HTS Basic Web 4
In this mission Sam has set up a script that will email him the password when he clicks a button. What we will try and do is make the email send to your email address instead of Sam’s.
Open up the page source and have a look for what could be the emailing script. It looks something like this:
We need to change “webmaster@hulla-balloo.com” to our own email address.
Copy the whole page source and paste it into notepad. Locate the line that contains the email address and delete webmaster@hulla-balloo.com and replace it with your own email address.
Also change “action=”/missions/basic/4/level4.php”” to “action=”http://www.hackthissite.org/missions/basic/4/level4.php”". Save it as a .html file and then open it in your web browser. The rest should be obvious.
Loading ...
[…] HTS Basic Web 4 […]
Also you need to change that to:
In the form.
form action=”/missions/basic/4/level4.php” method=”post”
change
“/missions/basic/4/level4.php”
to
“http://www.hackthissite.org/missions/basic/4/level4.php”
as well as changing the email.
Okay, I added that in.
This is good, very good. I’ll be trying this out!
I don’t get it, I did what you wrote, I changed “/missions/basic/4/level4.php” to what you typed, and I changed the email. But when I click send email in the opened notepad thing it dosn’t send an email to me, what did I do wrong?
Did you save it as a .html file and open it with a web browser?
i don’t know why but it won’t let me save the note pad page as a .html only: text documents and all files.
i no i dont know how to convert it but i am currently downloading a programm that will, use google to look for .txt to .html thats all i did ¦-)
In the file name field, just type in exactly this YOURFILENAME.html EXAMPLE: lala.html
To save the text file as an html file, in the save as box type is all types and then in the name type “4.html”
just make sure you save it in a place that you can find easily like desktop/my docs
you just need to change the email. THATS IT!!! and it won’t email, you it will just show you the password on the screen, or atleast thats what it did for me.