+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Challenge 3] Break the cipher and steal the root creds. (/showthread.php?tid=4970694)
Pages: Pages
1
2
[Challenge 3] Break the cipher and steal the root creds. - Viktory - Aug 31, 2015
Challenge 2 here
-
Break the cipher, find the website and PM me it's root mysql creds to win a cookie.
Cipher
ksv_wsvrwbfuskkj_rrAkxrAduoA
Hint
http://pastebin.com/3mFSecJb
Also feel free to pm me if you're stuck somewhere
Solvers
chicken man (only broke cipher)
giant (only broke cipher)
carelesmind (only broke cipher)
Beladonis
DanGerੴ
As always, this ends in 2 weeks and I'll post solution then.
* - Beladonis - Aug 31, 2015
I have no knowledge on decryption / deciphering... What kind of tool do we have to use ?
* - Viktory - Aug 31, 2015
(Aug 31, 2015 11:42 AM)Beladonis Wrote: I have no knowledge on decryption / deciphering... What kind of tool do we have to use ?
brain.exe
* - Beladonis - Aug 31, 2015
So we don't need any tool but just the hint you have posted... okay
* - Viktory - Sep 1, 2015
Updated hint, maybe now you guys have a better idea on what to do.
* - chick3nman - Sep 1, 2015
(Sep 1, 2015 02:21 AM)Viktory Wrote: Updated hint, maybe now you guys have a better idea on what to do.
The original hint, and the cipher part all together was easy. However, I don't do website exploitation so that's where my journey through this challenge ends. Still a cool idea, I'm happy(heh) to see users posting fun little challenges like this. I enjoy puzzles :P
* - Beladonis - Sep 1, 2015
I can't break the cipher... I thought it was rot3 encrypted or something like that, but apparently it isn't
Can you give another hint ?
* - Viktory - Sep 2, 2015
(Sep 1, 2015 11:08 AM)chick3nman Wrote: The original hint, and the cipher part all together was easy. However, I don't do website exploitation so that's where my journey through this challenge ends. Still a cool idea, I'm happy(heh) to see users posting fun little challenges like this. I enjoy puzzles :P
haha, good job!
I thought I spoiled it with the hints but nobody else has been able to do it...
The attack vector you can use in the website is fairly easy to find, give it a try. 👍
* - Wireless Network - Sep 2, 2015
(Aug 31, 2015 12:07 PM)Viktory Wrote:brain.exe
Can you send me download link?
Spoiler (Click to View)
* - Viktory - Sep 2, 2015
(Sep 1, 2015 11:16 AM)Beladonis Wrote: I can't break the cipher... I thought it was rot3 encrypted or something like that, but apparently it isn't
Can you give another hint ?
That's not all there is to it. Two steps in the process, nothing will make sense till you complete both. Take a look at step 2, compare with what characters stand out in the cipher. If you got that right, you did step 1 correct.
And good luck to everyone attempting it.
* - giant - Sep 2, 2015
Can't PM as I'm new but I've got the URL:
h*****o******o*l.***/
(hopefully that should be clear to OP without giving it away to anyone else)
* - Viktory - Sep 2, 2015
(Sep 2, 2015 11:56 AM)giant Wrote: Can't PM as I'm new but I've got the URL:
h*****o******o*l.***/
(hopefully that should be clear to OP without giving it away to anyone else)
Good job, now get dem creds.
* - giant - Sep 2, 2015
Can you PM me? I assume I can reply to PMs just not send them first?
I have found something but unsure if it is what you're looking for. I have admin access to some sort of control panel where I can seem to manage gallerys etc but this is separate from the user login at the bottom. Not sure which you're looking for. I assume not this one
* - Viktory - Sep 2, 2015
(Sep 2, 2015 12:37 PM)giant Wrote: Can you PM me? I assume I can reply to PMs just not send them first?
I have found something but unsure if it is what you're looking for. I have admin access to some sort of control panel where I can seem to manage gallerys etc but this is separate from the user login at the bottom. Not sure which you're looking for. I assume not this one
nah you won't be able to reply to me, sent you my contact in pm.
* - Viktory - Sep 5, 2015
Got one more solver for the cipher but nobody wants to hack the actual website.. lol
not that hard guise