" Since 2004, Enigma Group has been providing its members a legal and safe security resource where they can develop their pen-testing skills on various challenges provided by this site. These challenges teach members the many types of exploits that are found in today's code; thus, helping them to become better programmers in the mean time. By knowing your enemy, you can defeat your enemy. "

September 07, 2010, 09:11:41 am *
Welcome, Guest. Please login or register.

Login with username, password and session length


<-- Please vote for us on the Progenic TopList!

Has this site helped you? Then help us with your support.

News: Download your copy of The Enigma Group Manual, intended for new members, as an introduction to this site.
 
Enigma Information
Main Index
EG Manual
Disclaimer
Legal Information
Hall of Fame
Hall of Shame
Member Rankings
Members List
Meet the Staff

Training Missions
Read Me First New
Basic Skills
Realistic Scenarios
Cryptography
Software Cracking
Linux ELF Binary Cracking
Logical Thinking
Programming
Captcha Cracking New
Patching
Steganography
Deface This Wall
/dev/null
/dev/urandom
/dev/extra New

Knowledge Bank
Discussion Forums
Enigma Chat New
RSS Feeds
Articles / Tutorials
Videos
Online EG MP3 Player
Enigma Zine
Downloads
Tools

Submit Code
Ajax
ASM
Bash
C
CPP
Csharp
Delphi
Haskell
Java
Javascript
Jython
Lisp
mIRC
MySQL
Perl
PHP
Python
QBASIC
VisualBasic

The Urinal

Click Here To Vote For EG!

hakipedia

Has Enigma Group Helped You? Then Help Us By Advertising For Us. Place One Of The Following Images On Your Site.

enigma group

enigma group

enigma group

enigma group
Pages: 1 2 [3]
  Print  
Author Topic: Miscellaneous 2  (Read 2864 times)
0 Members and 1 Guest are viewing this topic.
cleptic_man
Newbie
*
Offline Offline

Posts: 4
Rep: 0

It's only one lap - motto of open water swimmers


Reply #30 on: August 21, 2009, 01:06:18 am �

I seem to be having trouble with this one as well.. I have obtained the source codes of both the .shtml and the .php sites, but niether of them seem get me any closer to the answer. I'm aware that this is supposed to deal with SSI, but I can't find anything that helps with where I am supposed to look for that in the source code. Anyone able to offer a nudge in the right direction?
Logged

C-3PO: I think I'm melting! This is all your fault!
Link-
Hero
******
Online Online

Posts: 935
Rep: 6


.o0o.


Reply #31 on: August 21, 2009, 01:23:32 am �

I seem to be having trouble with this one as well.. I have obtained the source codes of both the .shtml and the .php sites, but niether of them seem get me any closer to the answer. I'm aware that this is supposed to deal with SSI, but I can't find anything that helps with where I am supposed to look for that in the source code. Anyone able to offer a nudge in the right direction?

You got the source code of the .php page? That's kinda odd.. You don't need the source code of anything, you just have to understand what SSI stands for and how to use that in your favor..
Logged

NotMyOwn
Global Moderator
Post Junkie
*****
Online Online

Posts: 620
Rep: 7



Reply #32 on: August 21, 2009, 01:32:39 am �

I am pretty sure he ment the HTML source code haha, if he had the PHP, he'd have the mission answer xD
Logged
cleptic_man
Newbie
*
Offline Offline

Posts: 4
Rep: 0

It's only one lap - motto of open water swimmers


Reply #33 on: August 21, 2009, 01:34:36 am �

I got the html soucre code of the index.php page... I stopped it when it was doing the meta refresh taggy thing.. but it didn't seem to help. Seems like I need to do more research into the SSI and figure out how to use it =/
Logged

C-3PO: I think I'm melting! This is all your fault!
Link-
Hero
******
Online Online

Posts: 935
Rep: 6


.o0o.


Reply #34 on: August 21, 2009, 05:37:32 am �

I know what he meant NotMyOwn, i was trying to show him that what he said is wrong and that he should know the difference between having the source code of a php page and the HTML source code of a php page.
Logged

cleptic_man
Newbie
*
Offline Offline

Posts: 4
Rep: 0

It's only one lap - motto of open water swimmers


Reply #35 on: August 21, 2009, 03:21:55 pm �

I've gone over SSI again.. Haven't found anything that helps me though. I understand what is happening, but i can't figure on how to get the information from the server side so that I can actually see it...
Logged

C-3PO: I think I'm melting! This is all your fault!
nightstalker772
Newbie
*
Offline Offline

Posts: 3
Rep: 0


Reply #36 on: August 22, 2009, 11:59:36 am �

hi. my understanding of ssi is as follows :
 ssi is added on html pages by the author, it is executed by the server and the code replaced by the relevant object of the request. So, any ssi that is injected would have to be part of an shtml page to do what i want it to, right? the inputs on the .shtml appear to be sanitised, any meta characters appear as they are.  Am I entirely off track? Help would be seriously appreciated  Sad
Logged
swift_stryke
Newbie
*
Offline Offline

Posts: 4
Rep: 0


Reply #37 on: August 30, 2009, 01:24:38 pm �

It took me quite a while to realize I was using the wrong SSI command. Good mission. Tongue
Logged
Phast
Full Member
***
Offline Offline

Posts: 104
Rep: 0


Reply #38 on: November 05, 2009, 03:07:57 pm �

How do you input the SSI commands? I tried inputting it in the source code and saving it, but it didnt work. Im trying to get the directory listing. help would be appreciated.

Phast

Edit: sorry for bumping a post that was dead for a few months, I didnt want to make a new one when this one had already been started.
Logged
Descent
Newbie
*
Offline Offline

Posts: 6
Rep: 2


Reply #39 on: July 30, 2010, 05:12:09 pm �

I dont know if im asking for too much of a spolier here, but what is the directory listing command? i cant find it anywhere.
Logged

Ultraminor
Full Member
***
Online Online

Posts: 192
Rep: 8

Python powered Mama Luigi


WWW
Reply #40 on: July 30, 2010, 05:21:00 pm �

If you can't find it anywhere, you have a poor query string on google Tongue
I'm probably not allowed to answer your question, so, if you can't find it with a conventional search, you'll have to muck through a command-line manual.
Logged


. -. .. --. -- .- --. .-. --- ..- .--.
I am here to learn not to download free porn.
Quote from: Nasrudin
Like I said before in one of his forum posts, that Ultraminor really needs to get off of his high horse or be smacked to a wall at a high velocity. Both would help.
tyzer200946
Newbie
*
Offline Offline

Posts: 12
Rep: 4


Reply #41 on: August 06, 2010, 05:12:37 pm �

okay ive looked up SSI on wiki and ive looked on it and tried to figure out what to do and everyone is talking about a directory and i cant figure out how to view the directory can anyone point me in the right direction?
Logged
Pages: 1 2 [3]
  Print  
 
Jump to:  

Back To Top