basic 7

i got the username/ password from the source, but i dont know where the binary is. i checked the cookies, and got the same username/ password but still no binary. i tried to use the username i got from the cookies/source and encrypt it, but that didnt work. where is the binary/ am i on the right track?

That's y u have to encrypt it http://www.yellowpipe.com/yis/tools/encrypter/index.php…. then you have to do 2 injections…. :D. i think u can get it from there… just think how can i alter the cookies?

That's y u have to encrypt it http://www.yellowpipe.com/yis/tools/encrypter/index.php…. then you have to do 2 injections…. :D. i think u can get it from there… just think how can i alter the cookies?

isnt it only 1 injection? the injection to alter the username cookie?

ok i injected the binary, changed the username cookie, and pushed enter after putting the binary into the login. is this right? if you want to see how i injected it, ill pm you i dont wanna post spoilers

never mind it wasnt working because of spaces in the binary

ok, what r the injecctions for changing cookies? i got the rest pretty much bu t i cant figure that out. gimme a hand plz, a link that'll help or something

ok, what r the injecctions for changing cookies? i got the rest pretty much bu t i cant figure that out. gimme a hand plz, a link that'll help or something

ok, what r the injecctions for changing cookies? i got the rest pretty much bu t i cant figure that out. gimme a hand plz, a link that'll help or something

omg srry, triple post…

yay i got it, u need 2 put the java thing, and in the () u need to have "" on the left side of username, and on the right side of the binary. hope this helps! now, i gotta do the SQL injection

I'm having a huge problem with Basic Challenge 7. I found the Username & Password. Here's what I am doing : I put in the Username and click enter; it pops up and says "Sorry you are not autenticated". What does this mean? It's not a ban because it's in the little green challenge box. What do I do?? And what is a SQL injection and how do I do and it and why do I have to do it for the challenge?

Search button is your friend, google is even a better freind, and reading is your best freind. Research my friend, try to teach yourself some things, feels good once you figure it out!