Basic Web 1

All this mission takes is some basic HTML knowledge. If you don’t already know, comments in HTML look like ““. Take a look at the Basic Web 1 page source/source code (View>Page Source) and look at all the comments. One of them should tell you the password.

Basic Web 2

Network Security Sam set up a password protection script. He made it load the real password from an unencrypted text file and compare it to the password the user enters. However, he neglected to upload the password file…

What is that supposed to mean? Well, we can assume that the password system Sam has set up gets the password from the password box and compares it to the ones in the text file, if they match then it will let you in. But Sam forgot to upload the text file containing the password, so the script will be comparing the password in the box to NOTHING.

Basic Web 3

Sam remembered to upload the text file containing the text file this time, which obviously contains the password. What we want to do is find that text file so we can find the password. We can start by checking the source code. If you scroll down about 3 quarters of the way you should see this code:

In case you didn’t already know, the extension for a text file is .txt. So the text file would be located somewhere like this: http://www.hackthissite.org/missions/basic/3/SOMETHING.txt. (Big hint in the code and just after).