main-level-4

bou7
10 years ago

0

help me please !

VI????????D [VirusHacked2702]
10 years ago

0

Look in the source code. That’s where all of the information is stored.

And you can look at the hint as well:

[quote=Main 4 hint]Sometimes extra hidden fields are added to the form which contains extra information for the login script. Again this is very easy for anyone to gain access to as it is clearly shown in the source code.

Sometimes these fields can contain very important information.[/quote]

Hope that cleared things out for you. :)

Knowledge isn’t given, it’s grown.

balkiss
10 years ago

0

help me please !! how to do main level 4 ?!!

lukeboomerang
10 years ago

0

you need to see the source code of the page search the username and then copy the .txt file then you paste that adress in the url but do not erase until level then paste and done! the username and password in your power!

4 replies have been removed

keystar
10 years ago

0

whats ur meaning of .txt file wich file there is just .xml

Bpatel
10 years ago

0

please help me in level 4

Mugi [Mugiwara27]
10 years ago

0

Are people here retarded ?
Look at what VirusHacked said and read other thread, there are all hint and almost the complete solution to finish level

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

W1llv
10 years ago

0

Hi guys,

I was after the file but tried to replace at the end of the url (“…/main/4” or just after “co.uk”). How could have I known that I had to put it after “levels”?

Thx

Mugi [Mugiwara27]
10 years ago

0

Hey W1llv try after /levels/ :)

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

W1llv
10 years ago

0

Hey Mugiwara27,

I understood that I needed to put it after levels, but how could have I known it had to go there and not after /main/4 for example?

Thanks for your help mate

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

1

@W1llv: There is no guarantee when it comes to real life. Hackers should try in any forseeable directory.

![Image](https://www.hackthis.co.uk/user/userbar.png?user=freewind1012%20//%20Navigator)

BlackBox [Ransetsu]
10 years ago

0

there r web crawler tool that you can use that try and map out a websites directory structure by basically having a dictionary of common or potential dir names to go through, but you don’t need to use one for this level. directory transversal is a lot of guess work.

Mugi [Mugiwara27]
10 years ago

0

Yes like they said, just guessing on that level, and you’ll find the solution, that’s all

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

W1llv
10 years ago

0

Ok thx Guys, that’s what I wanted to know. It was just a matter of trying different options.

Intro 4

0

0

0

0

0

0

0

0

0

0

1

0

0

0