Solution: HackThisSite - Basic Missions - Basic 3

HTML.. A base of any website.. Our next challenge is based on basic understanding of HTML.. Source code can reveal many important things which sometimes web developers neglect knowingly or unknowingly..

Site: HackThisSite (https://www.hackthissite.org)
Solution: Basic Missions > Basic Level 3

Challenge Description: This time Network Security Sam remembered to upload the password file, but there were deeper problems than that.

So our beloved Sam fixed previous problem this time. But little did he know that users can actually call the files directly and see the output if the validation is not proper. The problem here is that Sam actually uploaded the file, but his coding in the file is to output the password so that password compare script can compare the password in the file with the password entered by user..

As we can see in the source code, there is a file "password.php", this is the file which contains the unencrypted password. Password script will call this file for the password value and compare the result with the value entered by the user.. Well, user can also call the file directly to see what it does.. So let's try that..

Well, the password file just gave it away easily.. Password is: 47442112

Read More

Solution: HackThisSite - Basic Missions - Basic 2

Basic challenges are pretty easy ones.. All they need is some basic fundamental understanding of how things work and a little bit common sense.. Like our next challenge, it is a basic common sense which plays a major role..

Site: HackThisSite (https://www.hackthissite.org)
Challenge: Basic Missions > Basic 2

Challenge Description: Network Security Sam set up a password protection script. He made it load the real password from an un-encrypted text file and compare it to the password the user enters. However, he neglected to upload the password file...

Now Sam here forgot to upload the password file.. The very essence of the password script to actually work.. If the file is not uploaded, obviously script will not find any file and let anything pass through it as it does not have anything to compare with.. So out password is literally blank.. Just click on submit without any password and your challenge is clear :)..

Read More

Solution: HackThisSite - Basic Missions - Basic 1

Today we are selecting another awesome challenge site.. This site has been around since long and almost every other hacker/script kiddie have heard about this website. This website also provides the challenges + tutorials and news from around the globe related to computer securities and similar..

So let's start as usual with basics..

Site: HackThisSite (https://www.hackthissite.org/)
Challenge: Basic Missions > Basic 1 - Level 1 (The Idiot Test)

If you remember previous source code challenge from CanYouHackIt, this will be easy for you too.. This is similar passsword in the source challenge.. Ctrl + U or Right Click > View Source and you can track down the password easily..

And there it is.. Our password is - 3eab46ab

Read More