8027_owasp

access the site
- inspect the source -> form has hidden field named LetMeIn with value False
set value of LetMeIn to True
enter any password

alert box is shown with content:

01010011 01100101 01110010 01101001 01100001 01101100 00100000 01001110 01110101 01101101 01100010 01100101 01110010 00111010 00100000 01010100
01001000 01001001 01010011 00101101 01001001 01010011 01001111 01000100 01000100 00101101 01000011 01000001 01010101 01010011 01000101 00101101
01001001 01000001 01001101 01000001 00101101 01010011 01010101 01010000 01000001 00101101 01001000 01000001 01000011 01001011 01000001

decoded: Serial Number: THIS-ISODD-CAUSE-IAMA-SUPA-HACKA

enter serial code on next page to complete challenge (see 8027_1.png and 8027_2.png)

serial number: THIS-ISODD-CAUSE-IAMA-SUPA-HACKA

8027 OWASP Hackademic Challenge 10

attack:

result: