Realistic 1

advertisement

Seeing as i did do a realistic 2 article, i decided to do a realistic 1 article:

So, you see the message:
Your goal for this mission is to log in as an registered user (johndoe/password) and analyze the site to gain administrator rights to change the price of the program to make it a lot more cheaper.

Alright, when you go to a page a big IMAGE greets you and you have two options
-Home
or
-Login
You want to log in. Now, when you click on toys you can't change the price.. Duh, but still, it was worth a shot. You need the administrator status to change the prices. Alright, remember that big image in the beginning? Well, can you think of a directory where most images are stored? Go to that directory.
Well, look at what we got hear! Yes, you know which one to click on. Now, you got cookie information. You should use javascblockedript injection to change your cookies (username, password, and AuthID) to that user's info. Once you have them, now go to the toys and change the price. When you've changed it, you will be greeted with some new points (btw, change it appropriatly).

If you need any more help, feel free to contact me.
~nights_shadow~