Comments on: 1 4|v| t3h 1337 h4X0r!!!

1 4|v| t3h 1337 h4X0r!!!

Melinika — Fri, 26 Sep 2003 07:23:49 -0800

It's Friday, and you don't want to work. You want to practice your hacking skillz instead.

By: Melinika

Melinika — Fri, 26 Sep 2003 07:35:14 -0800

Requires Flash. For some reason, thought I typed that, as Friday = Flash, eh? =P

By: signal

signal — Fri, 26 Sep 2003 07:37:08 -0800

level 2, here ph34r m3

By: Frasermoo

Frasermoo — Fri, 26 Sep 2003 07:47:16 -0800

i hacked level 1 I own it. signal, YOU ARE NEO.

By: trust_no_one

trust_no_one — Fri, 26 Sep 2003 07:49:50 -0800

I can see a lot of wasted time coming out of this. I've also hacked level 1. Level 2 is going to be more of a challenge I see.

By: nthdegx

nthdegx — Fri, 26 Sep 2003 07:53:01 -0800

username *and* password. /me rolls up sleeves

By: eastlakestandard

eastlakestandard — Fri, 26 Sep 2003 07:56:25 -0800

THis is a stupid game. I keep trying to play the first level, but its password protected. What gives?

By: nthdegx

nthdegx — Fri, 26 Sep 2003 07:57:32 -0800

By: jpoulos

jpoulos — Fri, 26 Sep 2003 08:21:52 -0800

When I click on what i presume is the submit button on level 2, nothing happens. I don't even get anything saying I have the wrong password. Is that supposed to happen? Or is it broken?

By: Fat Elvis

Fat Elvis — Fri, 26 Sep 2003 08:23:01 -0800

I'm doing Level 5 right now, and it's not as easy as the previous ones.

By: fatbaq

fatbaq — Fri, 26 Sep 2003 08:26:56 -0800

jpoulos, that is supposed to happen, your h4cking skillz sux0r :) [hint: for level2 try downloading and viewing the level2.swf file in notepad or similar.]

By: bigschmoove

bigschmoove — Fri, 26 Sep 2003 08:33:10 -0800

I'm giving up on level 5, since I don't have a windows machine to play with and I'm not l33t enough to write my own VB decompiler.

By: nthdegx

nthdegx — Fri, 26 Sep 2003 08:40:10 -0800

I'm told level 5 is the hardest. I't doesn't look like I'll have the pleasure

By: Fat Elvis

Fat Elvis — Fri, 26 Sep 2003 08:42:14 -0800

VB3 Decompiler (for Windows): http://ftp3.ru.freebsd.org/pub/pc/windows/Developers/vbdis22e.zip I passed Level 5, Level 6 is VB6. Goody. Trying it now.

By: taumeson

taumeson — Fri, 26 Sep 2003 09:40:53 -0800

i went through this a few years ago....oh man is it fun. some things you're gonna wanna look into: password cracker like jacktheripper vb3 decompiler, as mentioned above network sniffer (including packet analyzer) various cryptography methods. try copy/pasting chunks of packets into google, see what's brought back. funfunfun

By: Satapher

Satapher — Fri, 26 Sep 2003 10:23:34 -0800

I'm doing Level 5 right now, and it's not as easy as the previous ones. thanks for the startling information

By: Fat Elvis

Fat Elvis — Fri, 26 Sep 2003 10:45:11 -0800

Satapher: I suppose it isn't all that startling, sorry. I was refering to the change in methods required that were pretty much the same on the previous levels. Oh well, finished level 8 and level 9 is down. Back to work taking over the world, I guess. :)

By: Wong Fei-hung

Wong Fei-hung — Fri, 26 Sep 2003 10:49:01 -0800

Arggh-I viewed source on level 3 after opening it Opera with Javascript turned off. When I enter the password it sends me to DisneyLand.

By: willnot

willnot — Fri, 26 Sep 2003 10:51:07 -0800

Wong Fei-hung - are you sure you're looking at the right JavaScript Code?

By: Wong Fei-hung

Wong Fei-hung — Fri, 26 Sep 2003 11:17:18 -0800

That is the question I need to be asking. I got the page address from the status bar of IE. When I go through the tutorial normally it looks like IE is loading the script before it brings up the page. The source for the page I got only has one javascript in it. Perhaps I'm looking at the wrong page. Shrug

By: Fat Elvis

Fat Elvis — Fri, 26 Sep 2003 11:31:49 -0800

Use the source, Luke/Wong Fei-hung. But then again, javascript might not be the right language for you. :)

By: Wong Fei-hung

Wong Fei-hung — Fri, 26 Sep 2003 11:41:58 -0800

Hah, use the source, I see the password declaration. Perhaps I need to dig up my jscript manual. Oh well.

By: Fat Elvis

Fat Elvis — Fri, 26 Sep 2003 12:41:09 -0800

script src vs. script language - there's a difference. It's hidden in plain sight.

By: Wong Fei-hung

Wong Fei-hung — Fri, 26 Sep 2003 13:30:12 -0800

christ that was sneaky- thanks for the gigantic clue Fat Elvis

By: littlegreenlights

littlegreenlights — Fri, 26 Sep 2003 13:43:00 -0800

[possible spoiler] Now how 'bout that level four? Anyone else unable to etgay the ppletay to oadlay? I can't wget or GetBot it, either. (Trying to find out if it's MIA or I'm just dumb.)

By: theora55

theora55 — Fri, 26 Sep 2003 14:10:55 -0800

Hopelessly stuck on level 4. The Hint for 3 was quite helpful. thanks, Fat Elvis. Good activity for Friday afternoon at work.

By: Voivod

Voivod — Fri, 26 Sep 2003 18:11:01 -0800

A possible hint for anyone stuck on level 4: http://www.ahpah.com/cgi-bin/suid/~pah/demo.cgi

By: UKnowForKids

UKnowForKids — Fri, 26 Sep 2003 18:49:22 -0800

I'm stuck on level 3 where Wong Fei-hung was, it looks like. I've tried the, shall we say, "alphabetical" password, but it isn't doing me any good. Any vague hints to be passed my way would be greatly appreciated.

By: kickingtheground

kickingtheground — Fri, 26 Sep 2003 20:36:06 -0800

UKFK: Are you absolutely sure there's only one script on that page?

By: UKnowForKids

UKnowForKids — Fri, 26 Sep 2003 21:29:21 -0800

Bwa ha ha! Thanks.

By: UKnowForKids

UKnowForKids — Fri, 26 Sep 2003 21:41:14 -0800

...and now, I've hit the brick wall of level 4. Fun while it lasted, though. Thanks for the link!

By: juv3nal

juv3nal — Fri, 26 Sep 2003 23:32:01 -0800

ditto lvl 4. littlegreenlights: it loads fine. i've even dloaded the class file, just can't make head nor tail of what's in it.

By: juv3nal

juv3nal — Sat, 27 Sep 2003 00:21:21 -0800

ahh...i'm an idiot, missed voivod's link.

By: UKnowForKids

UKnowForKids — Sat, 27 Sep 2003 00:42:30 -0800

Yeah, I used voivod's link as well, but lack the programming knowledge to make heads or tails of what's in there.

By: juv3nal

juv3nal — Sat, 27 Sep 2003 03:29:45 -0800

i think it's reading back in the first ~20 or 21 lines of the html page that houses the applet to populate String inuser[], but i'll be damned if i can be bothered to do the math and actually figure out which lines it's using and how unless i know for sure that actually is what it's doing...little help 1337 h4X02 d00dz?

By: cheaily

cheaily — Sat, 27 Sep 2003 08:54:48 -0800

level4 is easy, one you figure out what file it's loading to read the password from. ;)