ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › [Challenge 3] Break the cipher and steal the root creds.

New Reply 

[Challenge 3] Break the cipher and steal the root creds.
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Aug 31, 2015 11:11 AM (This post was last modified: Sep 16, 2015 08:58 AM by Viktory.)
Challenge 2 here
-
Break the cipher, find the website and PM me it's root mysql creds to win a cookie.

Cipher
ksv_wsvrwbfuskkj_rrAkxrAduoA

Hint
http://pastebin.com/3mFSecJb
Also feel free to pm me if you're stuck somewhere

Solvers
chicken man (only broke cipher)
giant (only broke cipher)
carelesmind (only broke cipher)
Beladonis
DanGerੴ

As always, this ends in 2 weeks and I'll post solution then.
Can you hear my voice
come thru the music?
Beladonis
Beladonis Offline
????
***
HF Ub3r
Posts:
1,688
Threads:
58
Credibility:
000
Popularity:
1,376
βytes:
β 0
Game XP:
229,571
Aug 31, 2015 11:42 AM
I have no knowledge on decryption / deciphering... What kind of tool do we have to use ?
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Aug 31, 2015 12:07 PM
(Aug 31, 2015 11:42 AM)Beladonis Wrote:  I have no knowledge on decryption / deciphering... What kind of tool do we have to use ?

brain.exe
Can you hear my voice
come thru the music?
Beladonis
Beladonis Offline
????
***
HF Ub3r
Posts:
1,688
Threads:
58
Credibility:
000
Popularity:
1,376
βytes:
β 0
Game XP:
229,571
Aug 31, 2015 12:15 PM
So we don't need any tool but just the hint you have posted... okay
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Sep 1, 2015 02:21 AM
Updated hint, maybe now you guys have a better idea on what to do.
Can you hear my voice
come thru the music?
chick3nman
chick3nman Offline
Mostly a chick3n, partially a man.
***
HF Ub3r
Posts:
3,705
Threads:
4
Credibility:
000
Popularity:
50
βytes:
β 0
Game XP:
0
Sep 1, 2015 11:08 AM (This post was last modified: Sep 1, 2015 11:08 AM by chick3nman.)
(Sep 1, 2015 02:21 AM)Viktory Wrote:  Updated hint, maybe now you guys have a better idea on what to do.

The original hint, and the cipher part all together was easy. However, I don't do website exploitation so that's where my journey through this challenge ends. Still a cool idea, I'm happy(heh) to see users posting fun little challenges like this. I enjoy puzzles :P
My PGP key is available here: https://keybase.io/chick3nman
[Image: keCy9xR.png]
BTC: 1Chick3nMTco6sBEByKuvmAzYTBsGN5KzD
Beladonis
Beladonis Offline
????
***
HF Ub3r
Posts:
1,688
Threads:
58
Credibility:
000
Popularity:
1,376
βytes:
β 0
Game XP:
229,571
Sep 1, 2015 11:16 AM (This post was last modified: Sep 1, 2015 11:29 AM by Beladonis.)
I can't break the cipher... I thought it was rot3 encrypted or something like that, but apparently it isn't
Can you give another hint ?
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Sep 2, 2015 02:22 AM
(Sep 1, 2015 11:08 AM)chick3nman Wrote:  The original hint, and the cipher part all together was easy. However, I don't do website exploitation so that's where my journey through this challenge ends. Still a cool idea, I'm happy(heh) to see users posting fun little challenges like this. I enjoy puzzles :P

haha, good job!

I thought I spoiled it with the hints but nobody else has been able to do it...

The attack vector you can use in the website is fairly easy to find, give it a try. 👍
Can you hear my voice
come thru the music?
Wireless Network
Wireless Network Offline
WPA2-PSK
***
HF Ub3r
Posts:
4,069
Threads:
162
Credibility:
000
Popularity:
83
βytes:
β 0
Game XP:
0
Sep 2, 2015 06:56 AM
(Aug 31, 2015 12:07 PM)Viktory Wrote:  
brain.exe

Can you send me download link?

Spoiler (Click to View)
[Image: N43q1sy.png]
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Sep 2, 2015 11:24 AM (This post was last modified: Sep 2, 2015 11:26 AM by Viktory.)
(Sep 1, 2015 11:16 AM)Beladonis Wrote:  I can't break the cipher... I thought it was rot3 encrypted or something like that, but apparently it isn't
Can you give another hint ?

That's not all there is to it. Two steps in the process, nothing will make sense till you complete both. Take a look at step 2, compare with what characters stand out in the cipher. If you got that right, you did step 1 correct.

And good luck to everyone attempting it.
Can you hear my voice
come thru the music?
giant
Guest
 
Sep 2, 2015 11:56 AM
Can't PM as I'm new but I've got the URL:
h*****o******o*l.***/
(hopefully that should be clear to OP without giving it away to anyone else)
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Sep 2, 2015 12:08 PM
(Sep 2, 2015 11:56 AM)giant Wrote:  Can't PM as I'm new but I've got the URL:
h*****o******o*l.***/
(hopefully that should be clear to OP without giving it away to anyone else)

Good job, now get dem creds.
Can you hear my voice
come thru the music?
giant
Guest
 
Sep 2, 2015 12:37 PM
Can you PM me? I assume I can reply to PMs just not send them first?

I have found something but unsure if it is what you're looking for. I have admin access to some sort of control panel where I can seem to manage gallerys etc but this is separate from the user login at the bottom. Not sure which you're looking for. I assume not this one
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Sep 2, 2015 01:21 PM
(Sep 2, 2015 12:37 PM)giant Wrote:  Can you PM me? I assume I can reply to PMs just not send them first?

I have found something but unsure if it is what you're looking for. I have admin access to some sort of control panel where I can seem to manage gallerys etc but this is separate from the user login at the bottom. Not sure which you're looking for. I assume not this one

nah you won't be able to reply to me, sent you my contact in pm.
Can you hear my voice
come thru the music?
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Sep 5, 2015 11:13 AM
Got one more solver for the cipher but nobody wants to hack the actual website.. lol

not that hard guise
Can you hear my voice
come thru the music?
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ~[DogiD]~Jul 28, 2021 03:02 AM 26 1,689 Jul 28, 2021 03:02 AM
Last Post: bgyacine
by frank3nstienJul 18, 2019 10:38 PM 2 325 Jul 18, 2019 10:38 PM
Last Post: frank3nstien
by EbonCipherOct 28, 2018 01:41 AM 14 804 Oct 28, 2018 01:41 AM
Last Post: ApertureSecurity