Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

STUMPED

  1. Home
  2. Forum
  3. Pen Testing Challenges
  4. STUMPED

ghost's Avatar

ghost

0 0

I seriosly need help with this. I've got the secret dir but that's it.I can't execute my XSS in the members section I can't find an SQL injection anywhere I don't have the faintest idea with the sessions and I don't even know what dos is.so pleeeeeeeeeeaaaaaaaaassssssse help me thanks


ghost's Avatar

ghost

0 0

pm me


Uber0n's Avatar

Uber0n

Member
0 0

SaMTHG wrote: I can't execute my XSS in the members section Then you're doing it wrong. Read up on different XSS techniques.

I can't find an SQL injection anywhere Seriosly, it's quite obvious where you can use an SQL injection in this challenge :right:

I don't have the faintest idea with the sessions and I don't even know what dos is. Then you need to learn more about how sessions work in PHP.

pleeeeeeeeeeaaaaaaaaassssssse Come on, you won't get more help by extending the word 'please', no matter how long you make it ^^