[Crypt]

Website -

Spoiler:

http://scphotos.com

Method - SSI injection (Server Side Includes)

Objective - Display the user agent, like so

Proof -

Solvers:
Breshie
Adorapuff

[Adorapuff]

I attempted this challenge and then was redirected to:
http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+...ME+FIND+ME

[Bannedshee]

I attempted this challenge and then was redirected to:
http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+...ME+FIND+ME

HAHAHA I CANT STOP LOLING

[Satan]

I attempted this challenge and then was redirected to:

Spoiler:

http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+TRYING+TO+BREAK+INTO+A+SITE+WITH+SSI+INJECTION+EXEC+CMD+TYPE+ATTACK+AND+SO+THEY+SENT+ME+HERE.+PLEASE+COME+FIND+ME

lelwhat.
That a serious thing?

[Adorapuff]

lelwhat.
That a serious thing?

Enter < !--#exec cmd="ls"> into the username and password field.

[Eclipse]

Enter < !--#exec cmd="ls"> into the username and password field.

Lol it happened to me too!!!

[Customer]

I attempted this challenge and then was redirected to:
http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+...ME+FIND+ME

Oh lordy me.. That's hilarious.

[Crypt]

Lol you nobs

Yeah, the website I did it on is protected by that IPN bullshit (just like most sites vulnerable to SSI Injection)

[BreShiE]

sweg

C'mon guys, am I seriously always the first person to do this?

[Adorapuff]

Took me way longer than necessary.


You should post more challenges. I really like them.