What is it? @.@

Here is the place where I record some tactics about wargame, systems, and other security issues.

2012-09-06

Hack This Site! - Basic 3

Description:

Some intuition is needed to find the location of the hidden password file. Requirements: Basic HTML knowledge

Level 3

This time Network Security Sam remembered to upload the password file, but there were deeper problems than that.

Solution:
  1. View page source code
  2. Find the hidden field in the HTML form
    <input type="hidden" name="file" value="password.php" />
  3. Access the php file directly by the URL of:
    hxxp://www.hackthissite.org/missions/basic/3/password.php
  4. There's a text on the page.
    c85f21c1
  5. Back to the level page and submit the password.
  6. Congratulations, you have successfully completed basic 3!