SignupHide Sidebar
Username: 
Password: 
Restrict session to IP 
Statistics
44 Sites
197 Challs
9899 Posts
73485 Users
52 Donations
1 Shop
44 Active Sites
World of Wargame
WeChall
TheBlackSheep
Rankk
Electrica
NewbieContest
BrainQuest
Net-Force
HackThisSite
elhacker.net
TryThis0ne
TDHack
+Ma's Reversing
Hacker.org
HackBBS
Root-Me
SPOJ
Revolution Elite
W3Challs
Gekko
Webhacking.kr
Reversing.Kr
SuNiNaTaS
Yoire
Hacking-Challenges
OverTheWire.org
RedTigers Hackit
ae27ff
pwnable.kr
RingZer0 Team Online CTF
pwnable.tw
Hack The Box
try to decrypt
MysteryTwister
Énigmes À Thématiques
247CTF
CryptoHack
PyDéfis
PromptRiddle
pwn.college
HackMyVM
Hack The Web
GemForgeLabs
mrradio.kr
Top 10 Players
rayaseiren
dloser
jusb3
ytbjplh
tehron
Caesum
tenflo
sisyang
Xaav
noother
Last 20 Activities
ms_nobody
DevilDog
j_m
Jinx
mm301
ossa
boiled_pickles
Jinx
mozaa
yehuju
yehuju
raikoug
peterkodo
jexi
yugandhar
raikoug
sambo
xen-ops
Celcious
benito255
Online within 1d
1 Users
andthewinneris
WeChall->Challenges->Challenge: Yourself PHP

puzzled...  Go to the Yourself PHP challenge

Global Rank: 1548
Totalscore: 17774
Posts: 5
Thanks: 6
UpVotes: 5
Registered: 16y 246d


Last Seen: 11y 291d
The User is Offline
puzzled...
Jan 14, 2011 - 22:01:33 (15y 292d) Google/translate1Thank You!1Good Post!1Bad Post! link
So... I think I found how to exploit the script. I actually made a JS alert pop-up
by exploiting it correctly
, but it doesn't seem to be what's needed to solve the challenge.

Any hints there?
Last edited by gizmore - Jan 14, 2011 - 22:19:41
Global Rank: 374
Totalscore: 66437
Posts: 274
Thanks: 258
UpVotes: 278
Registered: 15y 320d
space`s Avatar
The User is Offline
1
RE: puzzled...
Jan 14, 2011 - 22:18:22 (15y 292d) Google/translate1Thank You!1Good Post!0Bad Post! link
you're on the right way
Contact only via c3BhY2VAd2VjaGFsbC5uZXQ= or PM...
Windows can be secure... but only if you don't use it Happy
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d




Last Seen: 64d 18h
The User is Offline
Send EMail to gizmore
RE: puzzled...
Jan 14, 2011 - 22:18:47 (15y 292d) Google/translate1Thank You!1Good Post!0Bad Post! link
Minify or pm me your xss.

Edit: Also make sure you inject exactly <script>alert(1);</script>
The geeks shall inherit the properties and methods of object earth.
Last edited by gizmore - Jan 14, 2011 - 22:23:19
Global Rank: 1548
Totalscore: 17774
Posts: 5
Thanks: 6
UpVotes: 5
Registered: 16y 246d


Last Seen: 11y 291d
The User is Offline
RE: puzzled...
Jan 15, 2011 - 00:38:21 (15y 292d) Google/translate2Thank You!1Good Post!1Bad Post! link
I forgot the ; after the alert! Now it works Smile
Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 12991 times. 
PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?.
GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109.
GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.