[Challenge #1] Admin Status - Printable Version

[Challenge #1] Admin Status - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Challenge #1] Admin Status (/showthread.php?tid=5909672)

[Challenge #1] Admin Status - z_Goon - Nov 19, 2018

Challenge #1:
Change your user status to admin and display the "Winner!" message.

Scope:
eddyproject.com/challenge/Challenge1/

Requirements:
Don't publicly disclose the solution.
Reply with a screenshot of the Success screen.

Winners:

Code 
Jin Goddo

RE: [Challenge #1] Admin Status - SIM-2974208 - Nov 19, 2018

this isn't how challenges works lol .

just put config.is_admin = "1"

RE: [Challenge #1] Admin Status - z_Goon - Nov 19, 2018

(Nov 19, 2018 02:32 PM)astate Wrote: this isn't how challenges works lol .

just put config.is_admin = "1"

If you can demonstrate your solution, I'll add you to the thread.

RE: [Challenge #1] Admin Status - SIM-2974208 - Nov 19, 2018

i just changed the third param of the config array var .

RE: [Challenge #1] Admin Status - Jin Goddo - Nov 19, 2018

I don't think you can call this a challenge.

You just use the console to change the javascript on the site and nothing is happening server side. It's as if you just changed the HTML directly using the dev tools in your browser.

[Image: Y0uXqDU.png]

RE: [Challenge #1] Admin Status - z_Goon - Nov 20, 2018

(Nov 19, 2018 05:44 PM)Jin Goddo Wrote: I don't think you can call this a challenge.

You just use the console to change the javascript on the site and nothing is happening server side. It's as if you just changed the HTML directly using the dev tools in your browser.

[x]

You've been added to the thread.

(Nov 19, 2018 11:01 PM)M0HX Wrote: Eeeez

[x]

😎

Great moves, keep it up!

RE: [Challenge #1] Admin Status - Abruptum - Nov 21, 2018

Well it is possible to change over inspect element, you can also use javascript to change the code and you can set the config variable and execute your code directly. Due the fact that the connection is not encrypted you can also use a proxy to set your script to is_admin=1

[Image: JQZllZ1.png]

Not a challenge at all