Please ask questions ONLY in this topic.

[-Ninjex-]

You can't reverse hashes. That's the point of the algorithm. You'll have to brute force it.

then... is there anyway to gain access without the password? like reverse engineering the whole site?(i'm still curious bout the reverse engineering part in the mission description)

You don't need to find another access point. You need to bruteforce the password. It's not very hard to bruteforce hashes honestly. Go look at John The Ripper...

[Snipeon]

You can't reverse hashes. That's the point of the algorithm. You'll have to brute force it.

then... is there anyway to gain access without the password? like reverse engineering the whole site?(i'm still curious bout the reverse engineering part in the mission description)

You don't need to find another access point. You need to bruteforce the password. It's not very hard to bruteforce hashes honestly. Go look at John The Ripper...

No no no no, i've already downloaded cain and finished the mission. as i've said, i'm CURIOUS bout whether there's any way to reverse engineer the site to allow access. that's what i'm interested in. not completing the mission.

[-Ninjex-]

No no no no, i've already downloaded cain and finished the mission. as i've said, i'm CURIOUS bout whether there's any way to reverse engineer the site to allow access. that's what i'm interested in. not completing the mission.

I'm pretty sure reverse engineering is basically just like footprinting to gain detailed information on how something works. Using the term of footprinting doesn't actually do anything. Say something such as: I wonder if you can find exploitable vulnerabilities in the website whcih allow a different access point. My answer to that would be yes, possibly. Although the devs did create these missions sort of one way so that you can't really hack hackthissite, but it is a possibility. On realistic mission 11, after reading the forums, I completed the mission in a slightly similar way, yet it was different and much faster.

[Snipeon]

hmm... interesting... teach me master! actually, don't bother, just hint me. i like finding the answers myself. on a side note, yesterday, while i was think bout this mission, i wondered whether there's actually a way to trick the site into skipping out on hashing the password, meaning we directly just submit the hash to be compared. is it doable?