Soooo Confused on Real Level 2

Library Gateway

Hazique35
11 years ago

3

Do I have to edit the code or something? For this should I have a good knowledge of javascript or PHP?

39replies
30voices
1,260views
slaine
11 years ago

0

can be a pain in the ass to find thoose sweet little books. But its there in the source somewhere

DJDavid98
11 years ago

1

@Hazique35 You only need common sense and knowledge of how URLs work. Also a little bit of directory content listing.

Hazique35
11 years ago

0

Alright… I tried to use GET methods, that didnt work out well… So ill try what you were talking about.

Pomme
11 years ago

0

I’m blocked on this level from 4 days now… I f*cking do not get it… I see what the code do but I don’t see what I am supposed to do

???Roun512 [roun512]
11 years ago

0

just see the source code and u will find answer

Pomme
11 years ago

0

Yes I know…

Here’s what I understand :

var req, image, status, imagepath; // Variables' declaration

function loadimage(_imagepath) // Loading a function
{
var username= document.getElementById(‘username’).value; // Taking what the user entered in the user case and putting the value on the username variable
var password= document.getElementById(‘password’).value; // Same for password
URL= “members/” + username + “ ” + password + “.htm”; // I don’t really know… Definiting an URL like members/usernamepassword.htm ?
imagepath = URL; // Stocking the URL in a variable called imagepath
document.getElementById(“status”).innerHTML = ‘Checking details…’; // Modifying the text, not important

req = getreq(); // IDK >:
req.onreadystatechange = imagexists; // IDK >:
req.open(“get”, imagepath, true); // IDK >:
req.send(null); // IDK >:
}

function imagexists() {
if(req.readyState == 4) { // If the red.readystate = 4 then
if(req.status == 200) { // If the req.status = 200 then login ->
document.getElementById(“status”).innerHTML = ‘Correct!’;
document.location = “/levels/r2.php?in&user=” + document.getElementById(‘username’).value + “&pass=” + document.getElementById(‘password’).value; // Here I see that I need to enter an URL like http://www.hackthis.co.uk/levels/r2.php?in&user=username&pass=password and validate it to clear the level
} else {
document.getElementById(“status”).innerHTML = ‘Incorrect username/password’;
}
}
}

Here is what I understand in the code, after the //… Any other help or hint please ? :)

<? ' / ?> [draethel]
11 years ago

0

Maybe have a closer look at members/ you will find something there!

wastegash
11 years ago

1

you dont need to do anything with the javascript. or know anything about the code.

you need to concentrate on this bit of the code. not what you posted.
var username= document.getElementById(‘username’).value;
var password= document.getElementById(‘password’).value;
URL= “members/” + username + “ ” + password + “.htm”;


2

you just need to understand the url . >> URL= “members/” + username + “ ” + password + “.htm”; look here that might help you a lot

Pomme
11 years ago

0

OMG thank you so much I finally found the solution, with your help !

I was focusing on the javascript code like a stupid man…

Thanks ! It was soooo simple :‘)

<3

heavenlyMe
11 years ago

0

there’s no need to edit the code :)

hackers101
11 years ago

0

im new can some one help i cant figure out the password

oxide
11 years ago

1

god damn that was annoying but rewarding

Idletester [idletester]
11 years ago | edited 11 years ago

1

http://www.hackthis.co.uk/levels/r2.php?in&user=username&pass=password is very important that you understand what this is doing.
The question mark is in effect the get statement : /r2.php?in&user=username is saying, get the user which is equal to the levels user=username and also get he levels pass=password the variables you need to be looking for are ‘user’ & ‘pass’ So to cut a long story short you have to put the correct username into the user variable and the password into the variable pass.

So your answer should be: http://www.hackthis.co.uk/levels/r2.php?in&user=********&pass=********
found ^Username^ & ^Password^

The main part of code you need to understand is this:

    var username= document.getElementById('username').value;  

var password= document.getElementById(‘password’).value;
URL= “members/” + username + “ ” + password + “.htm”;
imagepath = URL;
document.getElementById(“status”).innerHTML = ‘Checking details…’;

What could you find useful to yourself in this core???

Tvibe [iamtestedok]
11 years ago

0

took me just 15 mins to get past this level :D. u just have to relax and think…. its easy. focus on URL= “members/” + username + “ ” + password + “.htm”. the answer is right before ur eyes :D

mic032
10 years ago

0

I still don’t get it.. I know i have to change the url but how? I try hunderds ways and they always show me 404not found

daMage
10 years ago

1

then you’ve been really creative. Think simpler…

ihackforjustice
10 years ago

0

thats enough !! i cant understand a thing , URL=“members/”+username + “” + password +“.htm”
i cant find the username and pass and i tried www.hackthis.co.uk/levels/real/level2/members/usernamepassword.htm

J [ColdIV]
10 years ago

0

You didn’t understand the line ;)
username and password are variables so they probably contain a username and a password? Since you can’t guess them you will have to try to find the passwords. You’ve got htm files there, where are those files?

ihackforjustice
10 years ago

0

finished it . but thnx a lot !! :) i really appreciate it :D

piash5000
10 years ago

0

Oh! Shoot, it was quite easy to solve. Just concentrate on members

Wibben
10 years ago

0

travel through the directories, travel and look around…

H0RN3T
9 years ago

0

you don’t even need to view the source code to reveal the login credentials


0

Humm, to solve the level, try to look at the source code of the page, there is a script. Try to translate the scrip with your own words, you’ll understand it better !

bboystorm
8 years ago

0

pls spme help i havent find it

Mr. Cyph3r [MrCyph3r]
8 years ago

0

What is that thing you are not able to find? the source code? the script?

bboystorm
8 years ago

0

i havent find the user name and passeword iam getting crazy some help plz

Mr. Cyph3r [MrCyph3r]
8 years ago

0

Well, that’s actually part of the challenge… we can’t tell you the solution.
Also, you should try to tell us what you did so far, without posting a spoiler, of course.


0

I can say that, the MAIN levels will be useful for this part. :D

bboystorm
8 years ago

0

i go to source code and i find username and password but i havent indrsten them
ps: sorry for bad of my english


0

You have to understand a bit of html and javascript. Start with the MAIN levels, since they will have a crucial help.

Mr. Cyph3r [MrCyph3r]
8 years ago

0

If you have username and password you have to insert them in the proper fields and you should be able to pass the level… if not then probably you have the wrong username:password combination

bboystorm
8 years ago

0

in main levels i stop in level 4

Mr. Cyph3r [MrCyph3r]
8 years ago

0

Actually it is all you need to pass this level…

? [bolofecal]
8 years ago

0

The user and pass doesn’t have in source code of login page, but in this source code have a information for you find the username and password.

IPreaver
8 years ago

0

HAHA so easy. Just follow the directory

DOSmaster
8 years ago

1

The best would be if you read through the source properly.
It might lead you to a location they forgot to disallow..

Hope it’s not too much of a spoiler. ;P

Reply has been removed
adamgerd
8 years ago | edited 8 years ago

0

Finally found the directory. I just was putting the / in the wrong place. Also is it just me or are the real levels easier than the main levels.

q-hacker
6 years ago

1

do you have to login with all accounts
bcz i logged in with anna but it is still not completed

Reply has been removed
You must be logged in to reply to this discussion. Login
1 of 40

This site only uses cookies that are essential for the functionality of this website. Cookies are not used for tracking or marketing purposes.

By using our site, you acknowledge that you have read and understand our Privacy Policy, and Terms of Service.

Dismiss