Bump
Sorry if I bumped this, but this topic is too cool to die.
AUTOBAHN
[SPOILER]
Also, AutoBahn, you are partially correct, youre in the right direction with <!--#exec cmd="ls"-->, but youre forgetting this: ../, so add that to look like <!--#exec cmd="ls ../"--> and it should work. if it does, then itll list the contents of the Root directory for basic 8, and there should be a file that has a name of several different charaters, ending with .php. take the entire file name, including .php and add it after the /8/ in the URL, like you did in Basic 3 and it should reveal the password[/ENDSPOILER]
SWAT 3
i think we need an injector of sorts
SPOILER
Yes, you need to inject an Server Side Includes codeENDSPOILER
SETRO
6 is stumping me too.
[spoilers]
even with the encrypter, i cant find out how the hell they got the <'s in encryption. nothing i'm typing is turning into a <.
[/spoilers]
I believe theyre using a ROT Cipher coupled with an equation. Its important to have an ASCII table at hand, and take note the order of the characters, like whats first, whats second, etc.