Post Captain

[karma-fusebox]

just solved this one by simply using the infamous javascript/xsrf-thingy...
( http://www.hacker.org/forum/viewtopic.php?p=10478#10478 )

i think there is hardly any more ugly approach.. so what is the real way to POST data to websites?

[gfoot]

I don't remember this challenge, but probably just make a .html file containing a form with the right post variables? You can also use something like curl or wget from the command line, if you have access to them.

[karma-fusebox]

make a .html file containing a form with the right post variables?

thats what i did. but it seemed not very professional to me..

so i will have a look at wget/curl if i need this again.

[PeterS]

Doing it with curl probably would have been the easiest choice here, since it were only one line.
But I did it with a few lines of Python for my convenience:

Code: Select all

#!/usr/bin/env python
# -*- coding: utf-8 -*-

import urllib

url = "http://www.hacker.org/challenge/chal.php"
data = {"answer": "marmelade", "id": "27", "go": "Submit", "name": "PeterS", "spw": "xxxxxxxxxxxxxxxxxxxxxxxxxxx"}

print urllib.urlopen(url, urllib.urlencode(data)).read()

Of course you would have to replace the x's with your submit pw, if you wanted to use it.

[Pappe]

I solved this by using firebug, simply edit get to post and execute the modified page

[PeterS]

Wow, that's so much easier, but I didn't think of this method when doing the challenge

[Admiral Beotch]

web developer plugin to change form from get to post, then tamper data plugin to modify the answer field.

[Force4]

You can also just type some javascript in the address bar of your browser:

javascript:function z(){document.frm.method='POST';};z();
Press enter, and use the form normally.

[chephy]

Ah, this challenge is so much easier using today's browsers, e.g. using Chrome's built-in developer tools: right-click the submit button, choose »Inspect Element«, double-click on the »GET« in the HTML code, write »POST«, press the submit button as usual.

The same probably applies for Firefox in combination with some web developer extensions.

[Guderian]

i used "Live HHTP Headers" addon for Firefox. Took me only a couple of seconds

[Millennium]

I used Chrome's Inspect element and replaced "GET" with "POST" and pressed it.

[snoopy1alpha]

Firebug FTW