[hopeforme]

Mate, you're supposed to hack the website and put your name in the code so everyone can see it when they visit that URL. Not inspect element and screenshot...

I'm not sure if you can do that safely without messing with their official page which they're using to host the site, which should be secure, so I'll be leaving my answer as the best answer. If the leaders tell me I'm wrong, then I'll try again, since it felt a little too easy for me as well

---

Then again, this is a recruitment exercise, it shouldn't be TOO hard? So this is the reasonable difficulty I guess, I dunno. Don't want to be jailed for hacking.

[Elitas]

I'm not sure if you can do that safely without messing with their official page which they're using to host the site, which should be secure, so I'll be leaving my answer as the best answer. If the leaders tell me I'm wrong, then I'll try again, since it felt a little too easy for me as well

---

Then again, this is a recruitment exercise, it shouldn't be TOO hard? So this is the reasonable difficulty I guess, I dunno. Don't want to be jailed for hacking.

Dude, they own the website. They have already proven ownership of it by hosting the challenge in the /challenge/ directory? Inspecting element is not what they were looking for and you can obviously hack the page without affecting the rest of the website.

[Armada]

Dude, they own the website. They have already proven ownership of it by hosting the challenge in the /challenge/ directory? Inspecting element is not what they were looking for and you can obviously hack the page without affecting the rest of the website.

Well.......

That is a funny argument. So a Legends member owns a Online shop selling Irish clothing and band instruments? Interesting. 🤣

So far we have had 2 applications, seems few people have managed to decode the URL (not exactly hard). But I don't see anyone's names on the page as of yet.... 🤫

A screen shot is nice. But I am pretty damn sure m0bile wants to see the actual page edited. Anyone can photoshop or inspect element to make a screen shot.

In the event these 2 applicants tried to fake their way in to the group they can consider themselves permanently denied membership in the future.

[hopeforme]

Well.......

That is a funny argument. So a Legends member owns a Online shop selling Irish clothing and band instruments? Interesting. 🤣

So far we have had 2 applications, seems few people have managed to decode the URL (not exactly hard). But I don't see anyone's names on the page as of yet.... 🤫

A screen shot is nice. But I am pretty damn sure m0bile wants to see the actual page edited. Anyone can photoshop or inspect element to make a screen shot.

In the event these 2 applicants tried to fake their way in to the group they can consider themselves permanently denied membership in the future.

I most certainly did not try to fake my way into the group, I literally thought that was the solution! Lol! I was just following the instructions on the page, to put my name there. Guess I'm wrong! Honest mistake!

So m0bile wants people to hack into his online shop? Really?

I'm not quite sure how to do that, then. It will involve uploading stuff onto his site with his credentials, I think, at the very least. Not a fan.

I'm going to wait until other people manage to do it, and prove that it's possible, first.

Maybe give me some effort marks :p

[Im High]

I most certainly did not try to fake my way into the group, I literally thought that was the solution! Lol! I was just following the instructions on the page, to put my name there. Guess I'm wrong! Honest mistake!

So m0bile wants people to hack into his online shop? Really?

I'm not quite sure how to do that, then. It will involve uploading stuff onto his site with his credentials, I think, at the very least. Not a fan.

I think you're missing the point here sir. If it's for you, try it. If not, no harm.

[AlphaIndustries]

In the event these 2 applicants tried to fake their way in to the group they can consider themselves permanently denied membership in the future.

Well... Rip, lol.

[ｍＯｂｉＩｅ]

All denied!
In order to fully complete this challenge, you'll need to gain administration access, and in order to add your name to our page you'll have to shell the site to access the challenge directory. But how?

Never said is was gonna be easy. 😏 🤝

[Armada]

All denied!
In order to fully complete this challenge, you'll need to gain administration access, and in order to add your name to our page you'll have to shell the site to access the challenge directory. But how?

Never said is was gonna be easy. 😏 🤝

Pretty much figured that was going to be the outcome when I looked at the applications. Oh well, Ce la vie.

Hopefully we can find at least a few good pen testers kicking around here.

[hopeforme]

All denied!
In order to fully complete this challenge, you'll need to gain administration access, and in order to add your name to our page you'll have to shell the site to access the challenge directory. But how?

Never said is was gonna be easy. 😏 🤝

You're giving us explicit permission to hack your store with administrator access?!
🤮

I'll go try it when I'm free, then. It's possible.

[Armada]

You're giving us explicit permission to hack your store with administrator access?!
🤮

I'll go try it when I'm free, then. It's possible.

I am not sure if you are simply incompetent or trolling.

How else are we going to know someone is capable of doing what they claim to unless they can demonstrate it to us?

Its as simple as m0bile already explained it. It is not exactly a instructional booklet designed for creating a rocket. Its a simple pen test challenge.

Add your name to that specific pages HTML, ON THE SERVER.

In order to fully complete this challenge, you'll need to gain administration access, and in order to add your name to our page you'll have to shell the site to access the challenge directory.

How much more clear can he honestly be? ❓

[hopeforme]

Perhaps I am incompetent then 😶😭

I didn't test out the website, but it is only after you guys pointed it out did I realise that the website is fake... not a real shop but actually made for legends to hack into 🤐

I have no clue how to gain admin access to the site even after trying a bunch of stuff for a couple of hours. I'm giving up. I will stay tuned though, hopefully you guys will release the solution, so that plebs like us can learn a thing or two!

[RumbleFrog]

Dude, they own the website. They have already proven ownership of it by hosting the challenge in the /challenge/ directory? Inspecting element is not what they were looking for and you can obviously hack the page without affecting the rest of the website.

Pretty sure this website is shelled, LOL.

[ｍＯｂｉＩｅ]

Pretty sure this website is shelled, LOL.

Yup. To complete this challenge, read this.
https://hackforums.net/showthread.php?tid=5644531

Seems like a lot, but it's not, as you can see. But if you don't know this method then you are not a true pentester. That's why I'm using it.. 👍

[Elitas]

I've managed to steal some of the log files from the server. I'm going through them atm to see if they include any information. Can I be told if I'm wasting my time lol?

[RumbleFrog]

I've managed to steal some of the log files from the server. I'm going through them atm to see if they include any information. Can I be told if I'm wasting my time lol?

Erm, maybe.