DEV Community

Michael Lee
Michael Lee

Posted on

HackThisSite Basic 2

Image description

Sam forgot to upload the password file that contains the actual password. -> The script tries to load a password from a file that doesn't exist -> return an empty string or null value -> user input field is also empty by default

Therefore: user input == password from file
=> Empty string equals empty string = authentication success

Fairy simple, not too difficult, just had to think a little.

Top comments (0)