[HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium

[HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium (/Thread-HACK-Website-Hacking-Challenge-3-HACK-Difficulty-Medium)

Pages: 1 2

[HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Crypt - 02-17-2014

Website -

Spoiler:http://scphotos.com

Method - SSI injection (Server Side Includes)

Objective - Display the user agent, like so

Proof - [Image: uT7Swld.png]

Solvers:
Breshie
Adorapuff

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Adorapuff - 02-17-2014

I attempted this challenge and then was redirected to:
http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+TRYING+TO+BREAK+INTO+A+SITE+WITH+SSI+INJECTION+EXEC+CMD+TYPE+ATTACK+AND+SO+THEY+SENT+ME+HERE.+PLEASE+COME+FIND+ME

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Bannedshee - 02-17-2014

(02-17-2014, 06:48 PM)Adorapuff Wrote: I attempted this challenge and then was redirected to:
http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+TRYING+TO+BREAK+INTO+A+SITE+WITH+SSI+INJECTION+EXEC+CMD+TYPE+ATTACK+AND+SO+THEY+SENT+ME+HERE.+PLEASE+COME+FIND+ME

HAHAHA I CANT STOP LOLING

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Satan - 02-17-2014

(02-17-2014, 06:48 PM)Adorapuff Wrote: I attempted this challenge and then was redirected to:

Spoiler:
http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+TRYING+TO+BREAK+INTO+A+SITE+WITH+SSI+INJECTION+EXEC+CMD+TYPE+ATTACK+AND+SO+THEY+SENT+ME+HERE.+PLEASE+COME+FIND+ME

lelwhat.
That a serious thing?

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Adorapuff - 02-17-2014

(02-17-2014, 06:51 PM)Satan Wrote: lelwhat.
That a serious thing?

Enter < !--#exec cmd="ls"> into the username and password field.

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Eclipse - 02-17-2014

(02-17-2014, 06:52 PM)Adorapuff Wrote: Enter < !--#exec cmd="ls"> into the username and password field.

Lol it happened to me too!!!

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Customer - 02-17-2014

(02-17-2014, 06:48 PM)Adorapuff Wrote: I attempted this challenge and then was redirected to:
http://nsa.gov/?I+AM+A+HACKER+AND+I+WAS+TRYING+TO+BREAK+INTO+A+SITE+WITH+SSI+INJECTION+EXEC+CMD+TYPE+ATTACK+AND+SO+THEY+SENT+ME+HERE.+PLEASE+COME+FIND+ME

Oh lordy me.. That's hilarious.

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Crypt - 02-17-2014

Lol you nobs

Yeah, the website I did it on is protected by that IPN bullshit (just like most sites vulnerable to SSI Injection)

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - BreShiE - 02-18-2014

[Image: 70g1A.png]

sweg

C'mon guys, am I seriously always the first person to do this?

RE: [HACK] Website Hacking Challenge #3 [/HACK] Difficulty - Medium - Adorapuff - 02-18-2014

Took me way longer than necessary.
[Image: ljYyXov.png]

You should post more challenges. I really like them.