Level 1
第一关很简单 直接查看源代码
可以看到密码已经写在注释里了 复制粘贴 pass (复制的时候注意空格)
Level 2
Network Security Sam set up a password protection script. He made it load the real password from an unencrypted text file and compare it to the password the user enters. However, he neglected to upload the password file…
苦笑不得,忘记上传密码文件了,什么也不用输,直接submit
Level 3
This time Network Security Sam remembered to upload the password file, but there were deeper problems than that.
这次他想起来上传密码文件了 查看源代码 可以直接看到保存密码的文件名
直接在https://www.hackthissite.org/missions/basic/3/后面加上password.php就可以看到密码了
Level 4
This time Sam hardcoded the password into the script. However, the password is long and complex, and Sam is often forgetful. So he wrote a script that would email his password to him automatically in case he forgot. Here is the script:
怕忘记密码,加了一个直接把密码发送到他邮箱的按钮
查看源代码
这里可以看到他的邮箱号,我用的是chrome 直接F12,把他的邮箱号改成你自己的,然后直接点send password to sam 就可以得到密码了