Please ask questions ONLY in this topic.

[LvK]

So far, I've found out about the password-protected directory, and that's it. I'm pretty clueless about what to do now.
Would anyone mind giving a hint? Where should I start looking? I'm confused.

EDITED BY FAITH

Please ask questions only in this topic.
Just to keep the forum neat, and hopefully your post more noticed.
Please help us to keep the forum clean by report trashy posts. :>
You may start a new post if you're making a tutorial. However, if the tutorials are similar, please do not make two.

I wish you best luck with this mission, and hope you enjoy it.

<3 faith.

[max_1250]

I'm at the exact same point as you... If anyone could give us a path to follow or a starting tip... anything. I don't know where to look =(

[max_1250]

I guess I have found some very useful information for this mission, but I don't know what to do with it... I don't quite understand what it means, anyone who has completed the mission could give me a hand on PM please?

For those who are starting : you have to work mostly (at the beginning at least) with the URLs

[LvK]

I don't quite understand what it means, anyone who has completed the mission could give me a hand on PM please?

Or rather, leave a message here, for everyone in the future who might be clueless about this mission.

[max_1250]

Yeah, that's what I wanted to do but I didn't want to give spoilers...

I actually managed to finish this mission, but I have to admit the last part of the mission was a bit of luck for me

Hint: There's a vulnerability in the URL somewhere in this website

[novalyphe]

If you're really stuck then a good way to go might be to find out what apache is.

[npsken]

But both John The Ripper and Cain aren't doing anything...

I saved it in hash.txt and tried "john-386.exe hash.txt" but it just says that no hashes were loaded.
Cain says that the hash needs to be exactly 16 bytes.

Can somebody help me via this topic or PM?

Thanks.

[robi_petranovic]

In file John is using must be the passwd system... Read your /etc/passwd file. In it you have lines like:
Username:passwordhash:uid:homedir:etc:etc:etc

So you must copy all line, not only hash..... but if you got only the hash, set some random username, like
user:pswhash

and it will work

[robi_petranovic]

just think of how apache does that popup requesting password..... google

[npsken]

Thanks, that made it work!