34 replies to this topic

[webdevil]

Very late but their 24th level seems to be broken virgoman.

[extreme]

Definetlly tried zilions things with Level26.. Can't budge :/

P.S. Admin has put the solution to Level24 since the site is down...

[webdevil]

Any luck with level 26 extreme?

[extreme]

Nope... I was pretty sure that we have to use the filemanager feature, and only feature is virtual editing of the files..

So, we can access this file:
http://hax.tor.hu/le...l26/users/admin
there is a function that checks if "cwd" value is allright..

so, if we try something like this:
http://hax.tor.hu/level26/filemanager/inde...46;/../
or this:
http://hax.tor.hu/le...hu/www/level26/
..it won't work..

I don't think it's steganography, or keeping data in EXIF area of the images...

[Genesis]

These challenges are hella fun!
I'm going to learn some XSS and try again.