[Official Group] Unity Recruitment [#3] Pentesting Challenge

[Official Group] Unity Recruitment [#3] Pentesting Challenge - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Crews and Clans Private Forums (https://hackforums.net/forumdisplay.php?fid=53)
+--- Forum: Group and Crew General Discussions (https://hackforums.net/forumdisplay.php?fid=52)
+--- Thread: [Official Group] Unity Recruitment [#3] Pentesting Challenge (/showthread.php?tid=5808445)

Pages: Pages 1 2 3

[Official Group] Unity Recruitment [#3] Pentesting Challenge - Crystallize. - Mar 6, 2018

Unity is currently Recruitment-Based Only

We are only as strong as we are united, as weak as we are divided.

Group Userbar

[Image: unity.png]

Forum Icon

[Image: unity-f.png]

Owner:RaZoR
Leader: Crystallize.

Requirements

-Must be active and participate in our projects.
-Must contribute to the group.

How to join!?

You'll have to bypass our website's security and put your name in the index page.
Many thanks to Elitas for making this possible with his awesome skills!

Start with this(just to keep lames away):

Code 
ekpTOXg3YnZlODVpODRJV2hpTDVBVlBERVROVEVSUjVRQUwycytZbjFjMD0NCg0KMTI4IGJpdA0KYWVzZW5jcnlwdGlvbi5uZXQNCg0KS2V5OiBSZXF1ZXN0IG1ldGhvZCB3aGljaCB1c2VzIGZvcm1zLg==

Challenge:
>Decipher URL
>Successfully bypass our security
>Upload PHP shell
>Change index page containing ur name
>Delete the logs
>PM me with steps on how you completed it

Good luck, everyone!

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Elitas - Mar 6, 2018

The challenge was really fun to make. You got my name wrong in the OP btw, there is an 's'. xD

Excited to see some members trying this web exploitation challenge out, I'm sure there are some talented members on here capable of accomplishing it.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - ❤️BowmanBot❤️ - Mar 6, 2018

Unity is a great group, do not hesitate if you are thinking of applying!

Good luck to all applicants!

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Speci4lK - Mar 7, 2018

This challenge looks interesting :)
I'll do it when i have free time, now i'm very busy :S

PD: Now that the programming challenge finished, how the timestamp was found?

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Crystallize. - Mar 7, 2018

(Mar 7, 2018 06:54 AM)Speci4lK Wrote: This challenge looks interesting :)
I'll do it when i have free time, now i'm very busy :S

PD: Now that the programming challenge finished, how the timestamp was found?

I'll contact RaZoR to release the solution.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Ganja - Mar 7, 2018

Hoping to see even more talented members join Unity! Goodluck everyone.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - SIM-2223238 - Mar 7, 2018

ooooh very interesting
at least it's not one of those damn 1 or 1 tasks which were annoying as fuck.

uhuh, are there files missing as it's trying to pull certain images but they got 404'd not sure if they're related to the test

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Elitas - Mar 7, 2018

(Mar 7, 2018 02:18 PM)Aggron Wrote: ooooh very interesting
at least it's not one of those damn 1 or 1 tasks which were annoying as fuck.

uhuh, are there files missing as it's trying to pull certain images but they got 404'd not sure if they're related to the test

You can PM me any broken images. They don't have anything to do with the test from memory, but I didn't think I had any broken pics.

Oh, the AES site isn't our website.
It's just a tool used to decrypt the message we left to get rid of undesirables. 🤐

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Jesse Pinkman - Mar 7, 2018

What a cool recruitment process. Got pretty far and now my work blocked the website. Will have to wait till later.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Crystallize. - Mar 7, 2018

(Mar 7, 2018 03:35 PM)Jesse Pinkman Wrote: What a cool recruitment process. Got pretty far and now my work blocked the website. Will have to wait till later.

Haha thats unfortunate :(.

Btw I forgot to mention in the OP whoever asks me for help will be blacklisted forever.
You are free to PM me if you are running in website issues (web errors or if you have any concerns) DO NOT PM ME HOW TO SOLVE THE STEPS.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Elitas - Mar 8, 2018

(Mar 7, 2018 04:22 PM)Crystallize. Wrote: Haha thats unfortunate :(.

Btw I forgot to mention in the OP whoever asks me for help will be blacklisted forever.
You are free to PM me if you are running in website issues (web errors or if you have any concerns) DO NOT PM ME HOW TO SOLVE THE STEPS.

Yes, don't PM me either.

If you have any issues with the server itself, contact Crystallize.
If you believe it's an issue with the actual CODE, then please PM me. There shouldn't be any issues though, I've tested this numerous times.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - [BLANK] - Mar 8, 2018

Solved it for fun, took about 20 minutes but could have been quicker. Good luck all.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - VmX5 - Mar 8, 2018

(Mar 7, 2018 02:18 PM)Aggron Wrote: ooooh very interesting
at least it's not one of those damn 1 or 1 tasks which were annoying as fuck.

uhuh, are there files missing as it's trying to pull certain images but they got 404'd not sure if they're related to the test

I think you're talking about the favicon, browsers will look for it even if it doesn't have one. If the error is a 404 error looking for a favicon.ico file there isn't anything wrong with the site.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Elitas - Mar 9, 2018

(Mar 8, 2018 05:55 PM)VmX5 Wrote: I think you're talking about the favicon, browsers will look for it even if it doesn't have one. If the error is a 404 error looking for a favicon.ico file there isn't anything wrong with the site.

I believe he was referring to the AES Encryption site, as they do actually have missing images.

RE: [Official Group] Unity Recruitment [#3] Pentesting Challenge - Speci4lK - Mar 9, 2018

(Mar 9, 2018 03:30 AM)Elitas Wrote: I believe he was referring to the AES Encryption site, as they do actually have missing images.

I had the same error as he, but the images are displayed. I'll explain you in PM, i don't wanna give hints