What is it? @.@

Here is the place where I record some tactics about wargame, systems, and other security issues.

2012-11-02

TRY2HACK - Level 3

Description:

LEVEL 3

If you don't get a javascript prompt to enter the password, it means your browser doesn't support JavaScript.

Anyway, if you're good enough, you will get past this level just like any other!


Solution:
  1. Disable the JavaScript prompt. View page source code and find the part below.
    <script type="text/javascript" src="JavaScript"></script>
    <script type="text/javascript">
      <!--
      pwd = prompt("Please enter the password for level 3:","");
      if (pwd==PASSWORD){
        alert("Allright!\nEntering Level 4 ...");
        location.href = CORRECTSITE;
      }
      else {
        alert("WRONG!\nBack to disneyland !!!");
        location.href = WRONGSITE;
      }
      PASSWORD="AbCdE";
      CORRECTSITE="level4-sfvfxc.xhtml";
      WRONGSITE="http://www.disney.com";
      //-->
    </script>

  2. Enable the JavaScript and try it again! This time you knew the password!
  3. But it still direct you to the Disneyland, right?
  4. Well, the true password actually is stored in the "JavaScript" file in the following link.
    hxxp://try2hack.nl/levels/JavaScript
  5. Check it and enter the password again! It's done!

No comments:

Post a Comment