Printable View
hi, need some help, i've searched for this in AO forums and in google however i'm not able to take this to the end..... here's my issue, i was going through try2hack.nl site; for level 4 we have to examine the PasswdLevel4.class file, i did it in "cavaj decompilor", fine, that gives us all the programming however how to find the user name and password information from there!? any ideas!?
i think it's this
PASSWORD="AbCdE";
CORRECTSITE="level4-sfvfxc.xhtml";
WRONGSITE="http://www.disney.com";
if the pass doesnt work, try to change the URL extension instead of level3 to the level4 one...
edit: my bad i though u were looking how to get TO level 4....Code:level4-sfvfxc.xhtml
that is a dummy password for level 3, it won't work... the password for level3 and the link for level4 are in the file "javascript".......... in souce code for level3 it appears as..... <script language="JavaScript">..... however that is applicable for level3.......whereas i was looking for the solution for level4..... http://www.try2hack.nl/levels/level4-kdnvxs.xhtml
and you said you looked on google ?Quote:
Okay so you have downloaded. PasswdLevel4.class and have opened it up with the DJ Java Decompiler....
I was reading through the scripts and realized they werent going to put it in the script, I mean come on, this is level 4. That would have been a freebie. So what they have is this:
There actually is an infile method inside of the class and its function is to bring up a file and use it as a reference: thus we must search to file all instances of the word infile
Which brings us to this line:
infile = new String("level4");
meaning that a string has been created in the directory with the answer:
and what do you know at the URL http://try2hack.nl/levels/level4
sits the file
Open up the file with notepad to see that it contains all information needed
??????:p is the username
??????:p is the password!
http://www.resellerratings.com/forum/t68748.html
looks like you didnt look good enough, that cheat page was the 2nd result.. but it would be no fun if you owuld just get the answers from that page now would it ??
one nice trick for programs like this is to modify the
java-source such that it spits out the username/password.
i hope this idea helps you somewhat, since i won't be
more specific. "the path is the goal" !
thanks buddy, your info helped me clear level4...... now to clear level5, seems like it'll take for me a bit of time to experiment with visual basic!!!! will be back for help if needed.....
well, sec_ware, idea is good only if i were having some more knowledge of java :p however the whole challenge is fun :)
on second thoughts also seems like i also have to work on my searching skills :)......
Let the lesson be learned: Cheaters never prosper.
(Although Bush did :()
if u guys likes such exercises... here's another plc for u to work it out...
www.hack.ae
cheerioz
de
Don't waste too much time on level5. As far as I know you have to use some vb3 decompiler that is nearly impossible to find, unless you are really really good with ASM. It's pretty stupid, and the hardest part of the level is actually finding the working decompiler. If I were you I'd find someone who has passed it to just give you the password or something then move on. Good luck.
well, for level5...... both the user name and the password is available freely and i've tested them also....... however the challenge is to get this info from the program...... there's got to be a way other than decompiling the program..... vb6 decompilor doesn't work for vb3 files :( .....one suggestion was to use hex editor ........( http://su2.info/doc/try2hack_solutions.php ) however couldn't follow the memory instructions!? any further ideas !?
well, the password and username (and url) you find using an hexeditor doesn't work, they're fake.
perhaps you might like this link, i think it is the data of the original developer of the program.
Well, I wouldn't say impossible... It's just a bit hidden =)Quote:
Originally posted here by h3r3tic
Don't waste too much time on level5. As far as I know you have to use some vb3 decompiler that is nearly impossible to find, unless you are really really good with ASM. It's pretty stupid, and the hardest part of the level is actually finding the working decompiler. If I were you I'd find someone who has passed it to just give you the password or something then move on. Good luck.
Search some more, if you still can't find it, i'll upload it somewhere.
Hi
You have to use Dodi VB decompiler for level 5.
I don't remember the password now but after you decompile using that decompiler you get one .bas file showing the username and password which is the wrong one.Actual password is in coded form in the other 2 or 3 files you get after decompiling.
It's like gc=001 ,gc=002.... and so on.
Try it out.
BTW level 6 and onwards are the real challenge.
Hope this post helps you.
C ya
i don't agree, i had a hard time getting past level5, but 6, 7 and 8 were pretty easy ;)Quote:
BTW level 6 and onwards are the real challenge.
jackandjill-------- i guess dodi did a pretty good job in decompiling the file (see attachment)....... now the algorithm is clear however where are the variables declared!? and what does the function..... Mid(gc0006, 56, 1) ...... do !?
Aglasys----- got any thing better than the job dodi does!?
any further ideas!?
Way back when I did level 5 I did it like this. Basicall VB3 is not obfusicated so all you have to do is open the exe with a text editor and you can see all the variables and the values of them. However, with vb6 you must decompile it.
ok at last level 5 is done :)... for level 6, as i understand we need a packet sniffer ..... fair enough however issue is that i don't have admin rights on the computer where i'm working so winpcap and none of the packet sniffers will get installed.....any workarounds will be helpful!? also should i use a packet sniffer or a password sniffer!?
hi rktak
Since you had the correct idea, here is the packet I captured. Good luck!
No. Time Source Destination Protocol Info
10 3.216311 62.192.127.200 192.168.1.13 HTTP HTTP/1.1 200 OK (text/plain)
Frame 10 (579 bytes on wire, 579 bytes captured)
Ethernet II, Src: xxxxxxxxxxxxxxxxxx, Dst: xxxxxxxxxxxxxxxxxx
Destination: xxxxxxxxxxxxxxxx (192.168.1.13)
Source: xxxxxxxxxxxxxxxxx (192.168.1.1)
Type: IP (0x0800)
Internet Protocol, Src Addr: 62.192.127.200 (62.192.127.200), Dst Addr: 192.168.1.13 (192.168.1.13)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 565
Identification: 0x4de9 (19945)
Flags: 0x04 (Don't Fragment)
Fragment offset: 0
Time to live: 52
Protocol: TCP (0x06)
Header checksum: 0x769c (correct)
Source: 62.192.127.200 (62.192.127.200)
Destination: 192.168.1.13 (192.168.1.13)
Transmission Control Protocol, Src Port: http (80), Dst Port: 1113 (1113), Seq: 1, Ack: 129, Len: 525
Source port: http (80)
Destination port: 1113 (1113)
Sequence number: 1 (relative sequence number)
Next sequence number: 526 (relative sequence number)
Acknowledgement number: 129 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57400
Checksum: 0x1494 (correct)
SEQ/ACK analysis
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Date: Sun, 31 Oct 2004 02:46:43 GMT\r\n
Server: Apache\r\n
Cache-Control: max-age=1296000\r\n
Expires: Mon, 15 Nov 2004 02:46:43 GMT\r\n
Last-Modified: Sun, 01 Jun 2003 20:37:04 GMT\r\n
ETag: "xxxxxxxxxxxxxxxxx"\r\n
Accept-Ranges: bytes\r\n
Content-Length: 220\r\n
Connection: close\r\n
Content-Type: text/plain\r\n
\r\n
Line-based text data: text/plain
(ENCRYPTION TYPE)
B*C*N**N
(USERNAME)
aaabb aaaaa aaaab abbab ababb aaaab
(PASSWORD)
aabaa abbaa aaaba baaaa babba abbba baaba abaaa abbab abbaa baaaa aaaaa babaa abaab baaab
(PAGE)
babab aabab abaab abbab aabbb aaaba
thanks sec_ware that was great :) the information was more than enough to clear level 6....... however i would like to know which packet sniffer did you use!?
Hi rktak
I am glad that it was helpful to you. I used Ethereal, which is the best
sniffer I know (and also the only one :D ). The packet I have posted was
a 1-to-1 copy from Ethereal. Hey, you were quick in decoding! Excellent.
Cheers
[1] http://www.ethereal.com/download.html
i tried a lot to clear level 7 using telnet however am not able to get to the next level's link! (link is freely available though using search engines!!!) searching the web gives lots of solutions however none of them are helpful in clearing the level successfully or may be i'm doing something wrong!? any ideas!?
Look at the http rfc. You have to forge your user-agent and referer to what they want it to be, then it will link you to level8. You had the right idea with telnet though.
dude i really dont get this site or www.hack.ae its a little complicated.defennently if u dont know what u are doing.some 1 give me a hint and i should be fine the rest of the way.
well, the first level of hack.ae is guessing a default password... so i would say, use the hint to guess the password ;)
thanx for the hint.i must be blind or something, but now they dont give any type of hint.i have tried anything related to the first password i can think of but now im out of ideas.im in a class at a tech in oklahoma,and thats where i got the idea for the first pass, but now i have been guessing with stuff about and around it and im not completely but close to clueless.
another hint --> routers
you are very right
dude what do u meen "routers"
Not to sound like jerk or anything, but the whole purpose of the site is to figure it out on your own. The levels are suppose to get harder, and the ways of getting to each level are not suppose to be as simple as just asking someone.
To be honest I spent almost an hour on getting to level 4 and I enjoyed it. I searched google for more sites like try2hack and mostly what I came up with was websites flooded with the answers, I have not played the site since in hopes that the owner will change the passwords/usernames needed so I can once again enjoy the site.
A website called hackerdrills.org shut down for just this reason. People are are just too lazy (only word I can think of) to try things on their own.
But hey, I've peeled the stickers off the rubiks cube, but it just doesnt seam as fun.
well, spazzmatrix, i fully agree with you when you say "but the whole purpose of the site is to figure it out on your own. " however there is always a first time for guys like me....... i was clueless for try2hack.nl after 4 levels however with the hints i managed to enhance my "general knowledge" :) ......( however my G.K is failing me for level 9 is another thing :p )...... now same applies to hack.ae seems like where try2hack left off this site is starting from there..... please correct me if i'm wrong......
try2hack.nl --> level9 =very easy
hack.ae --> level4 =a bit harder, try reading the forums on hackthissite.org for the basic challenges level 4, it is almost an identical level and the solution sure is identical!
hmm i tried try2hack.nl but wasnt able to figure out @ level 2 damn...
let me get started......
Someone please tell me there is more to level2 on hack.ae than I am seeing. If you're just supposed to sit there all day and try and guess a password, that is not what a web hacking challenge should be in my opinion. If that is what level2 is all about, and if level3 actually has a non-guessing problem to solve can someone give me the pass to level2 so I can get past these stupid guessing games? Thanks :).
there is more to it, think directories, this should help you.Quote:
Someone please tell me there is more to level2 on hack.ae than I am seeing. If you're just supposed to sit there all day and try and guess a password, that is not what a web hacking challenge should be in my opinion. If that is what level2 is all about, and if level3 actually has a non-guessing problem to solve can someone give me the pass to level2 so I can get past these stupid guessing games? Thanks .
level 2 is very similar to level 1 except that here in you have to get the password from the flash file.....check in your temp files or get a flash saving program.....Quote:
Originally posted here by siddhs
hmm i tried try2hack.nl but wasnt able to figure out @ level 2 damn...
let me get started......
agreed that more or less its a guess work .....however take the clue from the description "forgot to upload the password file " as far as knowing url of the next level is concerned..... hack.ae is very flexible ..... just change the digit in the url to the corresponding level's digitQuote:
Originally posted here by h3r3tic
Someone please tell me there is more to level2 on hack.ae than I am seeing. If you're just supposed to sit there all day and try and guess a password, that is not what a web hacking challenge should be in my opinion. If that is what level2 is all about, and if level3 actually has a non-guessing problem to solve can someone give me the pass to level2 so I can get past these stupid guessing games? Thanks :).
hey guys i'm going out of station for nearly a month so won't be able to pay much attention to this thread.... hopefully you guys will keep playing the game.....
NO it isn't!, it is simple basic knowledge... what is the first thing you would do when you have a possible target webpage? you explore it. this includes clicking all links, looking in all sources, and you try to see the directories that are in it, meaning you check to see if they have forgotten to put an index.html file in that directory which allows you to get a directory listing...Quote:
agreed that more or less its a guess work .....however take the clue from the description "forgot to upload the password file " as far as knowing url of the next level is concerned..... hack.ae is very flexible ..... just change the digit in the url to the corresponding level's digit
i passed try2ahck all 2 years ago !
also Hack.ae am stuck at level9... hint : i hope if i can get session time back so i can correct my mistake..
well i got a part of the solution it expires : 19/feb/1981
so i have to change my PC date before that !! but whats after that i dunno
i tried alot searched alot but nuthing in mind
then i'm sure you can give a hint on hack.ae level 6, i am struggling with this cookie level for 2 weeks now, but i must be missing something :(Quote:
i passed try2ahck all 2 years ago !
also Hack.ae am stuck at level9... hint : i hope if i can get session time back so i can correct my mistake..
well i got a part of the solution it expires : 19/feb/1981
so i have to change my PC date before that !! but whats after that i dunno
i tried alot searched alot but nuthing in mind