Some intuition is needed to find the location of the hidden password file. Requirements: Basic HTML knowledge
This time Network Security Sam remembered to upload the password file, but there were deeper problems than that.
- View page source code
- Find the hidden field in the HTML form
<input type="hidden" name="file" value="password.php" />
- Access the php file directly by the URL of:
- There's a text on the page.
- Back to the level page and submit the password.
- Congratulations, you have successfully completed basic 3!