Exploits

[not_essence2]

Just another bout of the illness we we all are familiar with, "curiosity".
How did HTS choose the exploits it wants the users to learn about in the missions? Did it take a few common exploits, and mix them in with some more rare exploits? Did it take a list of them? Mix in some 0 day attacks (of course, that would be back in the early days of the Internet) as well? Was it the creator's own expertise in exploits?
Also, will the missions ever be updated with new vulnerabilities to be taught?

[weekend hacker]

All of the above. Some ware based on real hacks. Some are made up to facilitate common exploits. Some ware made hard with what at the time was fairly unknown. Some started off as a list of real exploits(ever notice that the irc ones aren't sequential? that is because 2 of them on my list ware too tricky for me to actually implement)
There will in the future be new stuff, but considering the nature of the site its often difficult to find good staff to write them.(people are unpayed, easily distracted and lazy)
Users are of course welcome to create missions themselves. After running a beta of it on the forum it could be included in the rest of the site.
There are some ideas floating around, but turning them into reality isn't always easy.

If anyone here is sufficiently good at ipfw/pf settings (nat, reverse nat, setting+cleanup scripts, on a multiple ip setup) feel free to PM me if you want to be put to work

[not_essence2]

Thanks for the thorough answer.
Hmm, I now feel like poking around various SQL, HTML, PHP, etc. related tutorials to see if I can find a 0-day attack...
(It's probably not going to happen, but I'll still learn some languages)

[limdis]

Thanks for the thorough answer.<br>Hmm, I now feel like poking around various SQL, HTML, PHP, etc. related tutorials to see if I can find a 0-day attack...<br>(It's probably not going to happen, but I'll still learn some languages)

do it

[not_essence2]

Zero chance that I wouldn't.