Username: 
Password: 
Restrict session to IP 
Online within 1d

Some hints please  Go to the Warchall: Live RCE challenge

1 2
Global Rank: 339
Totalscore: 72262
Posts: 25
Thanks: 25
UpVotes: 18
Registered: 13y 26d



Last Seen: 1y 204d
The User is Offline
Some hints please
Google/translate0Thank You!0Good Post!0Bad Post! link
As someone already beat this challenge I want to ask for a little hint.

Are we supposed to use an existing PHP class that will wakeup and use it to read solution.php or we have to treat it as a bufferoverflow zero day exploit of unserialize?

I want to know where to focus my research.

Thank you!
Global Rank: 339
Totalscore: 72262
Posts: 25
Thanks: 25
UpVotes: 18
Registered: 13y 26d



Last Seen: 1y 204d
The User is Offline
RE: Some hints please
Google/translate0Thank You!0Good Post!0Bad Post! link
Now I don't ask for hints. I want to say that there might be something wrong with the challenge, challenge.php and solution.php are missing. Only phpinfo.php is present.

Thank you!
Global Rank: 2
Totalscore: 747640
Posts: 441
Thanks: 501
UpVotes: 478
Registered: 17y 97d












The User is Offline
RE: Some hints please
Google/translate0Thank You!0Good Post!0Bad Post! link
As I understand it the challenge is not yet ready. But who knows?
Global Rank: 339
Totalscore: 72262
Posts: 25
Thanks: 25
UpVotes: 18
Registered: 13y 26d



Last Seen: 1y 204d
The User is Offline
RE: Some hints please
Google/translate1Thank You!1Good Post!0Bad Post! link
Nevermind. After some more research I managed to solve it. I don't know if I did what I was supposed to do, but even if didn't I just learned a lot more compared to what I knew yesterday.
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d




Last Seen: 64d 21h
The User is Offline
RE: Some hints please
Google/translate0Thank You!0Good Post!0Bad Post! link
Challenge totally changed and was re-released: forum-t549/New_Challenges-p3.html#post5159

Congratulations, however ;)

EDIT: The old version had no known solution. All people solved the re-release which is unrelated but fun too!
EDIT2: Sorry for the confusion and low communication in the forums.
The geeks shall inherit the properties and methods of object earth.
Last edited by gizmore - Jan 18, 2014 - 02:32:02
Global Rank: 8
Totalscore: 529390
Posts: 23
Thanks: 12
UpVotes: 13
Registered: 12y 350d
sisyang`s Avatar







Last Seen: 114d 8h
The User is Offline
RE: Some hints please
Google/translate0Thank You!0Good Post!0Bad Post! link
is this chall good working now??

thank u..
Global Rank: 2
Totalscore: 747640
Posts: 441
Thanks: 501
UpVotes: 478
Registered: 17y 97d












The User is Offline
RE: Some hints please
Google/translate1Thank You!1Good Post!0Bad Post! link
Challenge has been working well for a couple of months now. No more excuses for not solving it... ;)
Global Rank: 357
Totalscore: 69452
Posts: 2
Thanks: 2
UpVotes: 2
Registered: 14y 229d

Last Seen: 2y 263d
The User is Offline
RE: Some hints please
Google/translate1Thank You!1Good Post!0Bad Post! link
Has somebody recently checked that this is still working? I just checked the server signagure, and it does not seem to be vulnerable.
Global Rank: 2
Totalscore: 747640
Posts: 441
Thanks: 501
UpVotes: 478
Registered: 17y 97d












The User is Offline
RE: Some hints please
Google/translate2Thank You!1Good Post!0Bad Post! link
It was indeed broken. It should be fixed now.
Global Rank: 357
Totalscore: 69452
Posts: 2
Thanks: 2
UpVotes: 2
Registered: 14y 229d

Last Seen: 2y 263d
The User is Offline
RE: Some hints please
Google/translate1Thank You!1Good Post!0Bad Post! link
Wow, that was quick Smile

Thanks!
1 2
Redknee, ckclark, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 14991 times.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.