Description:

This time Sam hardcoded the password into the script. However, the password is long & complex, & Sam is often forgetful. So he wrote a script that would email his password to him automatically, in case he forgets it.

Requirements:

  • HTML knowledge & an email address.

Hints:

  • The script sends the password to the administrator, but… who says it has to go to the administrator?

Difficulty: Easy.

Points: 20

Challenge Link: https://www.hackthissite.org/missions/basic/4

Forum Link:

Solution:

Looking in the HTML source code for “Send password to Sam” form we find the one interesting hidden input field with name=“to” value=“[email protected]”.

Level 4.1

It seems that server will send the password to this email so we can change this to our own email address and we can receive the password.

Level 4.2

And we successfully received the email with password.

Note: the email will only be sent if you provide your HackThisSite profile email address.

Happy Hacking