The Guesbook Vai alla sfida "The Guestbook"
Punteggio totale: 956654
Posts : 127
Grazie: 167
Voti+: 115
Registrato: 18a 202gg
L'utente è Offline
The Guesbook
15 Nov 2010 - 17:25:06 (15a 353gg)
15 Nov 2010 - 17:25:06 (15a 353gg)
Hi all,
I know the trick how to exploit it, I also recieve some error. I just don't get the correct string to exploit... any hint maybe what to google for?
I know the trick how to exploit it, I also recieve some error. I just don't get the correct string to exploit... any hint maybe what to google for?
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg
Ultima visita: 65gg 19ore
L'utente è Offline
RE: The Guesbook
15 Nov 2010 - 18:25:40 (15a 353gg)
15 Nov 2010 - 18:25:40 (15a 353gg)
I think there is nothing "specific" you could google for this challenge.
As always, "Code you see is code in use". No simulations.
A good idea is maybe to create the database/tables yourself and do the injections on your localhost with mysql console.
Good luck!
As always, "Code you see is code in use". No simulations.
A good idea is maybe to create the database/tables yourself and do the injections on your localhost with mysql console.
Good luck!
The geeks shall inherit the properties and methods of object earth.
Posizione globale: 5305
Punteggio totale: 3175
Posts : 7
Grazie: 10
Voti+: 11
Registrato: 14a 267gg
Ultima visita: 7a 346gg
L'utente è Offline
RE: The Guesbook
02 Mar 2012 - 14:22:16 (14a 246gg)
02 Mar 2012 - 14:22:16 (14a 246gg)
It would be more helpful if you post the error messages here, instead the way of solving.
Regards
gizmore
Regards
gizmore
Ultima modifica: gizmore - 02 Mar 2012 - 14:30:07
Posizione globale: 5305
Punteggio totale: 3175
Posts : 7
Grazie: 10
Voti+: 11
Registrato: 14a 267gg
Ultima visita: 7a 346gg
L'utente è Offline
RE: The Guesbook
03 Mar 2012 - 07:22:00 (14a 245gg)
03 Mar 2012 - 07:22:00 (14a 245gg)
I'm sorry about that. Actually figured what the garbled text was which I was getting as a reply. It was a gzipped version of the page. That is why I couldn't make head or tails of the characters. But now there is a new problem. My request gets timed out every time I send it to index.php . Even if I try without logging in and w/o adding the injection, it doesn't let me add entries to the guestbook. The code is what I posted yesterday. I can repost a short version of it here if you wouldn't mind (w/o the injection ofcourse).
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg
Ultima visita: 65gg 19ore
L'utente è Offline
RE: The Guesbook
03 Mar 2012 - 17:37:00 (14a 244gg)
03 Mar 2012 - 17:37:00 (14a 244gg)
Hmm, no idea what it could be.
You may post some code that does not spoil the vulnerability
You may post some code that does not spoil the vulnerability
The geeks shall inherit the properties and methods of object earth.
Posizione globale: 5305
Punteggio totale: 3175
Posts : 7
Grazie: 10
Voti+: 11
Registrato: 14a 267gg
Ultima visita: 7a 346gg
L'utente è Offline
RE: The Guesbook
05 Mar 2012 - 15:22:39 (14a 243gg)
05 Mar 2012 - 15:22:39 (14a 243gg)
PHP Warning(2): require_once(/home/gizmore/www/geshi/src/geshi.php): Failed to open stream: No such file or directory in core/inc/util/GWF_BBCodeItem.php line 219
Backtrace starts in www/index.php line 6. GWF3->__construct()............... gwf3.class.php line 107. GWF3->init()...................... gwf3.class.php line 173. GWF3->onLoadModule().............. gwf3.class.php line 435. Module_Forum->execute()........... core/module/Forum/Module_Forum.php line 223. GWF_Module->execute()............. core/inc/util/GWF_Module.php line 344. Forum_ShowThread->execute()....... core/module/Forum/method/ShowThread.php line 66. Forum_ShowThread->templateThread() core/module/Forum/method/ShowThread.php line 131. GWF_Module->templatePHP()......... core/inc/util/GWF_Module.php line 153. GWF_Module->coreTemplatePHP()..... core/inc/util/GWF_Module.php line 159. GWF_Template::templatePHPRaw().... core/inc/util/GWF_Template.php line 25. GWF_Template::templatePHP()....... core/inc/util/GWF_Template.php line 113. include()......................... www/tpl/wc4/module/Forum/show_thread.php line 71. include()......................... www/tpl/wc4/module/Forum/show_post.php line 137. GWF_ForumPost->displayMessage()... core/module/Forum/GWF_ForumPost.php line 165. GWF_Message::display()............ core/inc/util/GWF_Message.php line 229. GWF_BBCode::decode().............. core/inc/util/GWF_BBCode.php line 127. GWF_BBCodeItem->render().......... core/inc/util/GWF_BBCodeItem.php line 78. GWF_BBCodeItem->renderChilds().... core/inc/util/GWF_BBCodeItem.php line 117. GWF_BBCodeItem->render().......... core/inc/util/GWF_BBCodeItem.php line 74. GWF_BBCodeItem->renderTag()....... core/inc/util/GWF_BBCodeItem.php line 101. GWF_BBCodeItem->render_code()..... core/inc/util/GWF_BBCodeItem.php line 410. GWF_BBCodeItem->renderCode()...... core/inc/util/GWF_BBCodeItem.php line 219. require_once().................... core/inc/util/GWF_BBCodeItem.php line 219. GWF_Debug::error_handler()........ core/inc/util/GWF_Debug.php line 180.
PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6
Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.