Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Security Challenge 1 re-visited.

Options
  • 02-02-2012 12:33am
    #1
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭


    Decided to put this back up for people who missed it. If your stuck, you can look through the old threads. The old threads also contain a solution if your really stuck. Passwords and stuff have been changed since.


    The other challenges aren't suitable to host on free hosting.

    http://damo.clanteam.com/sch1


Comments

  • Options
    #2
    900913
    Registered Users Posts: 367 ✭✭900913


    I enjoyed that. I could spend hours on end messing with these types of vulnerabilities.

    Thanks :-)


  • Options
    #3
    dlofnep
    Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    Unless I had something cached, there was no challenge to complete - Just a hall of fame page without authentication? Unless it's saved from the last time I did it? Confused..


  • Options
    #4
    gouche
    Registered Users Posts: 416 ✭✭gouche


    I had the same issue as dlofnep - clicked admin button and it allowed me to put name on Hall of Fame.

    Feel free to delete my name as I didn't actually complete the challenge:P


  • Options
    #5
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    Oops, accidentally ran some "fixer" on the free hosting last night which modified some important files I had hosted. Its fixed now though.


  • Options
    #6
    dlofnep
    Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    Cool done. I noticed you implemented extra security on other areas of the system this time ;)


  • Advertisement
  • Options
    #7
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    dlofnep wrote: »
    Cool done. I noticed you implemented extra security on other areas of the system this time ;)

    heheh not me, that comes as part of the free web-hosting :-)


  • Options
    #8
    900913
    Registered Users Posts: 367 ✭✭900913


    Are you going to re-visit any more of the older challenges?

    I think these challenges are great for learning, I've learned lots of new stuff the fun way :-)


  • Options
    #9
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    I'm afraid the other challenges aren't really suitable to host on free webspace.


  • Options
    #10
    DonkeyStyle \o/
    Closed Accounts Posts: 7,145 ✭✭✭DonkeyStyle \o/


    Thanks. Very educational. And a bit scary, which is always a good sign.
    Had JTR running for about 90 mins on 4 cores, then tried the 'all' wordlist and got it in a split second (facepalm)


  • Options
    #11
    JimmyCrackCorn
    Registered Users Posts: 1,691 ✭✭✭JimmyCrackCorn


    I have it


    Nice one btw. Enjoyed that allot.
    Need to get wordlists off machine i packed away.


  • Advertisement
  • Options
    #12
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    I think the bigger one that comes with John the Ripper should be fine.


  • Options
    #13
    dlofnep
    Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    People must remember, it's just a game - so Damo will never make you jump through hoops for one very small thing such as the above.


  • Options
    #14
    JimmyCrackCorn
    Registered Users Posts: 1,691 ✭✭✭JimmyCrackCorn


    Thanks damo complete.

    Id love to do a few more of these. Thanks for going to the effort of making it.


  • Options
    #15
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    JimmyCrackCorn wrote: »
    Thanks damo complete.

    Id love to do a few more of these. Thanks for going to the effort of making it.

    Feel free to try:
    http://damo.clanteam.com/sch6
    http://damo.clanteam.com/sch7


  • Options
    #16
    JimmyCrackCorn
    Registered Users Posts: 1,691 ✭✭✭JimmyCrackCorn


    Thanks Damo.

    That's sch6 complete. Spent a while trying to get the syntax right.


  • Options
    #17
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    Sweet,

    there also is:

    http://damo.clanteam.com/pin
    http://damo.clanteam.com/sch2


  • Options
    #18
    [-0-]
    Closed Accounts Posts: 3,981 ✭✭✭[-0-]


    Got this one as well. Cheers again Damo.


  • Options
    #19
    jank
    Banned (with Prison Access) Posts: 13,018 ✭✭✭✭jank


    Bumping this as not sure if the same weakness is there?
    Tried the http://damo.clanteam.com/sch1/index.php?page=/etc/passwd but no cigar


  • Options
    #20
    h57xiucj2z946q
    Closed Accounts Posts: 2,267 ✭✭✭h57xiucj2z946q


    Right idea, but wrong file. You cannot transverse outside my webroot.


  • Options
    #21
    jank
    Banned (with Prison Access) Posts: 13,018 ✭✭✭✭jank


    Thanks, got it after lots of cheating. Onto the second one now.


  • Advertisement
Advertisement