real 12

ghost

0 0

18 years ago

real 12–> i am to get stuck in second login. Plese for hint

ghost

0 0

18 years ago

Do something similar what you did in first part. Keep trying combinations. Keep an eye what it says in error message.

ghost

0 0

18 years ago

thnx–>i got it

ghost

0 0

18 years ago

where do i even start here?

ghost

0 0

18 years ago

where do u start, i did the include thing already

ghost

0 0

18 years ago

I am stuck on first part (I have user and pass, but it wont let me enter :( !

And I need to acess the protected folder, else, the second login won't work (it call a page in the adm** folder)

I have user (adm**) and pass (gFb**********). But, when i try to put this username and password, it sais I am not authorized !!

ghost

0 0

18 years ago

Think John the Ripper.

ghost

0 0

18 years ago

Thx, it found something :)

---

Edit

Nvm….it don't work :(:(:(

is it : gr*****y ?

ghost

0 0

18 years ago

Did you use JTR?

ghost

0 0

18 years ago

yeh really should use John….it works…

ghost

0 0

18 years ago

Yeah…I used JTR… but, it say that I am not authorized (On the website)

I log as amn:gr*****y

ghost

0 0

18 years ago

Where did you find the hash?

ghost

0 0

18 years ago

with the include vulnerability, in /an/.p*d

ghost

0 0

18 years ago

i cant recall, but its possible you have the wrong password…..altho i could be wrong, i cant remember…..i have a bad, bad memory….

ghost

0 0

18 years ago

how do i do the second auth, i dont kno where to start here

ghost

0 0

18 years ago

You got the hash from the right place but i don't know how it decrypted to that. I used JTR with this wordlist… http://prdownloads.sourceforge.net/wordlist/12dicts-4.0.zip I haven't seen you on IRC, do you have another way i can talk to you, PM me. (i'm chris579 on IRC)

ghost

0 0

18 years ago

aenman123 wrote: how do i do the second auth, i dont kno where to start here If your talking about the login after the .htacces login theres another password file in the admin directory. It's really easy, it's a .txt file.

ghost

0 0

18 years ago

k i found 5that, i changed the price, it says i did part of the chalenge, i found another filer (u**rs.txt) but what do i do with it? how do i finish it?

ghost

0 0

18 years ago

nevermind i got it, btw the last part of the challenge is not mentioned in the description

ghost

0 0

17 years ago

this challenge is easy, but I can't seem to find what to do on the last step…

Your ticket number for the cafe is: K*f**0 Welldone! You have successfully completed the challenge!

But I still get no points..

I've logged in as admin, changed the price correctly, logged in as **d001 in the "pre-order" menu, but nothing gives…

Is the challenge not working, still?

ghost

0 0

17 years ago

i Just did it again and it's fine

ghost

0 0

17 years ago

well, what's your diagnostic? What am I doing wrong?

No spoilers, please…. just a hint to maybe do something that I am obviously missing, either in the objectives, or in the challenge itself.

richohealey

Python Ninja

0 0

17 years ago

did you change the price with the admin panel or XSS?