The Guesbook Go to the The Guestbook challenge
Totalscore: 956654
Posts: 127
Thanks: 167
UpVotes: 115
Registered: 18y 201d
The User is Offline
The Guesbook
Nov 15, 2010 - 17:25:06 (15y 352d)
Nov 15, 2010 - 17:25:06 (15y 352d)
Hi all,
I know the trick how to exploit it, I also recieve some error. I just don't get the correct string to exploit... any hint maybe what to google for?
I know the trick how to exploit it, I also recieve some error. I just don't get the correct string to exploit... any hint maybe what to google for?
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d
Last Seen: 64d 17h
The User is Offline
RE: The Guesbook
Nov 15, 2010 - 18:25:40 (15y 352d)
Nov 15, 2010 - 18:25:40 (15y 352d)
I think there is nothing "specific" you could google for this challenge.
As always, "Code you see is code in use". No simulations.
A good idea is maybe to create the database/tables yourself and do the injections on your localhost with mysql console.
Good luck!
As always, "Code you see is code in use". No simulations.
A good idea is maybe to create the database/tables yourself and do the injections on your localhost with mysql console.
Good luck!
The geeks shall inherit the properties and methods of object earth.
Global Rank: 5305
Totalscore: 3175
Posts: 7
Thanks: 10
UpVotes: 11
Registered: 14y 265d
Last Seen: 7y 345d
The User is Offline
RE: The Guesbook
Mar 02, 2012 - 14:22:16 (14y 245d)
Mar 02, 2012 - 14:22:16 (14y 245d)
It would be more helpful if you post the error messages here, instead the way of solving.
Regards
gizmore
Regards
gizmore
Last edited by gizmore - Mar 02, 2012 - 14:30:07
Global Rank: 5305
Totalscore: 3175
Posts: 7
Thanks: 10
UpVotes: 11
Registered: 14y 265d
Last Seen: 7y 345d
The User is Offline
RE: The Guesbook
Mar 03, 2012 - 07:22:00 (14y 244d)
Mar 03, 2012 - 07:22:00 (14y 244d)
I'm sorry about that. Actually figured what the garbled text was which I was getting as a reply. It was a gzipped version of the page. That is why I couldn't make head or tails of the characters. But now there is a new problem. My request gets timed out every time I send it to index.php . Even if I try without logging in and w/o adding the injection, it doesn't let me add entries to the guestbook. The code is what I posted yesterday. I can repost a short version of it here if you wouldn't mind (w/o the injection ofcourse).
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d
Last Seen: 64d 17h
The User is Offline
RE: The Guesbook
Mar 03, 2012 - 17:37:00 (14y 243d)
Mar 03, 2012 - 17:37:00 (14y 243d)
Hmm, no idea what it could be.
You may post some code that does not spoil the vulnerability
You may post some code that does not spoil the vulnerability
The geeks shall inherit the properties and methods of object earth.
Global Rank: 5305
Totalscore: 3175
Posts: 7
Thanks: 10
UpVotes: 11
Registered: 14y 265d
Last Seen: 7y 345d
The User is Offline
RE: The Guesbook
Mar 05, 2012 - 15:22:39 (14y 241d)
Mar 05, 2012 - 15:22:39 (14y 241d)
PHP Warning(2): require_once(/home/gizmore/www/geshi/src/geshi.php): Failed to open stream: No such file or directory in core/inc/util/GWF_BBCodeItem.php line 219
Backtrace starts in www/index.php line 6. GWF3->__construct()............... gwf3.class.php line 107. GWF3->init()...................... gwf3.class.php line 173. GWF3->onLoadModule().............. gwf3.class.php line 435. Module_Forum->execute()........... core/module/Forum/Module_Forum.php line 223. GWF_Module->execute()............. core/inc/util/GWF_Module.php line 344. Forum_ShowThread->execute()....... core/module/Forum/method/ShowThread.php line 66. Forum_ShowThread->templateThread() core/module/Forum/method/ShowThread.php line 131. GWF_Module->templatePHP()......... core/inc/util/GWF_Module.php line 153. GWF_Module->coreTemplatePHP()..... core/inc/util/GWF_Module.php line 159. GWF_Template::templatePHPRaw().... core/inc/util/GWF_Template.php line 25. GWF_Template::templatePHP()....... core/inc/util/GWF_Template.php line 113. include()......................... www/tpl/wc4/module/Forum/show_thread.php line 71. include()......................... www/tpl/wc4/module/Forum/show_post.php line 137. GWF_ForumPost->displayMessage()... core/module/Forum/GWF_ForumPost.php line 165. GWF_Message::display()............ core/inc/util/GWF_Message.php line 229. GWF_BBCode::decode().............. core/inc/util/GWF_BBCode.php line 127. GWF_BBCodeItem->render().......... core/inc/util/GWF_BBCodeItem.php line 78. GWF_BBCodeItem->renderChilds().... core/inc/util/GWF_BBCodeItem.php line 117. GWF_BBCodeItem->render().......... core/inc/util/GWF_BBCodeItem.php line 74. GWF_BBCodeItem->renderTag()....... core/inc/util/GWF_BBCodeItem.php line 101. GWF_BBCodeItem->render_code()..... core/inc/util/GWF_BBCodeItem.php line 410. GWF_BBCodeItem->renderCode()...... core/inc/util/GWF_BBCodeItem.php line 219. require_once().................... core/inc/util/GWF_BBCodeItem.php line 219. GWF_Debug::error_handler()........ core/inc/util/GWF_Debug.php line 180.
PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6
Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.