Active Members dancezar Posted May 11, 2013 Active Members Report Share Posted May 11, 2013 (edited) Target:http://danyweb09.byethost7.com/Or:http://danyweb09.cuccfree.com(acelasi challenge acelasi useri)Dificultate:mediu zic euProof:Reguli:-Postati o poza cenzurata cu dovada-nu dati hinturiCe trebuie sa faceti:-Intrati pe site si va inregistrati un cont-Va logati-intrati pe xss.php si enjoyAtentie! Daca contul tau nu are drepturi de administrator nu veti putea accesa Chall-u,trebuie sa faceti ceva bypass sa aveti drepturi de administrator .Solvers:-Jimmy-Sweby-StoNe--Renegade-Andys-hackerikaFelicitari tuturor solverilor.RezolvareaSe imparte in doua parti1.Sa te loghezi ca administrator:in pagina register.php daca va uitati in pagina sursa o sa vedeti in input ascuns cu numele adm care are valoarea 0 o modificati cu valoarea 1 si aveti drepturi de administrator2.Xss-u.Daca va-ti uitat in pagina sursa la troollface in atributul id sunt introduse datele din get,acest script are si un mic filtru de care trebuie sa treceti acesta ellimina tagurile <> script iar quotes sunt inlocuite cu \" deoarece vectorul se injecteaza in tagul <img> putem sa ne folosim te atributul javascript onload,iar un vector potrivit pentru acesta este : vector:" onload=alert(1) onerror=" Edited May 26, 2013 by danyweb09 Quote Link to comment Share on other sites More sharing options...
Jimmy Posted May 11, 2013 Report Share Posted May 11, 2013 Quote Link to comment Share on other sites More sharing options...
Sweby Posted May 11, 2013 Report Share Posted May 11, 2013 Quote Link to comment Share on other sites More sharing options...
StoNe- Posted May 11, 2013 Report Share Posted May 11, 2013 (edited) Nice challenge! Edited May 11, 2013 by StoNe- Quote Link to comment Share on other sites More sharing options...
Renegade Posted May 22, 2013 Report Share Posted May 22, 2013 Quote Link to comment Share on other sites More sharing options...
Andys Posted May 23, 2013 Report Share Posted May 23, 2013 Quote Link to comment Share on other sites More sharing options...
shark0der Posted May 23, 2013 Report Share Posted May 23, 2013 (edited) un challenge usor ca apa minerala )umadbro? )) Edited May 23, 2013 by shark0der Quote Link to comment Share on other sites More sharing options...
hackerika Posted May 25, 2013 Report Share Posted May 25, 2013 Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted May 26, 2013 Author Active Members Report Share Posted May 26, 2013 Bun si unde este xss-u? Quote Link to comment Share on other sites More sharing options...
hackerika Posted May 26, 2013 Report Share Posted May 26, 2013 Bun si unde este xss-u? Quote Link to comment Share on other sites More sharing options...
th3me Posted May 26, 2013 Report Share Posted May 26, 2013 dany, poti sa zici macar un mic secret, daca modifici in cokies, nu merge, am observat ca poti modifica admin si acesta e rezolvarea cred eu. Quote Link to comment Share on other sites More sharing options...
hackerika Posted May 27, 2013 Report Share Posted May 27, 2013 (edited) dany, poti sa zici macar un mic secret, daca modifici in cokies, nu merge, am observat ca poti modifica admin si acesta e rezolvarea cred eu.La register daca dai view source o sa vezi ceva interesant, cu cookie chinuie-te mult.@dany Nu ma refeream ca daca se chinuie va si functiona, ba din contra, se chinuie degeaba. Edited May 29, 2013 by hackerika Quote Link to comment Share on other sites More sharing options...
StoNe- Posted May 27, 2013 Report Share Posted May 27, 2013 Un vector si mai simplu ar fi:" onload=alert(1) > Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted May 28, 2013 Author Active Members Report Share Posted May 28, 2013 La register daca dai view source o sa vezi ceva interesant, cu cookie chinuie-te mult.La cookies nici nu merge.Valorile user si pass la logare sunt comparate cu cele din baza de date daca ele coincid sunt pastrate si in cookie si se fac dubluri si in session.Esti logat daca datele din sessions coincid cu cele din cookie daca nu coincid atunci nu esti logat. Quote Link to comment Share on other sites More sharing options...
th3me Posted May 29, 2013 Report Share Posted May 29, 2013 Da intradevar am observat si eu acesta, plus ca am mi-am dat si eu seama cu register doar ca nu eram asa de sigur Quote Link to comment Share on other sites More sharing options...
