HackThisSite Realistic Mission 13

This time around it looks like we upgraded from allowing a child to access YouTube at school to ruining a parties chance of winning an election. We really do take any job as a hacker it looks like.

Hacker Silhouette | Credit: B_A on Pixabay

Problem

This one is pretty straight forward the request is to take down the a website being used as a promo for the Republican Party of Elbonia. As the problem suggests since we aren’t modifying or collecting information we are most likely going to need admin access to perform this.

The only really helpful hint to get started on this one is to always read error messages on any website. The messages can provide insight into implementation of the website.

Looks pretty professional

Solution

Alright so I played around a lot of the website and mainly found some interesting errors after messing with the input of a few pieces of functionality. I’ll go in order of the list, but the newsletter can’t handle input without a set value.

This resulted in another SQL error, this is a table we don’t care about, but this site is error prone.