Other exploits

Well, as some of you know, I'm currently working on a realistic, that a few people have shown a real interest in. My question is this, what kind of exploits would like like to see in a new real?

Like a rfi, and you give restrictions to the file. But you use the shell to look into text files to get a password to login.

Isnt this the hard (debatable) part of making a challenge? Its not hard to code, just needs a good idea, and if you cant come up with your own then doesn't it defeat the point?

I would like to see something that isnt in the other 2 challenges, so I would suggest finishing the second pen test, seeing whats in use, and using something else.

He is not talking about a pen testing though.

Nah, I'm coding a realistic challenge, and I am nearly done with what the challenge thoughts I had. I just thought I would see if anyone had some extra ideas I could add into it.

Ah my mistake. My point still applies though, the hard part of a challenge is coming up with something that not only isnt done here, isnt done on another security simulation site. After checking out EG I think they have most of my ideas done already.

Well, My challenge is in the final stages. Testing. All I have left to do is test it and make sure it works. Now, I need to ask the admins, Can I post it for EMs to test?

That would be great.

Go for it.

FarWestTC.ulmb.com

After a quick look, it seems most of the pages are missing or clones of others. If this was your intention fine but I dont think it was…

You say this is finished yes??

Not final. No. I'm seeing if any one can find bugs. Kinda like a beta. then I'll do the aesthetics.

It's kinda hard to find bugs when half the site is missing though . :|

That's part of the idea. Its a "web developer" that is redesigning his site and that's why it is exploitable. (That's why the source has <!– incomplete –> in it…

It's just hard to tell what's intentional , and whats accidental though , for example , the page :

http://farwesttc.ulmb.com/page/contact.phpproduces an error , but I was pretty sure it didn't last time I looked .:| Maybe it's best to have it completed and fully working , then ask about bugs and typos etc , to save confusion .

Thanks, and sorry about that. It's all fixed now. All aboard for Real 19 by Yours31f!!

Done and Submitted.