Hack Windows Server 2003!

[sweet_angel]

Here we go..it's game :) http://www.hackus.co.za/

Rules of engagement:



*


1. We were not going to tell you anything, but hey here it is...


This box is running Windows 2003 Server.



This box is located directly on the Internet with NO FW and NO IDS.



You could have found this out yourself but hey, just helping some clueless people....



*


2. No DoS attacks.


*


3. No modification of this extremely well written page!


*


4. Write a file to a directory called JUSTCALLINGTOSAY, containing: Your Contact details were we can reach you directly.

or you can try the one already posted it http://www.hulla-balloo.com/hack/level1/

It's fun game..love it

Cheerrs

Annya

[CraZy_AhmaD]

hmm too good for me :D didnt tried windows 2003 yet so i dont know how it works
about that hack this site is a bit easier but im stuck at level 3

also there is www.try2hack.nl

[st1mpy]

eehhe iwas going around that site just to see what people say heheh someone said

i breached your machine but i wont tell you my secret way of hackin hehe what a bs lol but still its lil fun contest for experts to try it out ;)

[HTRegz]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=#post) by CraZy_AhmaD
hmm too good for me :D didnt tried windows 2003 yet so i dont know how it works
about that hack this site is a bit easier but im stuck at level 3

also there is www.try2hack.nl

Level3 was fairly simple...

Here's a hint. Take a look at where the script is told to perform it's actions.... you already know the filename. it's just a matter of finding where it's actually located.

[gore]

wow, I could really use the job the offer and the new gaming PC.. hmm, Kinda cool. Im just scanning right now looking for a way in. :)

[CraZy_AhmaD]

thanks for the advice HTRegz but i dont have much time to play around... so i left the site in the bookmarks fo now

@gore what i have found that from a well known attacks only the port 80 is open...
so it wouldnt that easy

[gore]

Only port 80?

___________________________________________________________________________
[Connect 4:25:46 PM] Host: 196.31.22.86 IP: 196.31.22.86 Remote Port: 80 Local Port: 1897
Local Socket: 880 Standard Service: World Wide Web HTTP :: Common trojans for this port: AckCmd, Back End, CGI Backdoor, Executor, Hooker, RingZero and many others

[Connect 4:28:46 PM] Host: 196.31.22.86 IP: 196.31.22.86 Remote Port: 1025 Local Port: 2849
Local Socket: 708 Standard Service: network blackjack :: Common trojans for this port: Remote Storm

[Connect 4:31:02 PM] Host: 196.31.22.86 IP: 196.31.22.86 Remote Port: 1723 Local Port: 3548
Local Socket: 860 Standard Service: Microsoft PPTP

[Session Closed 4:31:32 PM] Host: 196.31.22.86 IP: 196.31.22.86 Remote Port: 1723 Local Port: 3548
___________________________________________________________________________

Looks like more than 80 is open to me.

[The3ntropy]

winner will receive
3. And a Killer Games PC with the following Specs:

Intel 2.6ghz
PC333
1GB RAM
2 x 80GB 7200 RPM Drives
DVD/CDRW combo
Onboard LAN and Sound Card
Windows XP Professional
256mb AGP Graphics Card of your choice

Holy shit, I wish I knew how to somehow gain control of that box, damn.

[Cemetric]

Yes that gaming pc looks mighty intresting ...
But the way in is not that simple at first looks ...

There are a few ports open as mentioned by gore before ...but getting in is something else ...looks secure to me (damn ;) :D )

Hmmm ...there's got to be a way ... gotta find it ,need new pc ... :cool:

[keezel]

Who's to say this isn't some kind of trap set up by a government to catch the most "dangerous" hacker out there? I know I'm being paranoid but a little bit of paranoia goes a long way when it comes to computers. (your own or someone else's)

[phishphreek]

Who's to say this isn't some kind of trap set up by a government to catch the most "dangerous" hacker out there? I know I'm being paranoid but a little bit of paranoia goes a long way when it comes to computers. (your own or someone else's)

I don't think that this is the case here... the box is being hosted in africa...

most likely R&D/ security firm looking for holes in 2k3. they give you a new computer while they reap the rewards of the publicity...

[deftones12]

yeh they're r alot of honeypots out now...they're rapidly growing popularity...i'm still not sure how u found this box. I'm not gonna be like the older people here and neg points u or whatever u guys do but could be findin this random box and hackin it be a bit illegal? i couldnt give a shit what u guys do or get into but i'm just no clear on if its a hackme box or a real server or what?

[Tedob1]

love their error pages:



This server has reported an error so there... </p>

come on deftones12!

A domain that hosts hacker games...with a name like hackus.com... has a server with a home page that says "Hack Me"...and your in doubt!?! Not to mention accusing one of our most respected members of being dis-reputable. Not real good!

[Viper2026]

hehe, time to install the win 2k3 server i got with my new vs.net and start messing around with it
lol

[st1mpy]

so did anyone after all got in there ? from AO ;)

[cheyenne1212]

I went as far as a portscan.

lol

But I'm not a very "intelligent" uhmmm..... Penetration tester ;)

[st1mpy]

i bet first day when rpc got out the machine was exploitable but yah ehhe or maybe not who knowz hehe

[Lord Viczerez]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=245699#post640726) by keezel
Who's to say this isn't some kind of trap set up by a government to catch the most "dangerous" hacker out there? I know I'm being paranoid but a little bit of paranoia goes a long way when it comes to computers. (your own or someone else's)

[I agree...it seams kinda fishy if you ask me...there is allways that old saying..."it it sounds to good 2b true, it probally is," but hey who knows, could be legit.]

[kyleiscool]

I dont know how to hack that well.I couldn't even get past the first level.If you can make a reply and tell me how to hack the web I would be grateful.

PS.{I'm a newbie.}