Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

BASIC 9-YOU ARE INSIDE THE FILE


ghost's Avatar
0 0

okay, i get this for a particular file, but i dont think its teh one i want. any tips?


ghost's Avatar
0 0
  1. i hate your sig. not because its marilyn manson because it loops and feels like someone is kicking my head.

  2. keep trying your doing good


ghost's Avatar
0 0

yeah. i think i might take sum kinda fit off it. slowwww fast FLASH

ive alernated between two search pages, they both give teh same results. oh and btw-two password boxes???


ghost's Avatar
0 0

okay i read i have to find where the login script takes you and append the pnba but i went to 52.php and appended it but it didnt work. any tips?


ghost's Avatar
0 0

you want to use the poison null byte attack on the login page…


interslice's Avatar
Member
0 0

the way i did it was i changed the url to take me to this page with all these files in it. then i used the poison null byte on one of them… i hope that helps.

(sry if this is unclear i dont wanna giv away any spoilers im sure u dont want any either :))


ghost's Avatar
0 0

when you say a page with files on it, do you mean an index?


ghost's Avatar
0 0

no, i think he means a directory


ghost's Avatar
0 0

the only files listing ive found is in a certain directory<<<


ghost's Avatar
0 0

i tried the poison null on all the files from the directory… i read somewhere that u dont put it in the url bar… im lost can someone help please?


ghost's Avatar
0 0

the easiest way would be to put it in another place which in turn places it automatically in the url bar the right way (maybe something on the main page of the challenge will be useful…)

edit: you CAN put it in the url bar, but that takes a bit of thinking, it's all about how a browser interprets characters written in hex.


ghost's Avatar
0 0

is there something wrong with basic 9 right now? if you type just one of the files into the search, it shows you nothing. leads me to believe soemthing is not right. am i off?


ghost's Avatar
0 0

whoa i got it its really easy and really cool since you notice google dosent really have that much into on PNB meaning its not really all that know in witch case means its very vunarable hehe im gonig to have a very merry christmas LOL


ghost's Avatar
0 0

I have gotten to the login page and I understand, maybe, that you have to PNB a directory, or the contents of a directory? I don't really know… Could you pm me? I need a little help.