Notorious - Web Application Hacking Recruitment #1


Turn your face to the sun and the shadows fall behind you.



Subforum Icon:



Group Userbar:





Description:

We are accepting a select number of members, and the general requirements for this are as follows:

• You have been a registered member of Hack Forums for at least one month.
  
• You must not have any open and valid scam reports against you. If you get one whilst being in the group you will be removed.
  
• You are active and can post on a regular basis. If you are not active in one way or another don't bother applying.
  
• No trolling or flaming other members.
  
• Don't break Group rules. Doing so will result in a swift and permanent removal from the group.
  
• You must partake in group discussions and projects. There is no set minimum but inactive members will be purged.
  

User background and forum activity will be investigated before you are invited to the group. Notorious is looking for ambitious individuals focused on honing their skills and willing to dedicate time to group projects; if your forum activity doesn't reflect this you will not be invited.

---

Challenge Instructions:

I have put together a vulnerable web application. You must:

Code

- Add your name to the solvers list on the main index
- Remove any footprints you leave (shells, file changes(?), etc.)
- Upon completion, send me a message with any final queries (i.e whatever query you used to get what you were after) and credentials used.

Starting Point:

Code

0x626d393062334a706233567a4c6d467364475679646d6c7a6447457562334a6e4a544a6d626d393062334a706233567a4a544a6d

---

Please do not discuss the challenge, give hints, or share the challenge solution.

The thread will be locked in 7 days, and the recruitment will be closed. Accepted members will be PM'd.

(Jul 20, 2017 05:25 AM)NotVirus.exe Wrote:  Good luck to the people who try to solve the challenge. Seems like a promising group sector and a somewhat good idea for group recruitment.
I'll try and give it a go, considering I haven't done anyhing like this in ages, reminds me of times when major hostings were vulnerable to c99 and other shells.

(Jul 20, 2017 05:52 AM)LD_PRELOAD Wrote:  please define the id to be primary key to prevent idiots like me from idioting
edit: im on discord if u wanna talk

(Jul 20, 2017 08:16 PM)mutybyte Wrote:  What about those who are new in web hacking and curious to learn? Can newbie also be approvable?

(Jul 20, 2017 10:12 PM)Faith Connors Wrote:  took me long enough to even get past the first step lul, let alone finding a working payload that didn't completely crash and burn.

(Jul 20, 2017 10:19 PM)Disparity Wrote:  😝 It's a bit of a difficult one. One of my recent threads might help those who need it.

So far, aside from Notorious members, we have one solver.

(Jul 20, 2017 10:19 PM)Disparity Wrote:  😝 It's a bit of a difficult one. One of my recent threads might help those who need it.

So far, aside from Notorious members, we have one solver.

(Jul 20, 2017 11:16 PM)LD_PRELOAD Wrote:  cant reply to pms, im on the discord notorious server