Questions and Answers

How do I collect points?

  • +5
    Chosen as best answer
  • +1
    Posted answer
  • +1
    Posted question
  • +1
    Thumb up
  • -1
    Thumb down

by MKmoderate in Challenge Help about June 21, 2016 open - report

Auditing 9

Hey all. I'm working on Auditing 9. I believe I understand the regex, so shouldn't I be finding a way to put another forward slash in the URL? I don't know if this involves encoding or what but I'm looking for a gentle nudge in the right direction.


Answers: 4 • Score 0 • Views: 899
Browse by
  • 21

    by haZed about July 17, 2016

    On the back of Abhinav2107's comment: it had nothing to do with encoding for me. I did have to program this one though as I couldn't get it working through any modern browser. 

    • Score: 0
  • 24

    by Abhinav2107 about July 15, 2016

    Putting another forward slash isn't about encoding. It's about how the web server parses the URL.

  • 21

    by haZed about July 14, 2016

    I think you answered the wrong question there anonananananananananonamous.

  • 80

    by Anonanonamous about June 21, 2016

    This is a vulnerability in php_self. Make sure you use encoding in your injection

You must login to post an answer.