Just like the other levels, start with the source code, examine it closely, looking for something extras! Then, its all about knowing what to do with it. Make sure you check the old Forum Post the answers are there.
I’d rather see folks doubt what’s true than accept what isn’t.
OK big hint there is some thing you have to copy and paste it to the rest of the url and then boom there you go.
Don’t that me thank them
“When you die I will laminate you’re skeleton and pose you in the lobby.”
Veni Vidi Vici
When solving problems, dig at the roots instead of just hacking at the leaves.
ESPioGre, this a English site, please use a translator like Google. http://translate.google.com/ Your question is" How can I display hidden fields?“ Start with the source code, examine it closely, looking for something extras! Then to the URL with it.
I’d rather see folks doubt what’s true than accept what isn’t.
11 years ago
0
Have a look at the source code again. Use firebug and inspect the password element
using what you see there in front of you. It’s not hard just look at the code. :)
dorinnnette, welcome to hackthis. Learning to read the source code and understanding what some of it means. For Main level 4 they want you to understand how changing directory works and reading some Javascript. Look at the url address for this very page (look above) https://www.hackthis.co.uk/forum/level-discussion/main-level-4/1379-i-am-lost-and-dont-know-what-to-do#latest This shows the website of hackthis.co.uk as the web address and /forum; as a change in the directory to the forum branch of the hackthis.co.uk website tree, /level-discussion; branches to the level-discussion section of the website subdirectory, /main-level-4; branch to main-level 4 section. By changing whats in the url https://www.hackthis.co.uk/forum/level-discussion/ for example will put you on that branch in the sub directory. So try different changes to the; http://www.hackthis.co.uk/levels/m4.php level involving something extras you see in the source code. http://www.hackthis.co.uk/levels/
I’d rather see folks doubt what’s true than accept what isn’t.
A few basic steps I always do is:
Seek for information that a webmaster does not want to be indexed by search engines, meaning check the robots.txt in the root of the website (http://www.website.tld/robots.txt). This might give you valuable information.
Check the source code: Search for the part that executes the mechanism that you are trying to bypass. In this case search for the form that logs you in. Sometimes there might be javascript functions that are executed when pressing the submit button.
If you see a function name within the form tags, you can read the javascript source code of that function and try to understand what this function does. If you understand what the function does, you might be able to bypass it.
Sometimes these javascript functions might be in the same source as the form you’re trying to break, but sometimes they might just be included. If you can’t find the javascript function name, search for and read all these included javascripts until you find the right function name.
I hope this helps, if you have any questions just drop me note.
Cheers,
0xDC
/dev/null
in general it always helps to read previous forum posts.
I think if you go through forum especially in main levels, there are many hints in Forum.
Please do not expect another person to do the work for you its not what this is for.
Its about you. you are supposed to learn something. so take your time and read through forums, do a research on the internet, learn a programming language etc.
@Keishan.French: Except for Main Level 7, every level in Main Level can be done by viewing and understanding source code.
Try reading the forums, there are plenty of threads for you to read. Look at the hint as well and look where it tells you to.