Try 2 Hack

[chemicalNova]

Hi,

Try2Hack.nl, years ago.. was pretty good. But it has since died.

A new site Try2hack.lt is now up.. I've already started on it.. what level can you randoms get to?

I'm on level 7 now.. this one is a little harder, so I'm going to have to bludge a whole lot more at work to get it done..

::[ Try to hack ]::

Give it a shot!

chem

[LthL]

I remember these I'll give it a shot but im horrid at it.

[chemicalNova]

Scott managed to already get stuck on Level 2... LOL.

He thinks its "broken".

chem

[ELiTEE]

will give it ago when super board

[Swordfish]

might give this a go

[LthL]

level 3 :< im struggling giving it a break and coming back later

[chemicalNova]

This is how I got past level 3..

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Text;
using System.Windows.Forms;
using System.Net;

namespace filedownloader
{
    public partial class Form1 : Form
    {
        public Form1()
        {
            InitializeComponent();
        }

        private void Form1_Load(object sender, EventArgs e)
        {
            WebClient wc = new WebClient();
            wc.DownloadFile("http://www.try2hack.lt/en/lygiai/level3-kbbe.htm", "C:\\level3-kbbe.htm");
        }
    }
}

..then opened it in Wordpad .. heaps quicker than temp internet files..

chem

[Duke]

This is how I got past level 3..

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Text;
using System.Windows.Forms;
using System.Net;

namespace filedownloader
{
    public partial class Form1 : Form
    {
        public Form1()
        {
            InitializeComponent();
        }

        private void Form1_Load(object sender, EventArgs e)
        {
            WebClient wc = new WebClient();
            wc.DownloadFile("http://www.try2hack.lt/en/lygiai/level3-kbbe.htm", "C:\\level3-kbbe.htm");
        }
    }
}

..then opened it in Wordpad .. heaps quicker than temp internet files..

chem

brb imploding

[LthL]

>________<

[esjay]

brb imploding

i hate coding, and even I understood most of that quite clearly.

Well, i guess most of it is just visual studio classes and systems, not really proper code.

[chemicalNova]

...you can just go through your temp internet files for the page.. view its source in notepad.. bam..

chem

[bokCHOI]

or do it the ez way... and just view source, grab the swf file and decompile it.... like duh?

Oh wait. I just disabled javascript for that page and viewed source.. lol >_>

[fluke]

LOL I AM STUCK ON LEVEL 1!

[LthL]

Wow at level 3 had me going for a while there gay gay gay gay gay gay gay. level 4 now.


EDIT: ERRRRR

[bokCHOI]

Omg um does flash actionscript index's start at 0? Should be...


BINGO. Level 8


Sigh. Time to pull out a debugger and disassembler.. mm which onel...

[God]

Use both!

[DeSiRE]

lol how the fk do u get pass level 1

[Demented_Ducky]

i couldnt get the pw on level 1

[revive]

wtf is this pw -_-

[Sooty]

i thought level 1 pw = password

i've tried guest, as well as other ones

[bokCHOI]

I wonder how keydecoder is going on this.... >_>

[revive]

anyone want to tell us what the password is?

no seriously help plz

[Demented_Ducky]

>________<

I second that motion

[KeyDecoder]

I wonder how keydecoder is going on this.... >_>

Level 7 atm. Supposed to be writing a specification, so have to keep alt-tabbing, damn 22" monitor is too obvious :-) Also, I have no idea about actionscript

[chemicalNova]

Is actionscript 0 indexed or not?

KAKTUSAZX seems like a stupid username.. LOL.

Thats what I get from this..

main = "ABCDEFGHIYJKLMNOPRSTUVZXQW0123456789"
vrt = Mid(main, 12, 1) + Mid(main, 2, 1) + Mid(main, 12, 1) + Mid(main, 15, 0) + Mid(main, 20, 1) + Mid(main, 21, 1) + Mid(main, 19, 1) + Mid(main, 1, 1) + Mid(main, 23, 2)
MsgBox vrt

chem

[revive]

i give up

[bokCHOI]

actionscript 0 is indexed.

And don't bother going for usernames.... just go straight for the URL. The second part of toliau I guessed from the if condition.

I'll pm answer if you guys want.

EDIT

ITS NOT.

Lol >_> my bad, must have counted fingers wrong

CHEMM CHEMMMMMMMMMMMMMMMMMMMMMMMMMMMMM

starts with...... R

[emagine]

First level is almost always the same LOL.

Answer is in page source for the people who are stuck

[loops]

anyone got links to a tutorial for this sorta thing? I'd rather learn how to work it out then just google the answers.

ps. >________<

EDIT: ta emagine

[1BAD33]

Cant do 3

[1BAD33]

anyone got links to a tutorial for this sorta thing? I'd rather learn how to work it out then just google the answers.

ps. >________<

EDIT: ta emagine

View the source code. Try and see what function is being called. Check what the function is looking for. To view source code (in firefox) rightclick the frame(somewhere where you want to look in the window with the password box) then browse the code for the password. For page two they disable the right click button and since the website uses a frame you have to find an alternate way to right click the frame. Look at your keyboard....and remember to follow function calls to the function it self.

[bokCHOI]

movie 'C:\Documents and Settings\van\Desktop\leval7.swf' {
// flash 6, total frames: 1, frame rate: 12 fps, 285x117 px, compressed

frame 1 {
_root.user = '';
_root.pass = '';
main = 'ABCDEFGHIYJKLMNOPRSTUVZXQW0123456789';
vrt = substring(main, 12, 1) + substring(main, 1, 1) + substring(main, 12, 1) + substring(main, 15, 0) + substring(main, 20, 1) + substring(main, 21, 1) + substring(main, 19, 1) + substring(main, 1, 1) + substring(main, 23, 2);
}

button 9 {

on (release, keyPress '<Enter>') {
a = _root.user;
b = _root.pass;
toliau = substring(_root.main, 18, 2) + substring(b, 3, 1) + substring(b, 6, 1);
if (a == vrt && substring(b, 3, 1) * substring(b, 6, 1) == 72) {
getURL('level8-' + toliau + '.htm', '_self');
} else {
_root.pass = '';
_root.user = '';
}
}
}
}

For you chem.

[KeyDecoder]

actionscript 0 is indexed.

And don't bother going for usernames.... just go straight for the URL. The second part of toliau I guessed from the if condition.

I'll pm answer if you guys want.

EDIT

ITS NOT.

Lol >_> my bad, must have counted fingers wrong

CHEMM CHEMMMMMMMMMMMMMMMMMMMMMMMMMMMMM

starts with...... R

Haha, no wonder it didn't work for me, stupid non-zero indexed substrings routines. Strange, I looked up the substring function and it said it takes 0 as an input, how odd.

[fuckwitBATTLECRAB]

aush0k won this game. real e-boss. He is now the final level

[loops]

aush0k won this game. real e-boss. He is now the final level

first person to get a swat team sent to their house loses.

[bokCHOI]

got it yet keydecoder? I gave enough clues =[


I need your 'decoding' skills now..

[bokCHOI]

Any one need help?

[KeyDecoder]

got it yet keydecoder? I gave enough clues =[


I need your 'decoding' skills now..

Yeah, on Level 8 now. Still thinking about this one.

[mONk.]

no you're a hack..

p.s. its on its way

[bokCHOI]

I was thinking along the lines of using a delphi decompiler... then it came back that it was packed ( not surprising.... ) but then I couldn't come up with what it was packed with and how it was fuzzed.

edit.

Came back as nothing x[.



Mmm I think I'll try a memory editor, see if the password is loaded as a string or not.