Stuck..
I am a little stuck on this one, I am trying to not use the firefox tamper tools and would like to do it from the developer tools in chrome. I want to understand this so I may have to private message someone before I go into too much detail. I found the .swf file and I see the traffic when I refresh the page. I dont understand how to change any of this, I wrote some html but not sure how to apply it.
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1
still nothing….. i’ve tried to manipulate the initial words that would reflect what the swf file is displaying… nothing
able to save the file off server and manipulate it, but not able to have it reflected on the site…. there’s something that’s missing and i cannot put my finger on it that will connect the dots
Read the level hint again, and think twice.
How would have you done it if there wasn’t a .swf file but just a simple form to send data to server?
Is this what were supposed to do? I know most of the levels don’t require any installation, but I can’t seem to figure out how else to intercept the .swf file that flash is sending to the server… https://initblog.com/2017/pentesting-flash/
You really don’t need anything else than a browser. You can try to run the flash file locally in order to see how it works, if you need, or you can try guessing how the .swf file send info to the server in order to complete the challenge.
Np, we’re saying the same thing but in our own manner, that’s why it looks different :p
Keep reading threads and trying things by your own. But if you’re really that lost, feel free to PM explaining what you’ve tried so far
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1