May 1, 2017 03:43 AM
(This post was last modified: May 1, 2017 04:08 AM by King Of Amazon.)
Hey, so the Mossad released a new challenge which I am trying to solve for about an hour.
This is the challenge (Sorry for the huge pic):
![[Image: LfDZ4We.jpg]](https://i.imgur.com/LfDZ4We.jpg)
*YOU HAVE TO HAVE AN ISRAELI VPN TO ACCESS THE WEBSITE BELOW*
I got past the first step, which leads you to this link: deceptionisland.xyz
but I couldn't make it through the second step so I decided to share this with you guys so we could join up our brains and solve this shit! :)
Good luck everyone! (Don't forget to share with us what you found)
Link to last year's challenge thread: hackforums.net/showthread.php?tid=5266155
DO NOT DEAL WITH THIS MEMBER
May 1, 2017 03:48 AM
(This post was last modified: May 1, 2017 03:50 AM by Mr. Robot.)
https://who.is/whois/deceptionisland.xyz
Doesn't seem to point anywhere but it was registered in the last 20 days.
35.187.125.107
(May 1, 2017 03:48 AM)Mr. Robot Wrote: https://who.is/whois/deceptionisland.xyz
Doesn't seem to point anywhere but it was registered in the last 20 days.
Yeah the challenge is brand new.
DO NOT DEAL WITH THIS MEMBER
May 1, 2017 03:55 AM
(This post was last modified: May 1, 2017 03:55 AM by Mr. Robot.)
(May 1, 2017 03:49 AM)King Of Amazon Wrote: Yeah the challenge is brand new.
Well it's inactive so...
unless the next step is also hidden inside the image, or the who.is
May 1, 2017 04:07 AM
(This post was last modified: May 1, 2017 04:08 AM by King Of Amazon.)
(May 1, 2017 03:55 AM)Mr. Robot Wrote: Well it's inactive so...
unless the next step is also hidden inside the image, or the who.is
Oh nvm I just tested with a vpn and the site is inactive for anyone who tries to access it outside of Israel. Sorry, didn't know that. So the only way you can try and solve it is getting an Israeli VPN.
DO NOT DEAL WITH THIS MEMBER
(May 1, 2017 04:07 AM)King Of Amazon Wrote: Oh nvm I just tested with a vpn and the site is inactive for anyone who tries to access it outside of Israel. Sorry, didn't know that. So the only way you can try and solve it is getting an Israeli VPN.
http://teleport.to/Israel/ should work I hope. I'll try it shortly.
Well, the first challenge is hard!
1. It seems that if you register, there are other 36 "people" waiting in line.
I tried to get their password using the "Forgot Your Password?" page. All of them yield "Password hint is not set for user {user}".
2. Thought about SQL injection, but every try with OR 1=1 didn't work.
3. I did noticed that when you register, a cookie is set with your name, encoded in base64.
I think the key to solve it is by spoofing the cookie.
May 1, 2017 05:41 AM
(This post was last modified: May 1, 2017 06:23 AM by King Of Amazon.)
(May 1, 2017 05:34 AM)ocp1000 Wrote: Well, the first challenge is hard!
1. It seems that if you register, there are other 36 "people" waiting in line.
I tried to get their password using the "Forgot Your Password?" page. All of them yield "Password hint is not set for user {user}".
2. Thought about SQL injection, but every try with OR 1=1 didn't work.
3. I did noticed that when you register, a cookie is set with your name, encoded in base64.
I think the key to solve it is by spoofing the cookie.
Nice find! Gonna try playing with it now. Keep on the great job!
Keep on posting suggestions guys!
It's seem like base64 code, I decoded it and got another base64 code - I decoded it too but I got gibberish...
(May 1, 2017 07:12 AM)omritoter Wrote: It's seem like base64 code, I decoded it and got another base64 code - I decoded it too but I got gibberish... You're talking about the name in the cookies?
It's the name you've chosen, encoded in base64.
I succeeded login to the next step.
I am in the chatrooms and I think we need join to an another room..
(May 1, 2017 08:35 AM)omritoter Wrote: I succeeded login to the next step.
I am in the chatrooms and I think we need join to an another room..
How did you manage to solve it?
Their website is down? I can't access it, even with an israeli proxy.
it's up but the first step is kinda hard.. how did you manage to solve this omritoter?
(May 1, 2017 09:12 AM)Beladonis Wrote: Their website is down? I can't access it, even with an israeli proxy.
Nope, it's still online. Try with a vpn or another proxy.
|
