for a new one
im stuck, so far ive found
the secret directrory logged in as admin found some php code talking about an admin panel found exploit on another page (dont want to give it away)
now im trying to find and exploit on the "m3mb3r t0015" page, i think its xss, not sure, any help? even when i enter normal values nothing seems to happen.
ok, i found an exploit, but i guess it wasnt good enough to get any points, i included index.php so it would go on for infinity, and it was stopped by the challenge, guess that one is too easy haha.
i also found another page that says that the admin panel is still being made, i dont know what to do from here, im stuck in the same spot as before.
noober wrote: seeing as the site doesnt let you use the word fuck i sub with poop seems far to me
Well, though that is an accurate statement, it is irrelevant. I think the creators of the challenge meant for the admin login to not have any more privileges to prove:
"Admin credentials are not the answer to everything, and not always easily obtainable."
Sometimes, you have to use exploits that would utilize alternate credentials without the credentials being available. Also, if the admin login did give you any more privilege, then it would've made the challenge easier. Ultimately, that would've made the challenge less effective in teaching viable technique.
noober wrote: i suppose your right. Just working on using those nooblet credentials somehow
[quote]cough, cough Diversion! [/quote]
yeah…they're not meant to be used at all (unless there's a 6th exploit I haven't found or something) :)
Now, to your problem on the member tools page, you're on the right track. How many fields do you have in the form?
http://www.hellboundhackers.org/challenges/basic13/index.php
ever done that challenge? How did you do it? :P
Note: Web Developer Toolbar makes this very easy :)
Flaming_figures wrote: Re**** F*** In******* and L**** F*** In*******. Thanks skunk you saved me lots of wasted time with that comment :)
Yeah, the "XSS" and "Web Developer" comments, when combined, may have constituted a spoiler. I still think the best piece of advice for this challenge is "look at everything, and try everything". It may seem too broad but, once you start finding exploits, you'll understand why.
Really, they are basic exploits; hopefully, the second PenTest challenge will be more complex and have more exploits for less points. We demand substance! :happy:
Skunkfoot wrote: lol, not necessarily, the web developer toolbar has a lot of options in it…
Yeah, I guess you're right. If they weren't familiar with the extension before the challenge, they'll still end up learning some technique out of it when they finally get it. Anyways, all but the last exploit should be extremely obvious after some plodding. :)
Man, I was trying to figure out what the exploit was that gives you 10 points for like an hour, so i gave up and saw that I somehow got the points hahaha.. i'm pretty sure I know which one worked though, it was the most obvious. There should maybe be some kind of message that tells you that you got the points, or maybe i just missed it?
pk, i found the "include" exploit but i'm stuck on these two things: i've found a secret dir, but i cant do anything in that, i only get error, on line 1337 :p also i'm trying to login as admin, i think i have a pass, but whats the username? [EDIT] ok it was my BIG fault. i am sorry. i've got it [/EDIT]
OK I got 90 points dunno what to do next. I got admin access. If this were a realistic chall probably I would try to get the ftp pass and deface the whole site. Hmm probably not. Maybe hijack the email and get some bank details and pocket some $$$. Maybe I'm going too far… And maybe I need an anti-1337 FF plugin. This chall is making my eyes hurt..
Zephyr_Pure wrote: [quote]slpctrl wrote: Can someone throw me a bone here? lol I've been trying to get this for fucking ever and can't seem to make it happen. God it's annoying.
Be a bit more specific, and you'll probably get some help. [/quote]
Never mind about the injection. I'm having problems with setting $_SESSION['ADMIN'] to true. :\
Ah that was easier than I thought lol. So I got 300 points did I finish it?
Edit: nm no lol I know what to do now tho…maybe not lol
Edit: Is the XSS portion of the challenge down? That's the only thing I can think of that I might be missing although I completed it…..I still need 50 points and I've completed 5 challenges….-_-