Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Basic 13


interslice's Avatar
Member
0 0

ok. so far i have the injection which i have to use but its not working for some reason. can i pm someone my injection? just to check if the injection is correct, close or completely screwed up.

thanks.


ghost's Avatar
0 0

Feel free to pm me…


ghost's Avatar
0 0

easiest way to solve this challenge is to do a search or just view the source of almost any webpage to see what a form that posts to another page looks like

then save and edit the page so u can choose the name you want and also when you hit submit it posts to the right url

u can use javascript:forms. like i did and i have an article that talks about that on this site


interslice's Avatar
Member
0 0

but if i do that the problem is i dont know where it should post to.:(


ghost's Avatar
0 0

if u cant find where is it going maybe it's going nowhere..


interslice's Avatar
Member
0 0

i dont understand …


ghost's Avatar
0 0

too many ways are available to beat this sucker. I'd recommend doing the one you're comfortable doing… try editing the form action or the form itself…


korg's Avatar
Admin from hell
0 0

The easy way is to use a javascript "form" injection. Takes less then a minute. Also there is an article on how to do it.


interslice's Avatar
Member
0 0

im trying to edit the form . so far ive changed one of the names to George so i can log in as him. but im having trouble with getting it to post to basic 13.


ghost's Avatar
0 0

ill be a little more specific then see the newsletter button on the right side of this site saying "subscribe"

using firefox select some text above and below that button (click and drag the mouse, reason: if u click the button u dont select it..)

with the text selected right click on it and choose "View Selection Source"

now compare that function with the one you are working on and see if it helps.


interslice's Avatar
Member
0 0

sry for the spoiler


ghost's Avatar
0 0

you are the one who should delete it

and yes the action= is where you put the url where the form posts to.

on the challenge it posts to itself that's what i meant with the other hint..

cmon u're either not trying or stuck on something really stupid.. pm me what u got


ghost's Avatar
0 0

i saved it to my hard drive, modifyed it and added george. what now? opening it in ff does nothing, its just my document. do i need to host it?