Time to Reset II (Exploit, Coding, PHP)
Time to Reset - II
As announced, this is a sequel to the TTR challenge.
noother has proven that it is solveable, and an awesome exploit. Again you have to submit the password reset token for the user admin@wechall.net
Please note that your tokens are bound to your session.
You probably want to take a look at the sourcecode, also available in a highlighted version
Thanks go to noother for proving that stuff can still be owned in creative ways :)
Good Luck!
noother has proven that it is solveable, and an awesome exploit. Again you have to submit the password reset token for the user admin@wechall.net
Please note that your tokens are bound to your session.
You probably want to take a look at the sourcecode, also available in a highlighted version
Thanks go to noother for proving that stuff can still be owned in creative ways :)
Good Luck!
PHP Warning(2): require_once(/home/gizmore/www/geshi/src/geshi.php): Failed to open stream: No such file or directory in core/inc/util/GWF_BBCodeItem.php line 219
Backtrace starts in www/challenge/time_to_reset2/index.php line 40. GWF_BBCode::decode().......... core/inc/util/GWF_BBCode.php line 127. GWF_BBCodeItem->render()...... core/inc/util/GWF_BBCodeItem.php line 78. GWF_BBCodeItem->renderChilds() core/inc/util/GWF_BBCodeItem.php line 117. GWF_BBCodeItem->render()...... core/inc/util/GWF_BBCodeItem.php line 74. GWF_BBCodeItem->renderTag()... core/inc/util/GWF_BBCodeItem.php line 101. GWF_BBCodeItem->render_php().. core/inc/util/GWF_BBCodeItem.php line 393. GWF_BBCodeItem->renderCode().. core/inc/util/GWF_BBCodeItem.php line 219. require_once()................ core/inc/util/GWF_BBCodeItem.php line 219. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.
PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6
Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.