Details

A writeup of realistic missions 1-3 on http://hackthissite.org/

Realistic One

I clicked the link to be taken to the mission

It seems it is a voting site where the top site has ~ 23.1 points, I then found the band I was boosting

The max value is 5

I found in the source that it is just a value in an option

So I added one with a value of “99999”

Which I then selected

And hit vote

Realistic Two

So my goal is to get into the admin panel, first I click onto the site

In the source I find a link to a page called update.php which has been coloured the same as the background to hide it

So I click onto it

I tried “admin:admin” as creds

I then tried an sql injection of

username: admin
password: ' OR '1'='1'--

Realistic Three

I click over to the site

In the source I found the location of the old index

I went over to it

Then checked out the submit poem page

Then the read poems page

My guess was the name field would be a directory traversal, so I took the source of oldindex.html and put it as the poem value, then named it “../index.html”

Finally I hit “add poem”

Last Thoughts

This was levels 1 to 3, I’ll do some more another time!# Details

A writeup of realistic missions 1-3 on http://hackthissite.org/

Realistic One

I clicked the link to be taken to the mission

It seems it is a voting site where the top site has ~ 23.1 points, I then found the band I was boosting

The max value is 5

I found in the source that it is just a value in an option

So I added one with a value of “99999”

Which I then selected

And hit vote

Realistic Two

So my goal is to get into the admin panel, first I click onto the site

In the source I find a link to a page called update.php which has been coloured the same as the background to hide it

So I click onto it

I tried “admin:admin” as creds

I then tried an sql injection of

username: admin
password: ' OR '1'='1'--

Realistic Three

I click over to the site

In the source I found the location of the old index

I went over to it

Then checked out the submit poem page

Then the read poems page

My guess was the name field would be a directory traversal, so I took the source of oldindex.html and put it as the poem value, then named it “../index.html”

Finally I hit “add poem”

Last Thoughts

This was levels 1 to 3, I’ll do some more another time!