Archive for August, 2006
You are now browsing the archive for August in 2006.
Since Javascript is implemented client-side, the first thing to do when hacking Javascript is to check the source code. Unfortunately, Hellbound Hackers’ second Javascript challenge contains code that redirects you immedieately when the page loads. In order to view the source code, you must somehow make the browser ignore this redirection. There are several ways. I assume that you are using Firefox:
- Disable Javascript — Edit -> Preferences -> Content, remove the tick in the Enable Javascript box.
- NoScript Add-On — Download the Firefox add-on NoScript, which enables selective enabling/disabling of Javascript in an easily accessible menu.
- wget — or any other application that can fetch remote websites. Functions for this exist in practically every programming language. With wget, you can just run
wget http://hellboundhackers.org/challenges/js/js2/index.php and download a copy of the file, which you can read in any text editor.
When you have acquired the source code, you can find this code:
Except for the advertisement, this is the only Javascript and so must be the level 2 code. Load at the level2script.js file (in the same directory), and you will find the password easily.
var password, i;
password=prompt("Please enter password!","");
if (password=="level2done") {
location="huh.php"
i=4;
}
else {
alert("Wrong password, you'll go back to the index")
location="index.php"
}
My password was level2done. To enter the password, you must re-enable Javascript and reload the challenge page.auto loan eloanreview eloanbad england loan creditequity loans home insurancecalculation equity loanequity loan land onloans release home us equityloan payments estimate Map
The first Javascript challenge in Hellbound Hackers is very simple. Since Javascript is client-side, you will of course have to look at the source. Search for script tags, and you will eventually stumble upon this:
function pasuser( form ) {
if ( form.id.value == "partyhard2" ) {
if (form.pass.value == "lifeisshort1" ) {
location = "index.php?user=partyhard2&pass=lifeisshort1"
}
else {
alert("Invalid Password")
}
}
else {
alert("Invalid UserID")
}
}
This code essentially checks if the username (”partyhard2″) and the password (”lifeisshort1″) match and are correct. If they are, the user is redirected to index.php?user=partyhard2&pass=lifeisshort1, which in turn redirects to the “congrats” screen. Just enter the respective strings in the username and password fields, press “login” and you have completed the mission.
Basic web hacking mission 6 in Hellbound Hackers is very situational:
My friend Drake has found this new way on how to execute Unix Commands from a simple php file, but he was testing the security and the logs recorded his activities and reported it to the FBI and it chmod the file logs.txt, now the only chance for him to be safe is that you chmod the file to all execute and delete that file and the other file that tracks people. Mr. Deitry also said the command to do all these action needs a $ in the begining
This challenge is extremely obscure and confusing. I wasn’t able to do it before reading a spoiler-pumped article by system_meltdown on Hellbound Hackers about this mission. Therefore, I am going to give the solution away.
We need to chmod a file. What file? logs.txt. Where is logs.txt? No idea! Fotunately, system_meltdown’s article reveals that it is in this very directory, in the sub-directory logs/.
The first part-mission is to chmod the log file. chmod is a UNIX command that is used to change the permissions of a file. Remember that the mysterious Mr. Deitry told us that we for some reason need to put a dollar sign ($) in front of the commands.
$ chmod a x logs/logs.txt
The a x part stands for “all execute”, which will allow everyone to execute the file. Now, we will remove it with the rm command.
$ rm logs/logs.txt
Now, we only have to delete the file that tracks our presence. Don’t ask me how we’re supposed to find the filename out — I had to read the article. Apparently, it is logs/track_logs.php.
$ rm logs/track_logs.php
Therefore, the three commands that should be used are the following:
$ chmod a x logs/logs.txt
$ rm logs/logs.txt
$ rm logs/track_logs.php
Mission accomplished.country ringtones 3gforfreeclassic party 3rd ringtone4 cellphones ringtones generationringtone 5 jacksonolam ringtone adonringtone battery adrenalinringtone specs 870games hoe playing quit ringtone 8ball Map
Hellbound Hackers, Other Challenges, mission 11.
Place a link to HBH on another site / forum. DO NOT place the link on a hacked site.
I suppose that this challenge is only for publicity, do don’t get insulted by the fact that they’re checking if you’re able to link. Yes, it’s cheap — but who wouldn’t sell himself for five points? Just in case you don’t know basic HTML, this is how to do it:
<a href="http://hellboundhackers.org/" title="Hellbound Hackers"> Hellbound Hackers </a>
If you’re going to do it on a forum, this is to make a link with BBCode:
[url=http://hellboundhackers.org/] Hellbound Hackers [/url]
This is the result: Hellbound Hackers. Since I’m so lazy, I’ll just submit this post.
Hellbound Hackers, Other Challenges, mission 9.
Crack this hash: 54666C2C5324279450A6EE8AC0992588
Enter the word in the box below
Since MD5 currently is the most widely used hashing algorithm, let’s assume it is an MD5 hash.
Since MD5 is irreversible, there are several projects dedicated to creating huge reverse-lookup MD5 tables. Some of them contain brute-forced alphanumeric strings, while some contain numbers and some contain wordlist entries. Fortunately, this password was simple enough to be in the British wordlist, and so one MD5 reverse lookup database had one solution for 54666C2C5324279450A6EE8AC0992588:
For the md5 54666c2c5324279450a6ee8ac0992588 these results found: monolith
Indeed, the correct answer to mission 9 is monolith. Congratulations, 5 points “has” been added.movie dogfartmovies fuck fatty freefree fetish foot moviesfree movies jizzmovies sex latina freenude of movies and pictures girl free orgasmsgirls movies free sexyfree granny xxx movies Maparticle aarp credit protectionabd credits psychology transfer20th fox century creditsspecialist credit receivable accounts controlfix 30 day creditactive months service credit duty campaignabsenteeism credit riskevaporation program 1440 credit monitoring Map
Download and install Firefox, and set it as your default browser.
You should already be using Firefox, and if you do, just click the button. Make sure that you’re not using a firewall that blocks the user_agent HTTP header. If you are not using Firefox, I suggest that you do:

30 thumbplay ringtones freebarrington zielinski alan ilto z a warringtonactual song free ringtonescollege rossendale accringtongladiators ringtone americanringtone aerosmithringtone adult proof Map
Hellbound Hackers, Other Challenges, mission 2. This is some free five points if you already have a website. If you don’t, I suggest that you create one anyway. Having a website of your own is wonderful.
Setup your own website with some content. Please link to a page with evidence.
Just follow the instructions, and it should be simple. You need to prove that you are the one owning the website. The best way to do that is probably mentioning your nickname/username somewhere. This is what I’m doing now, since I’m going to submit the URL to this post: I am Joti, a hellbound hacker.
I’ll just hope that whosoever checks my submission won’t dislike a couple of HBH hints being here.forskin porn anamatedporn anamelanamil porn planetporn anastasia cartoonporn anaya leonancient grannypornbeans and free pornandrea dukellis porn Map
In basic web mission 5 on Hellbound Hackers, a (fictional) new project, called Asterix-Protect, is implemented: [sic]
Welcome to Asterix-Protect
Asterix-Protect is an email search system that uses this new type of Asterix database to match your search and uses the same type of form like a login. And Asterix-Protect its a login system which also uses this advanced type Asterix database to match your username:password, this is a project that just started… If something is wrong or you have found a bug in our product, please contact us at problems@Asterix-Protect.org.
This means that you will have to find out someone’s username and password and log in. From the mission text, you see that the username is the email adress, and the username and password are separated with a colon (:). As always, begin with checking the source code. You will discover a very revealing comment:
The asterisk (*) can be used as a wildcard. Hackers have always been fond of puns, and that’s probably what the Asterix-Protect system got its name from. Try logging in with an auto-matched email-adress and an automatically matched password using the asterisk wildcards:
*@*:*
Mission accomplished.porn citiboysknight cj pornporn cjo dpornstars dames pink claireclips clara porn morganeclare dunsmore pornlana porn clark andmovies porn clasic Map
Hellbound Hackers’ basic web mission 4 is, in my opinion, quite illogical. The mission is obviously to find the misplaced htpasswd.php file. However, this does not make sense from a more realistic point of view.
ERROR: htpasswd.php file not found in basic4/
First, why is the htpasswd.php file loaded on this page? It should be loaded in the form validation page. Second, now if it was supposed to be loaded on basic4/index.php, why on Earth does the password work even though it was not found? The questions are many, the answers are few. The solution is simple if you just guess around a bit, though.
Suppose that the webmaster misplaced htpasswd.php and accidentally uploaded it to another directory. Let’s check, for instance, /challenges/basic5/htpasswd.php. It’s there:
Your Password is “FireStone”
Yep. That’s the password.drive 1501 credit farmgraham credit 1831 island discovered1958 credit association production stockszone credits twilight 19601976 bill house 920 credit1985 lien chrysler dodge corp credit1989 credits cosmetologygold credit bar 1g Mapdemo for dvd pornopornstar movies dvddvd porn adult vhsdwaf porn picswoman porn in dwelldyke porn trailersprouse dylan pornodysny porn Map
« Later Posts —
Earlier Posts »