20000 forum users - Awesome Special Event!

Hint: Username is Admin

Not for the login page, it’s for your username

5 Likes

if I understood you correctly under the username label should be Admin ?




This one should be back to us soon - if his word is to be believed

image

8 Likes

lol

5 Likes

Yes that’s correct!

5 Likes

You can enter whatever you want here, it’s just for identification.

5 Likes

tell me if it should be literally hacked or not?

I see that you use JS to prohibit the entry of special characters, etc.
and I can bypass that
I just don’t know if I should bother with it or not
I have no desire to open the burp suite late at night

6 Likes

The application has vulnerabilities, but SQLI injection is not one of them. And yes, you can bypass the client-side validation, but still, it’s being validated on the server-side. So it’s a dead end. I’ll leave you another hint.

Look for a specific file!

4 Likes

Is it you who disabled the .txt extension for some reason ?

Screenshot 2024-01-11 232451

5 Likes

Yes

5 Likes

@Herbert While I still haven’t figured out the secret, I would like to ask that the next time you reply to something, you try to include everything you want to reply to instead of making multiple replies. I remember seeing a post of either Admin or Oxy saying “Gather up your thoughts” but I can’t find it. This makes it easier for everyone to read your replies and doesn’t clutter the forum. Quote different parts of a post that you would like to reply to–instead of:


You can:

If you want to add more detail to your post like how you did here:


You can always edit your post and to make sure that others know it’s an edit, you can:

Or

Funnily enough, this last part is an edit.

7 Likes

Oh my bad buddy. Thank you for letting me know I’ll make sure to follow it.

5 Likes

Welcome to regular!

5 Likes

Thank you :blush:

6 Likes

You’re welcome :slight_smile:

6 Likes

If you want me to by guessing random file names, that is not going to happen.

I don’t see any references to other files besides the two CDN links

5 Likes

Hehehe, you have to dig it up buddy! Let’s say it’s an endpoint…

5 Likes

No bleep. That’s even more vague then “a file”

An endpoint is a remote computing device that communicates back and forth with a network to which it is connected.

4 Likes

I’m on the free plan :\

We are writing to let you know that your subscription is about to expire. If you don't upgrade, you will lose access to all the features on your plan!

Your payment of $0 is due on January 15th, 2024. Payment must be completed on or before the 15th in order to keep your current feature set. Please know you can always downgrade to our free plan, or upgrade your plan for more features.

-

Please note that your account will revert to the free plan, and you will lose access to current features, if your your invoice remains unpaid on January 16th.
5 Likes

@Herbert I think I’ve gone too far - let someone with more time solve it :partying_face:

Screenshot 2024-01-12 093947

111

6 Likes


<3

6 Likes