Topic awaiting preservation: Try2Hack (Page 1 of 1)

This is a fun game where you have to "hack" your way to the next level, each level getting harder.
I'm on level 5 right now, haven't downloaded what's needed there yet.
See how far you can get :-)
http://www.try2hack.nl/levels/



[This message has been edited by HZR (edited 05-23-2003).]

Yeah I already tried this one in the past. I quickly became aware I didn't spend enough time reading hacking tutorials and practising them to be frank

And yes this is hacking, but we now what we do he...

Edit: HZR, you might be interested by other challenges



[This message has been edited by Moon Shadow (edited 05-23-2003).]

Thanks Moon Shadow

Will check that.

I'm stuck on level 2. .

Rember theres more than one way to skin a cat.
and more than one way to implment javascript



[This message has been edited by Trigger (edited 05-23-2003).]

Shameless Plug

why not try out the challenge at http://www.hackingzone.org/ just click on Wargame

Thanks
Trigger

Is there anything after level 5 (@ try2hack.nl)?

It says that level 6 is unavailable...

I'll try.
I'm stuck at level 1. @_@

[This message has been edited by Yannah (edited 05-26-2003).]

Hello,

Very amusing link....

Let us cooperate to solve it!

Although I discovered the password for level 3 (pass="AbCdE") I am getting wrong password!
http://www.try2hack.nl/levels/level3-.xhtml

Elias

Question. How did you get to level 3?

You download the .swf file and search for password in its binary...


level 1
---------
h4x0r

level 2
-------- http://www.try2hack.nl/levels/level2-xfdgnh.xhtml

u: try2hack
p: irtehh4x0r!

level 3
--------- http://www.try2hack.nl/levels/level3-.xhtml

p: AbCdE


As for level 3, you have to get its source via 'curl' and check it.
I have link for level 4, but I suspect that level 4 checks against the http refeerer, so you cannot just directly jump to it?

Elias

it's a fun game i'm at level two, going on three now.

Level 3 - The variables are declared at the end of the script, which means...



[This message has been edited by HZR (edited 05-26-2003).]

quote:

---

Level 3 - The variables are declared at the end of the script, which means...

---

Which means? 'undefined' or empty string? null ?

I also tried that!

Help me w/ this one, I might help you w/ other levels.

Elias

Okay,

The fun is over!
http://www.angelfire.com/linux/try2hack0/

Get all the solutions!

Elias

OK, this has been around for a while now, and i have managed to solve it in the past, but that aside, this is clearly HACKING, game or no game, it uses the same principles as any would be hacker would use to gain access to sites with similiar protection.

Now then, you guys have openly discussed this subject and i am sure that HACKING is not a subject that should be openly discussed here at asylum, agreed ? not matter what form it may take.

There are people here that may not know how to do this, but i am sure that they have learned enough already, teaching this openly on here shuold not be condoned.

Enough said !

Hello,

This is not really HACKING I would name it!

It is reverse engineering more precisly...

As you noticed, the solution is there: whether compiled in an exe file, or a java class file or a flash .SWF file.

That I do not call hacking, for me, hacking is finding holes/exploits in the system, and in this case we didn't find holes instead the solution was there.

Finally, all proficient developers are hackers, so non developers among us, no matter how much they try to learn they will not understand much.

Elias

quote:

---

Which means? 'undefined' or empty string? null ?

I also tried that!

Help me w/ this one, I might help you w/ other levels.

Elias

---

Which means that they are declared earlier, but maybe you know that already after reading the solution in the link you gave



[This message has been edited by HZR (edited 05-26-2003).]

Lallous, hacking takes many forms. It's not always about networks and systems. Give it a broader context. In some of the cases presented at try2hack, the hole or exploit is in the fact that the username/password is readily available.

Here, browse through the Jargon File. Lot's of good info in there about hacks and hacker sub-culture. Why, some of the first hacks didn't even involve computers of any kind. (One of my favorite stories there is the one about the Robin Hood and Friar Tuck virus. Okay, I also like the More Magic switch.)


[This message has been edited by warjournal (edited 05-26-2003).]

HZR, I still didn't get Level 3 though...

Elias

How in hell do you guys find out username and password??? wth???

Ruski: With a little common sense, and a bit of patience.

I have to say though, I'm a bit miffed at seeing the answers so readily posted.
To look at them would render the whole excercise, well, in a nutshell, utterly pointless, and I was quite enjoying the game (and the other challenes posted above).

[Edit]*Sheesh*[/edit]

[This message has been edited by Dufty (edited 05-26-2003).]

quote:

---

There are people here that may not know how to do this, but i am sure that they have learned enough already, teaching this openly on here should not be condoned.

---

From a beginner's manual :

quote:

---

What we're talking about is hacking as a healthy recreation, and as a free education that can qualify you to get a high paying job. In fact, many network systems administrators, computer scientists and computer security experts first learned their professions, not in some college program, but from the hacker culture. And you may be surprised to discover that ultimately the Internet is safeguarded not by law enforcement agencies, not by giant corporations, but by a worldwide network of, yes, hackers.

---

Hacking is NOT a game. Don't listen to the manuals saying hacking is rewarding, or a way to impress friends. Don't listen to the manuals saying it is fun. The point in hacking is originally to find security exploits on servers in order to remove them.

The link I posted was intended for true hackers who wanted to have some practise, this HAS NOT to be taken as a game. Don't make of this place a hacking learning center.

No look Dufy I dont mean patience....overall where do you get any idea what password might be at all??? I mean, it could be anything...so how do you get a clue at all???

All the info you require is in the source code (but not always obviously so!).

what passwords lallous gave us weren't working for me.

[This message has been edited by Yannah (edited 05-27-2003).]

The poster has demanded we remove all his contributions, less he takes legal action.
We have done so.
Now Tyberius Prime expects him to start complaining that we removed his 'free speech' since this message will replace all of his posts, past and future.
Don't follow his example - seek real life help first.

Yannah,
check your mail.

Elias