http://natas6.natas.labs.overthewire.org/index.php
Source:
<html>
<head><link rel="stylesheet" type="text/css" href="http://www.overthewire.org/wargames/natas/level.css"></head>
<body>
<h1>natas6</h1>
<div id="content">
<?include "includes/secret.inc";
if(array_key_exists("submit", $_POST)) {
if($secret == $_POST['secret']) {
print "Access granted. The password for natas7 is <censored>";
} else {
print "Wrong secret";
}
}?>
<form method=post>
Input secret: <input name=secret><br>
<input type=submit name=submit>
</form>
<div id="viewsource"><a href="index-source.html">View sourcecode</a></div>
</div>
</body>
</html>Ta xem file "includes/secret.inc" chứa cái gì :D
<?
$secret = "FOEIUWGHFEEUHOFUOIU";
?>
Oh, điền vào input xem.Access granted. The password for natas7 is 7z3hEENjQtflzgnT29q7wAvMNfZdh0i9

0 nhận xét:
Đăng nhận xét