Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

will some 1 please help me out! basic 7


ghost's Avatar
0 0

ok here is where im stuck…. iv found the user name and pass in the view source and on the challange it says i need to encrypt it! when i do so (searched google for encrypting) i get some thing like this :

Î[§Fê}

as far as i know this would be the user name sam! and i should be able to log in? … and than i should get to the second bange and try the sql … or what?? iv read about it and been trying to do it for 2 days! can some 1 please help me out! what am i doing wrong?

tnx:xx:


ghost's Avatar
0 0

1-> Go here: markuphttp://nickciske.com/tools/binary.php 2-> Read this one more time This time Mr. Deitry decided to make a cookie login script and he said he decrypted it from ASCII encryption, and for you to login you need to encrypt it. And after you login there is another login but its a Login that uses SQL databases, but he thinks that the SQL login page is vulnerable to a simple SQL injection, and when he gets back from his vacation he would fix it.

3-> Inject the cookie and goto the second page.

4->the SQL login page is vulnerable to a simple SQL injection

Hope this helps.

REgards,


ghost's Avatar
0 0

thanks man! thanks a lot it helps a LOT! now i can figure it out and understad it better!


ghost's Avatar
0 0

ok i understad it better but… again but…. i did the encryption of the user name as the site asks for the user nam "sam" i got this 01110011 01100001 01101101 but it doesnt work! i still cant get can… :(:( can u help me a bit more pls! i dont get it!


ghost's Avatar
0 0

thats binary, you want ascii encryption, a quick gogole search will help you on that, it would look like random charecters..


ghost's Avatar
0 0

keiran420 wrote: thats binary, you want ascii encryption, a quick gogole search will help you on that, it would look like random charecters..

Well, I tried ascii encryption from this page markuphttp://javascript.internet.com/passwords/ascii-encryption.html It kept saying I am not auth'ed. So tried binary as it was mentioned in one of the tutorials and viola..

@sale666 u need to put the binary code into the cookie. The screen asks for ur username and not ur password..so where should u put that binary code? and it is '011100110110000101101101' . The binary you have is correct..just remove those spaces. I am assuming you know how to modify cookies using javascript..so good luck :)

REgards,


ghost's Avatar
0 0

OH OH MEMEMEME! javascript:void(docu<i></i>ment.cookie="username=binary encrypted text" :D (replace binary text with the ACTUAL binary username) I'm so smart:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D

EDIT: Is that right?:whoa:


ghost's Avatar
0 0

take the html italics out. why are they there anyway? and dont forget the closing parenthesis.

hope this helps


ghost's Avatar
0 0

The HTML italic in "document.cookie" is part of the security in this forum, so that no cookie stealer can work.


ghost's Avatar
0 0

thanks. now it makes more sense.


ghost's Avatar
0 0

g0t it


ghost's Avatar
0 0

HA I am useful! I think:|