Hackthissite Realistic Mission:1

Uncle Arnold’s Band:

Uncle Arnold wants to increase his rating to the highest.  For that, he must have the maximum number of votes. When you click on the vote button for Raging Infero, you add one vote. But that doesn’t add much to the rating. We must add a huge vote value such that his rating goes high. Is there some easy way to do that? How can be increase his rating? We need to edit the vote parameter. 
The first thing that you need to do when you get any question is to go through the source code of the webpage which is vulnerable. Understand the code well.  
You can make out that when you click on vote, v.php gets activated. Also the group is distinguished by the PHPSESSID and id variables in the code. ‘vote’ takes care of the vote value. Now we need  a mechanism to change the value of the vote for one of the id and PHPSESSID that denotes the Raging Infero. You can use tamper data or Burpsuite to do that. I used Burpsuite and I liked it. Hope you got an idea to get started. 
 
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

w

Connecting to %s