[Tutorials] http://www.hackthissite.org

Warning! Spoiler!

Basic Web

Level 1

This level is what we call "The Idiot Test", if you can't complete it, don't give up on learning all you can, but, don't go begging to someone else for the answer, thats one way to get you hated/made fun of. Enter the password and you can continue.

Text Guide:

This one is very simple. The only thing you need to do is right-click and select "View Source." While viewing the source, press Ctrl+F and search for password is. Copy & Paste the password into the password input field and submit.

Picture Guide:

Step 1 - http://img73.imageshack.us/img73/488/step18jn.png

Step 2 - http://img90.imageshack.us/img90/5392/step22zv.png

Step 3 - http://img136.imageshack.us/img136/402/step32ga.png

Level 2

Network Security Sam set up a password protection script. He made it load the real password from an unencrypted text file and compare it to the password the user enters. However, he neglected to upload the password file...

Text Guide:

Press submit....

Picture Guide:

No Pictures Available

Reason: Read the Text Guide.

Level 3

This time Network Security Sam remembered to upload the password file, but there were deeper problems than that.

Text Guide:

This one is a bit tricky, but still simple. Right-click and "View Source," then press Ctrl+F and search for password.php. Note the following:

Code:

<form action="/missions/basic/4/index.php" method="post">
<input type="hidden" name="file" value="password.php">

All you need to do, is in a different browser (open up another Internet Explorer or FireFox) type in http://hackthissite.org/missions/basic/4/password.php, in the search bar, and press go. Now you just need to Copy & Paste the password to the password input field and press submit.

Picture Guide:

Step 1 - http://img98.imageshack.us/img98/6483/step18dh.png

Step 2 - http://img101.imageshack.us/img101/9184/step26qx.png

Step 3 - http://img134.imageshack.us/img134/9257/step33qs.png

Step 4 - http://img137.imageshack.us/img137/373/step41ba.png

Level 4

This time Sam hardcoded the password into the script. However, the password is long and complex, and Sam is often forgetful. So he wrote a script that would email his password to him automatically in case he forgot. Here is the script:

Text Guide:

Now it starts to get hard. Right-click and "View Source." Press Ctrl+F and search for webmaster@hulla-balloo.com. What you need to now is right-click, "Select All," right-click, "Copy," open a new .txt file, "Paste," Ctrl+F, and search for Send password to Sam. At this point you will need to change the webmaster@hulla-balloo.com (to the left of where you are) to your E-Mail address (e.g. SFXModule@aol.com). Save the .text file as password.html (or .htm) and launch it in your Internet browser. Press Send password to Sam (or whatever you named it), Copy & Paste the password into the password input field and press submit.

(Optional) Where it says:

Code:

<input type="submit" value="Send password to Sam">

Change "Send password to Sam" to "Send password to <your name here>."

Picture Guide:

Step 1 - http://img46.imageshack.us/img46/4087/step10nt.png

Step 2 - http://img203.imageshack.us/img203/8462/step24pc.png

Step 3 - http://img147.imageshack.us/img147/4774/step34fa.png

Step 4 - http://img116.imageshack.us/img116/8350/step41qn.png

Step 5 - http://img87.imageshack.us/img87/7803/step51lk.png

Step 6 - http://img149.imageshack.us/img149/3096/step62im.png

Step 7 - http://img140.imageshack.us/img140/6043/step75qj.png

Step 8 - http://img71.imageshack.us/img71/1761/step87fg.png

Step 9 - http://img102.imageshack.us/img102/764/step93ri.png

This is as far as I have gotten because the next step requires you to know something about Java, which I do not.

good, good, will defitnally help the newbies but even though this teaches some small things, most of the stuff in the basic missions won't be used in real life. except javascript which will help in XSS attacks.

I still need to figure out how to do Mission 5... Fucking fuck...

It has something to do with injection JavaScript into the code or something... Read it on their forums, can't remember it...