Is it actually possible? Vai alla sfida "What is your Name?"
Posizione globale: 14443
Punteggio totale: 189
Posts : 9
Grazie: 9
Voti+: 10
Registrato: 1a 50gg
Ultima visita: 1a 25gg
L'utente è Offline
Is it actually possible?
21 Set 2025 - 21:53:51 (1a 39gg)
21 Set 2025 - 21:53:51 (1a 39gg)
I managed to find the right number, tested it locally on exact version and everything passed. However, in the code the session id is always overwritten even after passing the condition. I searched and tried but didn't seem to find any workaround. Can I get a slight hint or a push into the right direction so that I am not trying desperate things?
Posizione globale: 5
Punteggio totale: 607613
Posts : 324
Grazie: 335
Voti+: 341
Registrato: 17a 14gg
Ultima visita: 114gg 15ore
L'utente è Offline
Yes!
22 Set 2025 - 19:03:40 (1a 38gg)
22 Set 2025 - 19:03:40 (1a 38gg)
.
Posizione globale: 14443
Punteggio totale: 189
Posts : 9
Grazie: 9
Voti+: 10
Registrato: 1a 50gg
Ultima visita: 1a 25gg
L'utente è Offline
RE: Is it actually possible?
23 Set 2025 - 13:56:49 (1a 38gg)
23 Set 2025 - 13:56:49 (1a 38gg)
If you don't want to give a hint, can you at least point me to some documentation or learning resources that will help? This challenge has been buggin me for several days and I honestly don't know what to do next.
Posizione globale: 8858
Punteggio totale: 952
Posts : 4
Grazie: 6
Voti+: 10
Registrato: 1a 1gg
Ultima visita: 313gg 17ore
L'utente è Offline
RE: Is it actually possible?
01 Nov 2025 - 22:22:05 (363gg 18ore)
01 Nov 2025 - 22:22:05 (363gg 18ore)
Citazione da XORci5t23 Set 2025 - 13:56:49
If you don't want to give a hint, can you at least point me to some documentation or learning resources that will help? This challenge has been buggin me for several days and I honestly don't know what to do next.
same on my side. tried to emulate with same PHP version for 32 and 64bit. it works localy. does not work for some reason here. I am confused. Nobody managed to succced this year. so possible its not working. I did consider many different kinds of attack paths as well. stuck and well just gona try to compile php differently (not gona spoil here why) but it should only just simulate the impossibility even localy LOL
Posizione globale: 5
Punteggio totale: 607613
Posts : 324
Grazie: 335
Voti+: 341
Registrato: 17a 14gg
Ultima visita: 114gg 15ore
L'utente è Offline
RE: Is it actually possible?
02 Nov 2025 - 15:09:43 (363gg 1ore)
02 Nov 2025 - 15:09:43 (363gg 1ore)
The challenge still works as expected.
This is really a nice challenge, but it's not easy. Maybe try to solve other PHP ones first, and then concentrate on the question how it could be even possible to solve this one.
This is really a nice challenge, but it's not easy. Maybe try to solve other PHP ones first, and then concentrate on the question how it could be even possible to solve this one.
Posizione globale: 8858
Punteggio totale: 952
Posts : 4
Grazie: 6
Voti+: 10
Registrato: 1a 1gg
Ultima visita: 313gg 17ore
L'utente è Offline
RE: Is it actually possible?
02 Nov 2025 - 23:35:30 (362gg 17ore)
02 Nov 2025 - 23:35:30 (362gg 17ore)
Citazione da tehron02 Nov 2025 - 15:09:43
The challenge still works as expected.
This is really a nice challenge, but it's not easy. Maybe try to solve other PHP ones first, and then concentrate on the question how it could be even possible to solve this one.
Thanks for confirmation. During years of pentesting I had ZERO production PHP apps to test. So I never focused on this untill now.
Redknee, ckclark, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 698 volte.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 698 volte.