What is it? @.@

Here is the place where I record some tactics about wargame, systems, and other security issues.

2012-09-06

Hack This Site! - Basic 2

Description:

A slightly more difficult challenge, involving an incomplete password script. Requirements: Common sense.

Level 2

Network Security Sam set up a password protection script. He made it load the real password from an unencrypted text file and compare it to the password the user enters. However, he neglected to upload the password file...

Solution:
  1. Since Sam forgot to upload the password file, there is no need to make comparison between the real password and the password user entered.
  2. Just left the password field empty and submit.
  3. Congratulations, you completed basic 2 challenge!