Hack this!

[Martinkou]

Some of you have probably seen this, for those that haven't... well:

http://www.try2hack.nl/levels/

I once spent like 10 hours on this thing and managed to get to level 8... now though, level 4 has gotten me.

So let's see if any of you can nail this one down. :)

If you can get as far as level 8 - then you obviously know way too much about computers haha.

The site has 3 noticeable vulnerabilities - see if you can exploit them.

BTW mods, click the link before reacting. ;)

[himura-dono]

lol, i remember that "game" =)

[mr. x]

i know absolutely shit about hacking, can u enlighten me as to how the password thing works? i dont wanna be a hacker anyway cuz im paranoid that the nsa is gonna be all over my ass

[Martinkou]

Hint for Level 1: Use the "View Source" function of your browser.

[torogi]

<!--QuoteBegin-Martinkou+Jul 28 2003, 07:37 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Martinkou @ Jul 28 2003, 07:37 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->Hint for Level 1: Use the "View Source" function of your browser.[/b][/quote]
Hints for&nbsp; the easier levels: view source (you might have to disable javascript) , use either cygwin or unix's strings command / hex editor, java/vb decompiler,&nbsp; sniffer (tcpdump/windump, nc, etc..) ..&nbsp; and a dose of creativity. (-;&nbsp;

You can also find similar games at www.hackerslab.org or www.rootwars.org .&nbsp;

[torogi]

<!--QuoteBegin-mr. x+Jul 28 2003, 04:08 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (mr. x @ Jul 28 2003, 04:08 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->i know absolutely shit about hacking, can u enlighten me as to how the password thing works? i dont wanna be a hacker anyway cuz im paranoid that the nsa is gonna be all over my ass[/b][/quote]
The media and most people misuse the word&nbsp; "hacker" most the time when they really meant "cracker". The distinction lies on the intention of the individual.

[sevenstorybeast]

muahah i got level 1 with absolutely no computer hacking experience

[sevenstorybeast]

how about a fat hint for level 2?

[Martinkou]

Mmm... alrighty, for those who can't get past level 2 (or any other, for that matter), here's the hints for all the rest of the levels:

Level 2: Either decompile the Flash or do this: View the source code, and find the URL to the Flash. Input the URL into a text editor, preferrably Notepad. The username/password should be somewhere in there. ;)

Level 3: The javascript loads before the page does, now how do you get the password? HINT: URLs and Notepad

Level 4: Decompile the .class file. There's only 1 line that you really need. ;)

Level 5: Decompile the VB3 file. You'll need a decompiler by DoDI.... search one of the crack sites or something.... ok, I don't know how much more to say w/out giving this one away. :P

Level 6: Look up on Baconian encryption. You'll also need the information for the page. HINT: It sends the info over the TCP/IP network.

Level 7: This one is a bit tricky. You'll need to know how to use Telnet to retrieve HTTP headers, but at the same time, you'll also need to know how to spoof your browser type. Once you unlock it, you should find the URL to level 8.

Level 8: This one's a VERY OLD exploit. HINT: It's somewhere in the filename. ;) BONUS HINT: Find out how to get someone's password from Linux/UNIX

NOTE: I actually had to get a friend of mine to help me with the last level.