level 4 | Defend the Web

henryhbh
12 years ago

2

What is the answer to level 4??

looooool [coolet]
12 years ago

3

The username and the password are in a file/something.smthng so u need to search in the source

Unfair Website….!!!!

^UknownSource^ [mattempik]
11 years ago

3

yeah…. coolet is right…..

when the time has come , I shall rise and conquer the world

rsb
11 years ago

2

got it!

\RsB//
<<<<<<<<<<<<<< cYbEr HuNtEr>>>>>>>>>>>>>>

???Roun512 [roun512]
11 years ago

3

we cant give u answers only hints and see the source code :) Good Luck

If you make people think they’re thinking, they’ll love you. but if you really make them think, they’ll hate you.
~ Harlan Ellison

dollazinc
11 years ago

1

bro i check the javaloggin buti guess thats the main site itself

pompom99
11 years ago

5

Can Someone Give Me A Hint On This Level
The Hint Given Is Confusing
I Know It Has To With Something Having To Go Into The URL From The Page Source
But I Dont Know How To Put It In Correctly Gives A 404
I Know I Am A N00b
Thanks In Advance For The Help/Hint

ThenUrOwned
11 years ago

1

have u opened the source page? maybe there is a “hidden” file in it, look closely. maybe u need to do a bit more editing to the URL?

pompom99
11 years ago

0

k thanks

prince07 [Prince07]
11 years ago

3

hey please help me out in level 4 cant get the answer…….????

???Roun512 [roun512]
11 years ago

0

hey ,

you can find hidden page in source code and hint say this too

If you make people think they’re thinking, they’ll love you. but if you really make them think, they’ll hate you.
~ Harlan Ellison

prince07 [Prince07]
11 years ago

0

ya but i dont know how to find out hidden pages …..
but trying my best ………

???Roun512 [roun512]
11 years ago

1

look will give another hint : always press Ctrl + f and type username and their u can find the answer infact i dont know if this is answer/spoiler !

If you make people think they’re thinking, they’ll love you. but if you really make them think, they’ll hate you.
~ Harlan Ellison

slaine
11 years ago

0

Look for hidden page pass reverse ;)

prince07 [Prince07]
11 years ago

0

ya i have done that also but still finding….
kkzz thank u for hint ………:)

???Roun512 [roun512]
11 years ago

0

did u solve it ?

If you make people think they’re thinking, they’ll love you. but if you really make them think, they’ll hate you.
~ Harlan Ellison

qwe809
11 years ago

-1

can figure out how to pass hidden code.
i found file i think its something

          <div id="main_content" style='width: 485px;'>  
             <div class="level_container">  
                   <div class="level_header">  
                      <h1>Main Level 4</h1><br/>  
                      <a href='m3.php' class='white'>&lt;&lt; back</a> |  Status: <span class='red'>Incomplete</span>  | <span class='dark'>next &gt;&gt;</span>                      </div>  
                  <div class="errorMsg statusMsg">Error: Incorrect details</div>  
                  <form id="level_form" action="m4.php" method="POST">  
                        <fieldset>  
                          <label for="user">Username:</label>  
                         <input type="text" name="user" id="user" autocomplete='off'/><br/>  
                            <label for="pass">Password:</label>  
                         <input type="password" name="pass" id="pass" autocomplete='off'/><br/>  
                            <input type="hidden" name="passwordfile" value="extras/ssap.xml" />  
                         <input type="submit" value="Submit" class="form_button"/>

daMage
11 years ago

0

That’s what you found? The password isn’t in the code you pasted here, but you should really pay attention to it… it has a hint about the whereabouts of the credentials…

daMage

yokies
11 years ago

0

This level really give me a headache.. X(

[deleted user]
11 years ago

-1

Let’s notice to:
<input type="hidden" name="passwordfile" value="extras/ssap.xml" />

yokies
11 years ago

0

arrgh ~ still can’t pass level 4..can someone..please..little help here ~

[deleted user]
11 years ago

0

You read above hint and change url, you’ll get it.

draghack
11 years ago

0

i changed the hidden file to visible i got the value but i still dont understand

Tsifey
11 years ago

0

aide plz je comprend pas ou est le fichier “ cachrdquo; .

Tsifey
11 years ago

0

aide moi svp je le trouve pas (je viens de commencer).

Pawda [Memoria]
11 years ago

0

Bonjour Tsifey, si tu veux qu'on t'aide il va d? falloit commencer par rire en anglais.
Hello Tsifeym if you want us to help, you will need to write your request in english first.

SirBofChar
11 years ago | edited 11 years ago

-2

when i put “http://www.hackthis.co.uk/e****s/s***.x**” in the url bar it show 404 !!!!! o.O
why ?
Admin: censored possible spoiler

Pawda [Memoria]
11 years ago

0

because it’s not the good path.

AnonID
11 years ago

0

Help me I have put the username n password but wrong.,.,.??!!! HELP me please

coco24200
11 years ago

0

Memoria -> what is the good path please ? Sorry I’m French ! ;)

coco24200
11 years ago

0

Memoria -> what is the good path please ? Sorry I’m French ! ;)

J [ColdIV]
11 years ago

0

That means it is no the path that you are searching for.

marthyn_zhu
11 years ago | edited 10 years ago

-2

It’s simple :

[removed]

First : Read the hint “Sometimes extra hidden fields are added to the form which contains extra information for the login script”
Second : Focus on ‘hidden’ words….
Third : The word ‘extra’…

There is enlightenment? LOL :D

Pawda [Memoria]
11 years ago | edited 11 years ago

0

@coco24200: http://lmgtfy.com/?q=what+is+a+website+path

Reda.SDS
10 years ago | edited 10 years ago

-2

I realise that the part ( value=“[removed]”) is what matters though i cannot find the right way to extract the login data from it.

Mystery [kapuccino]
10 years ago

1

Spoilers, spoilers everywhere.

@Reda.SDS: Lean about the structure (folders, files…) of a website.

VI????????D [VirusHacked2702]
10 years ago

0

You’re right, kapuccino. This thread has enough spoilers already.
And Reada.SDA, ever heard of a Url? ;)

Knowledge isn’t given, it’s grown.

Salfaman
10 years ago | edited 10 years ago

-1

just search [removed] and open the first result that comes in

Reply has been removed

[IAmDevil]
10 years ago | edited 10 years ago

0

@Salfaman no one asked you to give an answer! :/

- @IAmDevil
Its good to be back! :D

Reply has been removed

Mugi [Mugiwara27]
10 years ago

0

There’s no spoil, just answers ! If you’re stuck on that level, look at other threads !

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

Drakalex007
10 years ago | edited 10 years ago

0

Hi, i found a line which contain [removed]and i guess the answer is in there, but i don’t know how to open this page !

Mugi [Mugiwara27]
10 years ago

0

Don’t try to have the answer without doing anything !
Now, think where do you use most often that : / ?
Look at THERE.

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

rushA [xzy123prog]
10 years ago

0

Try and think where you can input what you found so it gives you what you need.

Never underestimate the determination of a kid who is time rich and money poor![/center] [center]![Image](https://www.hackthis.co.uk/user/xzy123prog/userbar.png)

2 replies have been removed

smq3007
10 years ago

0

Xzy123prog let’s him descover other level to be stimulated

hmystaera
10 years ago

0

let the hack break your soul

michael.vanstaden9208
10 years ago

0

ok i got the “folder/file.extention” , how do i open/download or read it?

michael.vanstaden9208
10 years ago

1

never mind, got it

Evo Prime [littleRed]
10 years ago | edited 10 years ago

0

I just complete this one
I have a very big question
is every single person that think this is easy learn computer science before?
I complete by google it …
I think i am cheating but if i don’t do this i may stuck there forever…

why you guys so smart :(

Im so stupid spending whole time to read the sours code and didn’t check the password field!!

give the people that haven’t complete lv4 : Try to figure out how to open that hidden file !!!
Google is your good friend

dloser
10 years ago

0

It’s mostly a matter of experience you build up over time, @littleRed . Next time you encounter something similar, you might not need to use Google anymore.

B.t.w.: using Google is not (necessarily) cheating. It’s one of the great tools available to a hacker. (Cheating would be googling for ‘hackthis main level 4 solution’.)

rushA [xzy123prog]
10 years ago

0

@littleRed I don’t think everyone here has a computer science background, I for example, come from a different area, so I’m far from experienced when it comes to these challeges.
Using Google is like using a tool, same way you can use a book to look up for something. When you learn something new you’re always going to be searching for the answers somewhere, no one can answer a question without any pevious knowledge about it.
Also using Google and making the effort to search for it yourself is much better than simply asking for the answer as the former will actually teach you new things. So you’re on the right track ;)

Never underestimate the determination of a kid who is time rich and money poor![/center] [center]![Image](https://www.hackthis.co.uk/user/xzy123prog/userbar.png)

ipsofacto75
10 years ago

0

Well,

I think that pathfolder is : search.php (<form action= ‘/search.php’)
But i don’t know how I can find the hidden file and open it.

Can someone help me ?

4 replies have been removed

Soulshadow2000
10 years ago

0

im mind fucked right now! LOL

Mugi [Mugiwara27]
10 years ago | edited 10 years ago

0

lol Are you stupid ?
Search !

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

briankip
5 years ago

0

whats the fucking solution????

Te0tl
5 years ago

0

How well have you looked at all of the information you have about the page? If you look closely, I’m sure you’ll find the solution.

Crazyclay10110
5 years ago

0

I just have to keep trying my best on till I get the answer I will try not to ask anyone for help

Mugi [Mugiwara27]
5 years ago

1

That’s the spirit!

Good luck for the challenges :)

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

gabefire88
5 years ago

1

idk why i formed the website thing by getting the info on the source but when i entered the site it said error accessing resource.

2 replies have been removed

Retro Tv Head [retrotvhead]
4 years ago | reply to #367

1

how do you seach a source of a file?

Reply has been removed

tor2onion
3 years ago

1

There is an issue with level “Intro 4”
How can get username && password.
last 24 hours i search in source code but not find. Please help me for right way to finding answer.

Kaldah
3 years ago

0

Hello,
The level is still working very well, you are probably doing something wrong and you can find everything in the source code to get the password. Good luck, don’t give up!

tor2onion
3 years ago | reply to #81620

1

Thanks a lot