(Nov 15, 2016 06:24 PM)exploit.c Wrote: I don't want to toot my own horn, but let me zip up my pants. The upload is not a decoy. 🤝
No one is yet to defeat this challenge. I will post a hint tomorrow morning if no one has won yet.
( ͡° ͜ʖ ͡°) Father of Mysteriousness
(Nov 15, 2016 06:26 PM)Cibor Wrote: ( ͡° ͜ʖ ͡°) Father of Mysteriousness
🤝
Darkwin Wrote:I usually never say this but i am looking forward to seeing this member get his account closed.
you expect us to hack ur server???? the website is in php ....
Paid Until [FOR SALE] 2019: $51,247/$100,000
(Nov 15, 2016 06:48 PM)FRIΞDBAO™ Wrote: you expect us to hack ur server???? the website is in php ....
Which, is insecure and can be hacked super easily if you truly know how 🤝
Darkwin Wrote:I usually never say this but i am looking forward to seeing this member get his account closed.
Its cool Bao dont get the CTF life
when you try tamper data on the upload it looks like its reading the file but i dont have enough knowledge to make use of it.. looking forward to the solution.. these challenges are probably the best thing on this forum... its a great learning opportunity
(Nov 15, 2016 08:02 PM)Malicious Intent Wrote: when you try tamper data on the upload it looks like its reading the file but i dont have enough knowledge to make use of it.. looking forward to the solution.. these challenges are probably the best thing on this forum... its a great learning opportunity
Tampering with the upload form won't get you anywhere
Darkwin Wrote:I usually never say this but i am looking forward to seeing this member get his account closed.
Nov 15, 2016 09:30 PM
(This post was last modified: Nov 15, 2016 09:38 PM by Сheshire.)
Hmm I find myself frustrated Yet I feel like this should be easier than Im making it.
(Nov 15, 2016 09:30 PM)Сheshire Wrote: Hmm I find myself frustrated Yet I feel like this should be easier than Im making it.
They say the closer you look the less you see 🤝
Darkwin Wrote:I usually never say this but i am looking forward to seeing this member get his account closed.
I'm not going to try this, but check for cookie based authentication
Lol Yeah.
I see an outdated Apache Server,
A probably exploitable Fortinet Fortigate 100d OS
and a OpenSSH 6.7p1 Debian Service
Not any applicable exploits that I see but Ill keep looking lol
![[Image: EhLATas.png]](https://i.imgur.com/EhLATas.png)
Encouraging... Very...
Sorry guys but I think I've won this one
(Nov 15, 2016 11:35 PM)Infinite power Wrote: Sorry guys but I think I've won this one ![[Image: ZHFV58T.png]](https://i.imgur.com/ZHFV58T.png)
o shit
Nov 15, 2016 11:45 PM
(This post was last modified: Nov 15, 2016 11:52 PM by Malicious Intent.)
Don't think this is the solution
|