hackthissite.org basic 2 :: password is not
by Arxleol on Wednesday 11.03.2009, under hackthissite.org, tutorial
OK here is solution for basic mission two actually you’ve got solution right under your nose when they say to you that there is no file uploaded.
Now what have we learned from the basic mission 1 is that we have to check code we click ctrl + U and go to the form let’s check it and there is almost nothing. Well there are things but they will not help us. So what do we do next we return to the hackthissite.org and basic mission two input box. And think what and how would script work.
Well to my best common knowledge I think that script would work in a way that it loads file and from the file it loads password. So what shell we do is that we should start inputing some string in the input box and see what do we get out of it.
OK what is the first logical thing to enter, well I leave you now to check it out and try few times. Don’t just input some useless strings rather input string with meaning and the one which could produce some result.
OK here is solution for all of you who are so impatient to figure it out. It’s blank space that is nothing just click on the submit button.
And how does this works, well when some php script tries to load date from the non existing file it usually leaves variable blank and when blank variable is compared to the other blank variable it gives true therefore your success in this mission or later we will see it is known as NULL exception.
Good luck and GodSpeed.
Wednesday 10.06.2009 on 16:30
Thanks
Wednesday 10.06.2009 on 17:02
np