basic-9

this is not tough as previous levels. but little bit tricky. it consists of two steps. first you need to find the file that to be searched. then you have to open in a different way. then next step will be automatically start. there you have to find the username and the password(please use firefox. won't appear in chrome). then you have to enter the username an the password in the right place.

as the search.php is only to search inside the file directory, have a look into the file directory. just type file/ after basic9 in the url. u will be taken to a directory listing. there u will find the file need to be opened. if u enter the file directly, it will run the file. but you have to open it to read, not run. so open in a different (just read about null byte poisoning) here. now u will be asked to enter the second level. if you enter the second, level a php file will be saved as html file. so u can read the source(use firefox). now save the username and the password. then sumbit them in the right place to login. u will be added 30 points.

Ans:

• open the location,  http://www.hellboundhackers.org/challenges/basic9/files/
• now enter the file need to be open(login.php) in the search box in the search.php page. but it will run. now u have some knowledge about null byte poisoning.
• enter following without cotes in the search box of the search.php. "login.php"
• the first level is over. a link will appear, that asks u for enter the second level. just click it
• ones.html file will be opened. view the source of the file with firefox. because, chrome won't show the password. in the source, u can find the username and password.
• copy it and enter it at the starting page of this challenge, www.hellboundhackers.org/challenges/basic9
• ur points will be added with 30.

www.hellboundhackers.org