Comments on: HTS Basic Web 9: Directory Transversal http://timjoh.com/hts-basic-web-9-directory-transversal/ Code, games, chess and everything but the kitchen sink Wed, 19 Nov 2008 21:49:06 +0000 http://wordpress.org/?v=2.5.1 By: nooneatall http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-88773 nooneatall Sat, 20 Sep 2008 11:20:33 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-88773 type this in on level 8 challenge to get the level 9 password: <!--#exec cmd="ls ../../9"--> type this in on level 8 challenge to get the level 9 password:

]]> By: Anonymous http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-88772 Anonymous Sat, 20 Sep 2008 11:19:39 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-88772 type this in on level 8 challenge to get the level 9 password: <!--#exec cmd="ls ../../9"--> type this in on level 8 challenge to get the level 9 password:

]]> By: zyriab http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-88763 zyriab Sat, 20 Sep 2008 10:03:10 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-88763 It's really annoying not to be able to use all possible commands, I've tried "ls ~/******/***/*" which should do the same as the allowed answer but I couldn't go any further because I get that this command was not allowed. It’s really annoying not to be able to use all possible commands, I’ve tried “ls ~/******/***/*” which should do the same as the allowed answer but I couldn’t go any further because I get that this command was not allowed.

]]> By: Andy http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-70500 Andy Tue, 20 May 2008 13:27:59 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-70500 Am i missing something here, on the blog i see In the last mission, you entered the following in the name field: Which, with .., goes down one step from What did we enter in the name field? every bit of code seems to be gone from this blog and the comments so it doesn't really make a lot of sense to me Am i missing something here, on the blog i see
In the last mission, you entered the following in the name field:

Which, with .., goes down one step from

What did we enter in the name field? every bit of code seems to be gone from this blog and the comments so it doesn’t really make a lot of sense to me

]]> By: WhoCARESS http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-63164 WhoCARESS Fri, 18 Apr 2008 16:57:36 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-63164 blast... I had an entire different logic when trying to solve mission 9. i thought he had an regex like /<!--\s*#exec cmd="ls (?:..)?"\s*-->/ and I tried all sort of stuff to bypass or fool that match so I can execute 2 SSI commands with one having an ..\.. . Guess this was easier in the end and I just deviated like hell from the answer. THIS LAST DAMNED MISSION TOOK LONGER THEN ALL THE OTHERS SUMED. blast… I had an entire different logic when trying to solve mission 9. i thought he had an regex like // and I tried all sort of stuff to bypass or fool that match so I can execute 2 SSI commands with one having an ..\.. . Guess this was easier in the end and I just deviated like hell from the answer. THIS LAST DAMNED MISSION TOOK LONGER THEN ALL THE OTHERS SUMED.

]]> By: Anonymous http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-55373 Anonymous Sat, 15 Mar 2008 15:04:09 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-55373 why do i hafto put ../../9 to go p a directory???? why do i hafto put ../../9 to go p a directory????

]]> By: blarg http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-52510 blarg Fri, 29 Feb 2008 06:17:53 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-52510 how can you get 8 but not 9. nine is easier than eight i think, and yeah +1 about level 10 how can you get 8 but not 9.
nine is easier than eight i think, and yeah +1 about level 10

]]> By: Anonymous http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-50317 Anonymous Sun, 17 Feb 2008 16:22:10 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-50317 The claim that the script rejected all but two values is what threw me; this is dimply not the case. The claim that the script rejected all but two values is what threw me; this is dimply not the case.

]]> By: Ash http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-30923 Ash Mon, 22 Oct 2007 00:45:17 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-30923 LvL 10 basic being solved by anyone? LvL 10 basic being solved by anyone?

]]> By: Orc4 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-26602 Orc4 Mon, 24 Sep 2007 00:04:19 +0000 http://timjoh.com/hts-basic-web-9-directory-transversal/#comment-26602 Ha...actually this quite easy...if we ever try to search file with nasty way...we already feel that we are in the rigth path...we just need to know that level 8 is corelatted with level 9, thank's to Timjoh..i feel more confidence with my decicion in solving HTS basic 9... 1.In Basic 8 >> Name : <!--#exec cmd="ls /home/xec96/public_html/missions/basic/9"--> 2.http://www.hackthissite.org/missions/basic/9/p91e283zc3.php 3.eureka....Got the password Ha…actually this quite easy…if we ever try to search file with nasty way…we already feel that we are in the rigth path…we just need to know that level 8 is corelatted with level 9, thank’s to Timjoh..i feel more confidence with my decicion in solving HTS basic 9…
1.In Basic 8 >> Name :
2.http://www.hackthissite.org/missions/basic/9/p91e283zc3.php
3.eureka….Got the password

]]>