Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

*Basic 23* only need a tad of help


Mb0742's Avatar
Ultimate Headshot
0 0

Thank you for reading this thread first of all.

I have looked into this challenge and researched RFI. By what I understand its that it's main goal is to load remote scripts onto the server but the problem is any thing I try like a basic uploader fails and HBH tells me I am on the right track.

How am I meant to RFI in this case, is the challenge broken?


ghost's Avatar
0 0

you need to upload a shell to the web, and use the RFI to execute it.


Mb0742's Avatar
Ultimate Headshot
0 0

a shell doing what?

EDIT I have pointed it to a script now that reads directory data, auto uploads files. But nothing works…


ghost's Avatar
0 0

just a simple one that

  1. gets a command [edit] as in POST/GET [/edit]
  2. executes it

google up on php shells. mine was only a few lines of code. its nothing complicated.


Mb0742's Avatar
Ultimate Headshot
0 0

so close?

I am using markup<?php echo $_REQUEST["number"]; ?>

the problem is I don't think it likes ********=x.php?=

any help?


spyware's Avatar
Banned
0 0

[Spoiler -_-]


Mb0742's Avatar
Ultimate Headshot
0 0

Fixed.

Now any help?