Please ask questions ONLY in this topic.

Please ask questions ONLY in this topic.

Post by LvK on Sun Apr 20, 2008 2:00 pm
([msg=845]see Please ask questions ONLY in this topic.[/msg])

So far, I've found out about the password-protected directory, and that's it. I'm pretty clueless about what to do now.
Would anyone mind giving a hint? Where should I start looking? I'm confused.

EDITED BY FAITH

Please ask questions only in this topic.
Just to keep the forum neat, and hopefully your post more noticed.
Please help us to keep the forum clean by report trashy posts. :>
You may start a new post if you're making a tutorial. However, if the tutorials are similar, please do not make two.

I wish you best luck with this mission, and hope you enjoy it.

<3 faith.
Last edited by LvK on Mon Apr 21, 2008 12:22 am, edited 1 time in total.
LvK
New User
New User
 
Posts: 2
Joined: Sun Apr 20, 2008 8:47 am
Blog: View Blog (0)


Re: Clueless.

Post by max_1250 on Sun Apr 20, 2008 6:08 pm
([msg=857]see Re: Clueless.[/msg])

I'm at the exact same point as you... If anyone could give us a path to follow or a starting tip... anything. I don't know where to look =(
max_1250
New User
New User
 
Posts: 18
Joined: Tue Apr 15, 2008 2:53 pm
Blog: View Blog (0)


Re: Clueless.

Post by max_1250 on Sun Apr 20, 2008 6:21 pm
([msg=859]see Re: Clueless.[/msg])

I guess I have found some very useful information for this mission, but I don't know what to do with it... I don't quite understand what it means, anyone who has completed the mission could give me a hand on PM please?

For those who are starting : you have to work mostly (at the beginning at least) with the URLs
max_1250
New User
New User
 
Posts: 18
Joined: Tue Apr 15, 2008 2:53 pm
Blog: View Blog (0)


Re: Clueless.

Post by LvK on Mon Apr 21, 2008 12:07 am
([msg=863]see Re: Clueless.[/msg])

max_1250 wrote:I don't quite understand what it means, anyone who has completed the mission could give me a hand on PM please?


Or rather, leave a message here, for everyone in the future who might be clueless about this mission.
LvK
New User
New User
 
Posts: 2
Joined: Sun Apr 20, 2008 8:47 am
Blog: View Blog (0)


Re: Clueless.

Post by max_1250 on Mon Apr 21, 2008 12:02 pm
([msg=880]see Re: Clueless.[/msg])

Yeah, that's what I wanted to do but I didn't want to give spoilers...

I actually managed to finish this mission, but I have to admit the last part of the mission was a bit of luck for me :lol:

Hint: There's a vulnerability in the URL somewhere in this website
max_1250
New User
New User
 
Posts: 18
Joined: Tue Apr 15, 2008 2:53 pm
Blog: View Blog (0)


Re: Clueless.

Post by novalyphe on Mon Apr 21, 2008 6:59 pm
([msg=909]see Re: Clueless.[/msg])

If you're really stuck then a good way to go might be to find out what apache is.
novalyphe
Experienced User
Experienced User
 
Posts: 51
Joined: Mon Apr 14, 2008 11:15 am
Blog: View Blog (0)


I got the hash...

Post by npsken on Tue Apr 22, 2008 2:08 am
([msg=941]see I got the hash...[/msg])

But both John The Ripper and Cain aren't doing anything...

I saved it in hash.txt and tried "john-386.exe hash.txt" but it just says that no hashes were loaded.
Cain says that the hash needs to be exactly 16 bytes.

Can somebody help me via this topic or PM?

Thanks.
npsken
New User
New User
 
Posts: 4
Joined: Sun Apr 20, 2008 8:38 pm
Blog: View Blog (0)


Re: I got the hash...

Post by robi_petranovic on Tue Apr 22, 2008 3:28 am
([msg=945]see Re: I got the hash...[/msg])

In file John is using must be the passwd system... Read your /etc/passwd file. In it you have lines like:
Username:passwordhash:uid:homedir:etc:etc:etc

So you must copy all line, not only hash..... but if you got only the hash, set some random username, like
user:pswhash

and it will work
robi_petranovic
New User
New User
 
Posts: 22
Joined: Thu Apr 17, 2008 1:31 pm
Blog: View Blog (0)


Re: Clueless.

Post by robi_petranovic on Tue Apr 22, 2008 9:25 am
([msg=955]see Re: Clueless.[/msg])

just think of how apache does that popup requesting password..... google
robi_petranovic
New User
New User
 
Posts: 22
Joined: Thu Apr 17, 2008 1:31 pm
Blog: View Blog (0)


Re: I got the hash...

Post by npsken on Tue Apr 22, 2008 11:28 am
([msg=967]see Re: I got the hash...[/msg])

Thanks, that made it work!
npsken
New User
New User
 
Posts: 4
Joined: Sun Apr 20, 2008 8:38 pm
Blog: View Blog (0)


Next

Return to (Real 7) What's Right For America

Who is online

Users browsing this forum: No registered users and 0 guests

cron