Practice Hacking

[grouch]

goto this site to practice hacking.

http://www.try2hack.nl

you may be surprised how easy the first couple are. If you get past level 6 let me know about it. i'm stuck.
good luck.

[GuyverFour]

Go here : http://www.try2hack.nl/levelseven.html

Sorry, can't tell ya how I did it. Good luck.

Guyver Four

[grouch]

I got there a couple hours ago. don't give out the links though so it is as much a mystery to everyone else too. level 7 is a biaatch though isn't it. don't tell me you got past it either. and if you did what the hell did you have to do to get the user name? let the games continue

[d4n13l]

LOL!
Look at what following the level 8 link throws back at me!
"Browser check :Sorry, but you must use Microsoft Internet Explorer 6.72
OS check :Sorry, but you must use a UNIX/LINUX system.
Link check :Sorry, but you must get here from a link on the page: http://www.microsoft.com/ms.htm"

Shame that their "clever" little perl script cant detect my other OS's (FreeBSD, BeOS, 3 Linux's) and have pity on me for being temporarily stuck with a Winmodem!
Gotta get to another PC... one with a real modem...


BTW, Ironically their hosting seems to be Win2k... hmmmm.

<font size=-1>[ This Message was edited by: d4n13l on 2001-11-29 15:46:56 ]</font>

[Dhruv]

I'm stuck on level 5, I've worked out username is Try2Hack but I can't get the password. Can anyone help?

[grouch]

d4n13l

you missed the point of that exercise.
you are supposed to hack the header send info to tell it you have the iternet explorer version 6.72 (doesn't exist) running on a version of linux (not possible) comming from a website internal to microsuck (not likelly)
it's a real challenge to make it say all that but if you figure it out the next one is even better with actual cryptographic crap to hack thru.

Dhruv,
don't get discouraged about level 5. it's really not that hard. you may need to get some toys for it though. that one may be the one that needs the packet sniffer. yeah i think it is actually. get a sniffer and you are in there.

BTW got to level 8 now!!

[Dave B]

Thanks for the link guys.. just wasted a perfectly good evening working my way through the levels.

To do level 7, telnet onto port 80 of the server and cut and paste your "fake" HTTP headers into the request.

I'm NOT going to do any more.. (well, maybe just have a look at level 8 tonite)

[grouch]

Hope i didn't give away anything that you needed to overcome on your own. level 8 is a real good one. if you want a hint, i'll give you one (phf)

ok that is all you get.
BTW I'm DONE!!

those are hard towards the end there.

[d4n13l]

<TABLE BORDER=0 ALIGN=CENTER WIDTH=85%><TR><TD><font size=-1>Quote:</font><HR size=1 color=black></TD></TR><TR><TD><FONT SIZE=-1><BLOCKQUOTE>
On 2001-11-30 05:02:26, grouch wrote:
d4n13l

you missed the point of that exercise.
you are supposed to hack the header send info to tell it you have the iternet explorer version 6.72 (doesn't exist) running on a version of linux (not possible) comming from a website internal to microsuck (not likelly)
it's a real challenge to make it say all that but if you figure it out the next one is even better with actual cryptographic crap to hack thru.
and you are in there.
...
</BLOCKQUOTE></FONT></TD></TR><TR><TD><HR size=1 color=black></TD></TR></TABLE>
Dude, I think that you missed the point of my post. I was just laughing at what the link threw back at me, thats all!
I think that I will have a go at it if I have some spare time, I have never played any hacking games... I generally prefer the real stuff.



<font size=-1>[ This Message was edited by: d4n13l on 2001-11-30 12:30:04 ]</font>

[grouch]

AHHH i now get what you were referring to. my bad. yeah it is pretty ironic isn't it. or is that Moronic?

give it a go though. i learned a couple of things this week, and acuired a couple new tools.

later

[Dhruv]

Ok, I got the SNiffer you sent me but can't figure out what you do with it!

[grouch]

Alright here's what you do with the sniffer.

(background)
That little program you have to enter the name and pass into, will query the info from the net and send back the correct data in the packet.

start the packet sniffer up and tell it to start sniffing. then login with any name and pass. then stop sniffing and look thru the packets it captured. change it from hex to words so it will make sense to you. then look for a packet that has an encrypted username, password and url.

then figure out what Baconian Binary Encryption is, and you are in like Flynn.

Good luck

<font size=-1>[ This Message was edited by: grouch on 2001-12-01 13:21:56 ]</font>

[adamthole]

I'm stuck on level 5, and I am even a Basic coder! My only problem is trying to find a Decompiler, I am sick of their site, and deleting all the links to a compiler. Not telling you how to do it is one thing, but not giving you a decompiler is just mean I have VBDC, but it disnt help me much, or maybe I just dont know how to work it?? Thanks.

[Dhruv]

<TABLE BORDER=0 ALIGN=CENTER WIDTH=85%><TR><TD><font size=-1>Quote:</font><HR size=1 color=black></TD></TR><TR><TD><FONT SIZE=-1><BLOCKQUOTE>
On 2001-12-01 13:19:30, grouch wrote:
...then login with any name and pass...
<font size=-1>[ This Message was edited by: grouch on 2001-12-01 13:21:56 ]</font>
</BLOCKQUOTE></FONT></TD></TR><TR><TD><HR size=1 color=black></TD></TR></TABLE>
What do I login to?!?

[grouch]

when i get home from work tonight i'll hack thru them all again and give you the skinny on what you need to do to get thru that one. i forget what one i need to play with right now and i don't have the ability to play with those programs here at work.

send a message to me and i will hook you up with the other cool tools required for the rest of the challenges.

[grouch]

ok Dhruv

go get these little programs and we'll get you thru the rest of the challenges.

http://65.1.180.93:3000/curl-7.4.1-win32-nossl.zip
http://65.1.180.93:3000/john-16w.zip
http://65.1.180.93:3000/sniffer_setup.exe
http://65.1.180.93:3000/WH200.exe

and i'll explain how to use these after you have them.
curl and john both run best on 95/98 machines. so if you have xp tell it to emulate 95/98.

let me know when you have those. (scan them first. i don't trust me either.)

[adamthole]

I'm on level 6 too, but your links are broken??

[SAFEDISKKILLER21]

how do you do level 2. i passed level 1 just viewing the source. but that is as far as my knowledge gows. can somebody pleaswe explain!!!

[grouch]

Sorry about the broken links. My cable connection died yesterday at 4:27PM EST and has not come back yet. I don't know the alternate locations for those files. Keep trying the links it's going to come back soon.

And for level 2 you need to open that flash file that came with the html and look for the password in that file. Using a hex editor will make it easier but you can still see what you need in notepad too.

[grouch]

i searched the net a little and here is a couple of the files you will need.

http://ftp.cerias.purdue.edu/pub/tools/unix/pwdutils/john/john-16w.zip
http://curl.linuxworx.com.au/curl-7.4.1-win32-nossl.zip
http://vortex.nsstc.uah.edu/public/outgoing/scottp/sniffer_setup.exe not 100% if this one is same.
http://www.malinverni.com/download/down.asp?program=WH200.zip

not affiliated with any of those so you are advised to virus scan them.

[adamthole]

Thanks grouch, I got the sniffer, and I have all of those files, and i think I found the one with the encrypted passwords, but what do I do from there? Any help will be much appreciated.

[jaw2957]

How the hell do you do level one???? Damn that disney link!!!

[grouch]

Jaw if you are having troubles looking at the source code for level 1 you best give up now. they only get worse from there.

adam, you got the encrypted one that is good. now you need to figure out what baconian encryption is and decypher the password and name. enter it and bam you are on the next level. http://www.google.com will help you on your quest for baconian encryption.

if you need more help i'll be on later too.

[waazid]

n00b on block. Would it be presumptious of me to request assistance for level two? I don't understand where to copy file SWFlash.ocx to for installation. Does anyone remember what it was like learning to crawl?

<font size=-1>[ This Message was edited by: waazid on 2001-12-06 09:19:52 ]</font>

[mschark]

Where do you all recommend geting info on basic hacking for newbies? Small stuff like hacking into websites that require passwords, etc.

[flashjordan]

[quote]
On 2001-12-06 09:18:36, waazid wrote:
n00b on block. Would it be presumptious of me to request assistance for level two? I don't understand where to copy file SWFlash.ocx to for installation. Does anyone remember what it was like learning to crawl?

All you need to do is open the flash file sent with the html (flashlevel2.swf) in notepad. First ones were easy, 8 has me sratching my head... Fun though...

[grouch]

I started a folder on a different drive (had more space) and just cleared the temporary internet files folder. then move over all the stuff downloaded for each level into that new folder and it is easy to play with then.
NT doesn't like you to mess with the files while they are still in that temp internet directory so the new directory really comes in handy.

as for level 2 get the flash file and look at it in notepad. answer should be easy to find.

there really is no how to hack site but there is alot of info about the processes you need to go thru to get the hacker mindset. do a google search for the places to get started.

happy hacking everyone. keep trying.

[adamthole]

Okay, i read about that encryption stuff, and correct me if i'm wrong, but doesnt sniffer already decode it like that for you? you can view it as hex, or text? and I dont know if I have the right password page or not. Can you give me a clue of what kind of stuff to look for? I see something that says something like,

Username

Password

Site

but I thought that would be to easy to be right?? Thanks.

<font size=-1>[ This Message was edited by: adamthole on 2001-12-06 14:46:38 ]</font>

[video567]

well level 4 has me stumpped i opened the html page i opened http://www.try2hack.nl/PasswdLevel4.class with ultraedit and notepad and i dont see anything.. oh well not bAD made it to level 3 by myself. haha thanks for posting the link.. i just used 2 hours of my life i wont get back but had fun searching trough them.. good luck everyone

[grouch]

Adamthole,
you got it last night i know but keep workin for the rest.

video567 you need to get all the files for that level and look at each one. the password will pop out at you. use notepad again if i remember correctly. if not then get a hexeditor. here is a good free one http://www-physics.mps.ohio-state.edu/~prewett/hexedit/hexedit.exe that you can use. you'll need it eventually anyways.

if anyone needs help i'll be glued to the computer this weekend. grouchytim on AIM.
Peace.