hacker.org

This thing with GET and POST really should be fixed. We already have a challenge for that sort of puzzle

I made a quick 'n dirty windows app where I pasted the original text and it would reproduce it properly on a second textbox.
And still barely made it

I got in too by trying something slightly different. The thing is, it should have worked with my first method. I believe the reason is that this is not a real vulnerability but just an exercise. The "exploit" is expected so it's all just make believe. I 'll make a post in the solved sectio...

I think the answer to this challenge is the password, not positive though, I solved it awhile ago. Even if I got the password, I would expect to log in and see the same "you have no secrets" message. Considering that the challenge tells you not to try to "guess the password" as ...

As the challenge description says, you have to log in as 'adum' in order to see his secrets. I logged in as adum (and as someone else) and still get the no secrets treatment. I even got it to work with the user name field having just the word adum in it so that it will show properly on the next pag...

You are all correct. It was easy after all. But being told it was easy really made all the difference.

The low number of solvers put me off, but it turns out it was just due to the challenge being very new rather than hard.

Any hints?
I dont even understand what the objective is

I wonder if it was an actual hidden message or pure chance. Anyone know?

Too bored to boot a live linux just for the file command I couldn't get 7z to report the file type. Then after I solved it, I noticed it was in file-properties all along... duh! renaming it to doll.bin.zip worked anyway. 7z does not care about the corect extension. Then I used the following batch fi...