hackthissite.org

Yeah, it's pretty strange...indeed it sucks.

Any other antionline members active on hackthissite?

hey el-half, i've been checking your site ,and i see that you know a hell of a lot more about assembly then me, so why do you suck at the apps???

Yeah i've been a active member to hackthissite.org for a few months now, completed a few levels on the Realistic Missions, Completed all levels on the Basic missions.
Plus i've beaten a few of the Apllication Missions as well.

F2B

Yeah, I completed all basic missions and 1,2,3,4,5,7 from the realistic ones and 1 from the app's.

lepricaun, why do you think I am that good at assembly?
Ok, I can write it pretty well, but I mostly suck at reverse engineering programs.
Every idiot can do Application 1 but I've not succeeded at Application 2, I know it establishes a connection with hackthissite.org (I also know which url) but I wouldn't know how to get the password. (And when I sniff traffic with windump or ethereal I don't capture outbound packets, is that obvious?)

EDIT: It seems I can capture those packets anyway, nothing useful in it though.
Is the password encrypted when sent?

EDIT2: oops, I was looking way too far, solved it.

i can only read a little assembly ( this also goes for other languages) but i haven't taken the time to learn and write it yet...

as for app2:

just open it with a hex-editor and scroll down to 00165EF0, here a part of a url is located: GET /..../..../..../
when you use this url on www.hackthissite.org/.../.../.../ like that, you have the password.

app3 is possible with a sniffer...

(app2 is also possible with a sniffer, here you can get the url as above)


have fun with it...

Hey lep on try2hack.nl on level 2 how do you open the level2.swf into Notepad?

I've tried a few tricks but nothing works got a hint for me??


f2b

Yeah, just finished app2.

Can you help me a bit with app3?
I found this url to the php file (I think) that checks the password. When I surf to it and give the variable key no value simply 'false' appears.
So I thought I'd try something...I changed the first false to true (and a space), now the program just keeps on 'reading data...', so that is obviously not correct.

Using a sniffer gave no useful text.

EDIT: So, you say you can only read some assembly...does that mean you never have to reverse engineer any of those applications???
How would you solve that application where you have to click the button then??
/me is confused

.:front2back:. ??? lmao, and you have completed all basic web hacking missions on hackthissite? right
Open it in Internet Explorer and after that go to your Temporary Internet Files and look for the flash file, just open it with notepad (the password and username are in plain text in it)

Damn i knew there was something that i had over looked, cheers el-half.
i feel like an idiot now

lol,

Quote:

---

i feel like an idiot now

---

That makes 2 of us ;) :D

EDIT: crap, I'm stuck in both app3 and 4. I've changed the hell out of app4 and it kept on working. Yet it did exactly what it did before :(