wargame #3

Post by **bad_brain** » 16 Sep 2006, 08:40

Scenario:

Jane has stolen some information from a corporation, a corporation that hired you to get it back. She's using the Encryption-Expertz website to keep the file, secret.enc, safe, but we're sure there's a hole somewhere in it. All we know is that the file is in the /jane directory. Good luck.

this wargame is located on:
http://www.suck-o.net/wargames/3/index.php
same rules as on wargame #1 and #2.

cheers to gogeta for developing this wargame!

Post by **Gogeta70** » 20 Sep 2006, 21:47

I have received some reports that there is an error in this challenge, etc. I have spent alot of time coding this challenge, anything in this challenge is completely intentional, including any errors. However, if you insist on thinking something is wrong, feel free to PM me and i'll take a look.

z3mwaz · Post by **z3mwaz** » 20 Sep 2006, 23:58

Sorry for the n00b question,
but what are/where are the rules for this wargame?

Post by **pseudo_opcode** » 21 Sep 2006, 02:04

by /jane directory do you mean http://69.81.139.78:81/game3/jane or http://69.81.139.78:81/jane or /jane of the server...
i know its kinda retarded but i think i just need proper traversal and i m almost there...

Post by **bad_brain** » 21 Sep 2006, 03:39

z3mwaz, you can find it in the wargames info/rules-thread...

pseudo_opcode, /jane is in the /game3/-directory...

Post by **pseudo_opcode** » 21 Sep 2006, 07:45

does this mean anything...

Code: Select all

ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadb        ccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeab    cedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedef
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeÿ
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadb        ccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeab   fcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeÿ
ccbbdbfbdadaffdbefefccaabffcdebfdcfbcaeabcaffcedeb
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdd
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebd			     d
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdde        d
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfced
cbbbeebfeeefdecbeededfdcfaeecadebdbafcbfccfbdcfcdcdcedfbbbfceÿ

i this is after messing with all three files and combining.. i see so much possibilities that its hard to figure out which is true... the file is 8 bytes long including eof.. here we can see 7 spaces....

Post by **pseudo_opcode** » 21 Sep 2006, 08:00

if thats not crazy enough then check this out

Code: Select all

575794408543649204468172414942372668536		     634936967570329913588600669564691987816538527333658728025
575794408 4364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
5757944085436492044681724149423
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
575794408543649204468172414942372668536002182234617176349369675703299135886006695646919878165385      58728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025
57579440854364920446817241494237266853600218223461717634936967570329913588600669564691987816538527333658728025

Ok now plz dont tell me that this code was generated randomly and has nothing to do with encryption or the wargame

Wohoo!! my 100th post.. still have never been of much help to the community

Nerdz · Post by **Nerdz** » 21 Sep 2006, 10:18

This has nothing to do with the wargame... you are overkilling it

Post by **pseudo_opcode** » 21 Sep 2006, 11:07

but what do you mean by a file secret.enc which says nothing but hello... is that the info corporation wants and whats up with the message "sorry this is simulation, ..... you are on right track.....keep on tryin"

how do you connect both? i thought that message hello was encrypted or some key to something..

Post by **Gogeta70** » 21 Sep 2006, 14:41

There should be an HTACCESS file in the /jane directly, blocking direct access to it. And no, the encryption has nothing to do with the wargame, i just generated a bunch of random encryptions and put them in files. Also the "Sorry this is a simulation message" is there because if i actually made that exploit available, you could access anything on the box that is hosting that web page. Also, this is a GAME, i made it as realistic as possible, gimme a break, heh.

Borek · Post by **Borek** » 26 Sep 2006, 12:57

I HAVE HACK the wargame and:

[edited out spam]

but i coludt open the FILE 4 !! WHY !

Post by **Gogeta70** » 26 Sep 2006, 13:20

Read the mission again. That's not what you're supposed to do.

z3mwaz · Post by **z3mwaz** » 26 Sep 2006, 14:07

i bet he posted part of the game, didnt he?

Dont u see how thats not helping other?
if you get something that is unknow to new players , dont post it?
one word "cheating"
oh and just to let you know i think theres more to the game than what you got.
read some of the other post under wargame 3.

Read, Read, Read,
then when you get bored.
Post a question
and Read some more

Nerdz · Post by **Nerdz** » 26 Sep 2006, 20:26

z3mwaz wrote:Read, Read, Read,
then when you get bored.
Post a question
and Read some more

AMEN.

Post by **floodhound2** » 20 Feb 2007, 11:02

I am addicted and need to say thanks for the games. I have basically learned PHP code “involuntary” and it also gives me something to do while at work.

Thus said, I think I need to check myself in to the mental ward again.

Thanks a bunch suck-o