Hack This Site – Basic 8 Tutorial

www.hackthissite.org Basic # 8 — exploitnation.org Common mistakes are swing a ! at the end, mistaking “I” with “l”, and not arrangement correctly.

25 Comments

123LiAnX3February 21st, 2009 at 7:29 pm

When I tried this, I got:
If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level.

cwade12cFebruary 22nd, 2009 at 12:28 am

Read the description of this video.

cwade12cFebruary 22nd, 2009 at 12:28 am

Read the description of this video.

BLCiPhoneHelpFebruary 24th, 2009 at 10:37 pm

“this page has packed its bags and moved to Toledo” after i paste the .php into browser bar.

aresproductions000March 2nd, 2009 at 7:27 pm

lol, he should just save it to his computer

bigfatgaypandaMarch 4th, 2009 at 6:39 pm

Hey Guys i keep getting the error message named earlier in this debat. i have directly copied what he says in the vid but still i get the irritating message.
Please help :)

rockkinironmaidenMarch 16th, 2009 at 5:15 am

I keep getting that also!!!

rockkinironmaidenMarch 16th, 2009 at 5:16 am

Why does this always come up?? I do exactly as the video says!

If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level.

mortal111190March 17th, 2009 at 8:50 pm

you probably did not put a space between the s and .

that’s the problem i had

ipconfigearth102March 18th, 2009 at 11:09 am

i could not contact u on exploit nation so i hav posted my question here

i did’nt get the knowledge of client servers and etc
but i wana know
can u post the liknk in the description plz…

cya

DealthRuneMarch 21st, 2009 at 10:13 pm

dude you make everything seem so easy

tammerdrummer14April 3rd, 2009 at 5:43 pm

hey could you tell me away around this proble i typed the code in and this meesage appears” If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level. ????

morningstarlucienApril 5th, 2009 at 7:54 pm

erm if someone else puts the message “if you are trrying to use server side……..” i will scream…. cwade12c has repeatedly said VIEW DESCRIPTION FOR MORE HELP.
I however have found that it just says

Hi, <–#exec cmd=”ls ../” –>!
tried removing spaces here and there to no avail… hmm can someone spot my mistake?

morningstarlucienApril 5th, 2009 at 8:02 pm

I wish people would realise that this page has changed and that they may have to think instead of just asking for it to be handed to them…

cwade12cApril 16th, 2009 at 12:21 am

Thanks but no thanks, no spoilers. This video trys to teach, not spoil.

JackieisinsaneApril 28th, 2009 at 11:45 pm

how do you figure out the name of the directory?

LamiapoiMay 6th, 2009 at 11:29 pm

code will not work any more, need to update it.

DaimyoD0May 7th, 2009 at 12:33 am

Lmao. I thought it was stupid to have a capitalized “Is” in your command.
ls, like ;ls from the last one.
*facepalm*

TwofunnyjewsMay 8th, 2009 at 12:15 am

oh my god. you sound so much like me! wtf.

1234animaMay 9th, 2009 at 1:57 am

Very good i do appreciate your tutorial, i passed level 8

XqersMay 14th, 2009 at 11:58 am

It won’t work when I type in what you said it says:
If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level.

DjohnGodMay 24th, 2009 at 10:49 pm

what is ../ for ? How do i know what i have to type to select correct directory ?

AlmightyMatthewJune 13th, 2009 at 12:59 pm

Lol it says :
————————
If you are trying to use server side includes to solve the challenge, you are on the right track: but I have limited the commands allowed to ones relevant towards finding the password file for security reasons(because there will always be that one person who decides to execute some rather nasty commands). So please manipulate your code so that it is a little more pertaining to the level.
—————————–

kylescousinsJune 14th, 2009 at 12:24 am

where did u learn this language stuff?

J003S3PHJune 20th, 2009 at 3:29 pm

so its an L and not i ?

Leave a comment

Your comment