S5EX#Access Denied

[Z]

Im at the part where i know every information about the admin, except where to login. Any tiny hints?

GreetZ

[sabretooth]

The admin page is disabled in some way.

Enable it

I know this sounds obvious but if I say any more it will give the challenge away.

PM me if you want anything more specific

sabretooth

[Z]

Hmm, I already tried that, but that helped me a lot

Thx

[sabretooth]

Like I say, if you need any more, PM me

sabre

[Z]

Great chall, sabre
Thanx for it, and I hope there will be more EXploit challs
GreetZ

[sabretooth]

glad you liked it.

grats


S

[Phobo]

Like the others said: great chall

[sabretooth]

Thanks once again

sabre

[skraeling]

Warning: possible spoilers ahead (though I have tried to reduce them as far as I can)!

Something strange is going on. I'm at the user login page. When I use Firefox, I have no problems with logging in (I know a username and a password that lead me to the "you forgot to bypass an additional security" page). When I send the same data by a POST request from Java (which uses the org.apache.commons.httpclient libraries for POST requests), I get "Access denied!". I have checked twice that all three POST parameters are the same (and in the same order); the referrer, useragent etc. seem to be irrelevant (checked with TamperData). What is happening? How can the server find out whether I'm using a Java client or a browser? Is this part of the challenge?

By the way, great challenge so far - but I have no idea how to come up with the very first step without having seen it before...

skr.

[Bregi]

Warning: possible spoilers ahead (though I have tried to reduce them as far as I can)!

Something strange is going on. I'm at the user login page. When I use Firefox, I have no problems with logging in (I know a username and a password that lead me to the "you forgot to bypass an additional security" page). When I send the same data by a POST request from Java (which uses the org.apache.commons.httpclient libraries for POST requests), I get "Access denied!". I have checked twice that all three POST parameters are the same (and in the same order); the referrer, useragent etc. seem to be irrelevant (checked with TamperData). What is happening? How can the server find out whether I'm using a Java client or a browser? Is this part of the challenge?

By the way, great challenge so far - but I have no idea how to come up with the very first step without having seen it before...

skr.

Hmm that's really weird, but no, that's not part of the challenge.

Tell us if you need a hint on what to do next.

Bregi

[sabretooth]

sure you're sending it to the user login and not the admin login?

sabre

[skraeling]

user. Of course I tried admin too, but that doesn't do anything (not even Access Denied).

Now I don't even understand what TamperData is doing. If I enter the correct username and password and press Submit, it leads me to the "you forgot to bypass the added security" site. However, if I press Ctrl+F5 while TamperData is on, and edit exactly the same POST data into my request, it does *nothing* (not even Access Denied). This is idiot because, with the Java code not working, TamperData is probably my only way to mess with the adminlogin.

skr.

[sabretooth]

oh there are many more ways

[skraeling]

Forgot to add that my Java code is capable of sending POST requests to other challenges at lost-chall (I've used it to solve some of the challenges). I'd like to know, if this is not too much, whether the challenge can be solved without forging POST requests.

skr.

[sabretooth]

nothing that can't be done by editing the html and sending from localhost

sabre