Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Basic 22 (syntax)


Flaming_figures's Avatar
Member
0 0

Listen, I just can't get the syntax of it right. I know all about SSI and how to inject it. The syntax I am using would work under real circumstances. I was just wondering if I could get some help. (I think I know one thing that might be screwing up… what is the used seperater for the commands? ; or , or | etc.) Thanks, any help is appreciated.


ghost's Avatar
0 0

pm me if you want


ghost's Avatar
0 0

you'll only need one command… and to specify where the command does….well what it does ;)


mido's Avatar
Member
0 0

No, its the most basic command, You just have to know the file and enter it manually from the URL.


flame_1221's Avatar
nobody
0 0

I found the pfb****.php but when I enter it to the URL, I got 404 error.


ghost's Avatar
0 0

eh.. make sure your in the right err… place when you are entering the file you need please ^_^


flame_1221's Avatar
nobody
0 0

Thanks.. I forgot about that..;)


ghost's Avatar
0 0

I'm still having trouble with the syntax. What I'm not sure about is how to specify the directory after the ls command. I've been googling like crazy and haven't found anything yet.


ghost's Avatar
0 0

If I'm not mistaken, you could just list the contents of any directory by specifying which directory you want to list.

Ex: dir System32 (which would list the contents of the System32 directory)

I think it's the same in linux basically, although I'm not sure if that's what you have to do for this challenge or not. Also, I think you can include a full path (like "C:\WINDOWS\System32") and it will work, though I'm not completely sure…


ghost's Avatar
0 0

Got it, thanks a bunch. I was using the forward slashes / along with the directory.


ghost's Avatar
0 0

xD well good job :)