Hack server - Need help on competition

General technological topics without their own forum go here

Hack server - Need help on competition

Post by poyohacker on Sat Dec 01, 2012 8:01 am
([msg=71444]see Hack server - Need help on competition[/msg])

Hi guys,
I'm not so sure where to get help so I guess I'll try my luck here. I hope you guys can advice me on this one. :)

There's a hacking competition going on my area here since yesterday and yesterday was beginner level. I was able to get the file in the server as hints were given during that day. So today, the 2nd day, which is intermediate level, I'm stuck at a point.These are the hints:

1. FTP&Web access to root is enabled.
2. Admin pass is simple alphanumeric 5 char long
3. Hide&seek is what you need, one or two or both of them.

So I'm guessing I should start gaining access to ftp as root? The thing that really bothers me is the third hint. Any recommended software? Yesterdays was so simple so I just use hydra.

Thank you very much.

The prize for the competition is samsung s3 btw.... Really desperate lol.
poyohacker
New User
New User
 
Posts: 4
Joined: Sat Dec 01, 2012 7:52 am
Blog: View Blog (0)


Re: Hack server - Need help on competition

Post by Amazingred on Sat Dec 01, 2012 8:23 am
([msg=71447]see Re: Hack server - Need help on competition[/msg])

xhydra refine the parameters to only use 5 alphanumeric characters and then go make a "sammach". By the time you're done chowing down (give or take an hour) you'll have admin access.
Last edited by Amazingred on Sat Dec 01, 2012 8:31 am, edited 1 time in total.
There are 10 types of people in the world. Those who understand binary and those who don't.
User avatar
Amazingred
Experienced User
Experienced User
 
Posts: 73
Joined: Wed Jul 25, 2012 7:10 pm
Location: Wayyyyyy out there
Blog: View Blog (0)


Re: Hack server - Need help on competition

Post by poyohacker on Sat Dec 01, 2012 8:28 am
([msg=71448]see Re: Hack server - Need help on competition[/msg])

Nice.... Thanks for the swift reply.
Yes I'd figured it might be something like that but the third hint really bugs me. :(
Does the hint refers to the 1st hint? Do we need to gain access from both ftp or web access or what?
poyohacker
New User
New User
 
Posts: 4
Joined: Sat Dec 01, 2012 7:52 am
Blog: View Blog (0)


Re: Hack server - Need help on competition

Post by Amazingred on Sat Dec 01, 2012 8:45 am
([msg=71449]see Re: Hack server - Need help on competition[/msg])

Don't really have a clue about the clues he gave. I'm not exactly sure what a win scenario is for your contest but the Hide & Seek thing could mean you're supposed to gain access via a Man In The Middle attack by sending ARP packets then using something like ettercap/Cain&Able to sniff the credentials as someone logs in. Can't say for sure as I don't know the details.
There are 10 types of people in the world. Those who understand binary and those who don't.
User avatar
Amazingred
Experienced User
Experienced User
 
Posts: 73
Joined: Wed Jul 25, 2012 7:10 pm
Location: Wayyyyyy out there
Blog: View Blog (0)


Re: Hack server - Need help on competition

Post by poyohacker on Sat Dec 01, 2012 9:20 am
([msg=71451]see Re: Hack server - Need help on competition[/msg])

Now that you've mentioned it, that sounds plausible.
From the hint, maybe I can just bruteforce, or use ARP or both?
poyohacker
New User
New User
 
Posts: 4
Joined: Sat Dec 01, 2012 7:52 am
Blog: View Blog (0)


Re: Hack server - Need help on competition

Post by weekend hacker on Sat Dec 01, 2012 10:07 am
([msg=71454]see Re: Hack server - Need help on competition[/msg])

Hide and seek could refer to files that are public, but have no direct link to them making them.. hidden. robots.txt and checking if directories on web list their content could be worth a try. Maybe even .htaccess protected but with a way to get the .htaccess file(like in some random mission of ours)

good luck
<Yoda> if someone says something i don't like, i ban him, ban whoever defends him, and then ban the witnesses...
User avatar
weekend hacker
Administrator
Administrator
 
Posts: 192
Joined: Sun Apr 13, 2008 2:39 pm
Location: 127.0.0.1
Blog: View Blog (0)


Re: Hack server - Need help on competition

Post by poyohacker on Sun Dec 02, 2012 8:04 am
([msg=71470]see Re: Hack server - Need help on competition[/msg])

Update on the competition.... Well sadly I didn't managed to win. :(
ALMOST~ win~

I managed to access the server and the file was encrypted.

So that's it. :(
poyohacker
New User
New User
 
Posts: 4
Joined: Sat Dec 01, 2012 7:52 am
Blog: View Blog (0)



Return to General

Who is online

Users browsing this forum: No registered users and 0 guests