Printable View
its easy to find the files you need do a "find -uid" followed by a uid 1 level higher than yours. goodluck gore. i moved from level 5 to level 15 in 3 days.. wasnt that hard.
oh yeah.. level15, was a stinger!!
1 byte buffer overflow didnt make sense since 1 byte isnt big enough to make a BOF.
and oh yeah.. matthew, if i 4got to mention. this wargame also requires you to write and compile scripts on the spot if you want to pass levels 4 all the way to 17. can u code? oh wait.. u can only edit codes.. lol damn now ur in big trouble LOL.
HTRegz: is that the lesser prophet task??
oh well, i guess i was right. he backed out. LOL
laaaaaammmeeerrrr!!!
Hey S0nIc.. never saw yer question til now....
I'm on Level 4.
Kevin likes playing games in Linux. One day, he was bored and had nothing to do so he decided to play with a source file of the game. He opened the source file and added some codes and then compiled it. Get the password for the next level by using this program.
HINT: Apparently, he added only one line into the source.
Arrrgh! I want to play too! But I can't seem to get into the site!!! Arrrgh!
ok, it's up now. . . now to see how far I can get . . .. :cool:
Arra Jaysus!
I havent looked at hackerlab in ages!
Prodikal got me into way back.
Level12 i think i was on.......cant really remember.
/me now knows whats on the cards this weekend
Thats the hint for level4 correct ? i havent been on the level for ages but its basically the same as level3 exept you need to pull strings on the file. Now if we do a strings -f we get way to much output from the file so we will need to write a bash script that looks something like thisQuote:
Kevin likes playing games in Linux. One day, he was bored and had nothing to do so he decided to play with a source file of the game. He opened the source file and added some codes and then compiled it. Get the password for the next level by using this program
what that bash script does is the first line says to execute the following block for each returned entry in the list output from the inline command of strings /usr/games/trojka Each entry fills the variable i, which is then checked to see if a file with that name exists in /usr/bin/. If it does, then we print out the value of the entry okCode:for i in `strings /usr/games/trojka`; do
if [ -f "/usr/bin/$i" ]; then
echo $i
fi
done
so now we no that we are playing with a file called ***** (you should be able to spot which one it is ;) )
so now we cd ~/tmp and create a file called ***** with vi or your preffered method and insert /bin/bash n to the file we created make it executable with chmod 750 <filename> then we set our PATH to PATH=.:$PATH then export
PATH PATh is set to call proggrams in your current directory now all we need to do is run the file /usr/games/trojka and voila then just type pass and get the password or you could enter /bin/pass in the file called *****
so what just happend we knew there was a game that had a vunerability in it we tried strings -f but the output was huge so we wrote a script to narrow it down for us. When we got the listing from the call we made with the script we got a a few files but 1 stuck out more "clear" than the others so we took advantage of that file when the vunerable file is running it has level5 permmisions and thats how we take advantage of it when we created the file called ***** and set our PATH to the directory we are working in instead of calling the file when the game is executed it calls our file we created and gives us a shell with level5 permmisions
have fun ;)
level 1 is a pain in the a$$ cause i dont know anything about linux/unix :( but im working on it
sonic had a problem with regestering need help
hexadecimal-you mean level 0? yea same with me, i suck at linux/unix, i really really suck at it. im still on level0 :( I'm so much better with windows, why cant we like hack a windows 2000 server lol. can some1 help me understand how you get the passwords, dont tell me how, i just dont quite understand how your supposed to get them or where they would be.