Printable View
I found this today
http://www.eweek.com/category2/1,3960,600431,00.asp
It's a hacking challenge to hack a web application, with prizes. It look the real deal as it held with Microsoft and Oracle and this is the forth of such challenges.
I think it start Tomorrow
The challenge can be found at http://www.openhack.com/
Looks like it could be a bit of legal fun. Anyone else going to give it a go?
SittingDuck
Not me, I am weary of these legal hacking challenges. I can't help but to image big brother on the other end logging my IP. However I would kill to get a look at the system logs after this challenge. Imagine what you could learn!
Nate
[gloworange]rm -rf /bin/laden[/gloworange]
lol it would b a laugh 2 see how many hackers they have caught i suppose it is 1 way of catchin most of these hackers out there iam not gonna do it i would pay 2 see the list of hackers and isp address they have caught.
hmm.. as far as i know, hacking challenges like this is usually held in an open area over a LAN. so you would have to be there yourself on the spot to do the challenge so the IP addresses wouldnt matter at all nor will there be any ISPs involved. The last challenge i heard of was quite funny really.. since the hackers couldnt hack into the system, they hacked eachother's systems instead (or so i heard). hehehe
tho it is highly unlikely they willl bust you during this challenge. i mean, they DID offer the challenge.. its not that u did it without their permission or awareness.
Hmm - best of luck...
under BSD with Apache 2.0.43.Quote:
Port 25 is opened: SMTP
Port 80 is opened: HTTP
Port 110 is opened: Post Office Protocol - Version 3
You'll need it!
Thats the idea, that task it hack via the web application.
All of the above can be achived via port 80Quote:
prizes will be awarded for the successful completion of any of five separate penetration tasks. These represent successively more serious breaches of security: a cross-site scripting attack, a dynamic Web page source code disclosure, a Web page defacement, a SQL injection attack and theft of credit card data from the database.
But saying that from what I have read, it won't be easy. I expect that no one fill find anything. But I will still have a go, you never know.
SittingDuck