NGSec [Hacking]

[Newby]

I'm stuck on level 10. I think the binary is encrypted. :/

http://quiz.ngsec.biz/game1

[deadly7]

I've been playing this game for the last HALF HOUR. I can't even get past level 2. i've tried this:

<Start -Run>
TELNET quiz.ngsec.com 80
(boom it opens up that)
GET /game1/level2/l33t.php HTTP/1.0

And I've even tried
GET /l33t.php HTTP/1.0

I'm a bad haxxor. :(

[Networks]

I've been playing this game for the last HALF HOUR. I can't even get past level 2. i've tried this:

<Start -Run>
TELNET quiz.ngsec.com 80
(boom it opens up that)
GET /game1/level2/l33t.php HTTP/1.0

And I've even tried
GET /l33t.php HTTP/1.0

I'm a bad haxxor. :(

Don't you have to type the full URL like:

GET quiz.ngsec.com/game1/level2/l33t.php HTTP/1.0

or which ever file, I know I do that in trying to get my news text file for vanquish using the winsock control.

[rabbit]

You don't use get at all for level 2, and your request is invalid anyways:

cls
telnet quiz.ngsec.com 80
POST /game1/level2/validate_l33t.php HTTP/1.0
Host: quiz.ngsec.com
Referer: http://i.own.your.mom/
From: iown@your.mom
User-Agent: HTTPTool/1.0
Content-Type: application/x-www-form-urlencoded
Content-Length: 11

password=:)

The password and referer are WRONG, because I don't want to GIVE you the answers, but you get the point :)


[edit]
Got to level 5 in 25 minutes.  I'm stopping now to go do other things.

[Mythix]

I think level 5 is where I stopped at last time and gave up on it.

[deadly7]

You don't use get at all for level 2, and your request is invalid anyways:

cls
telnet quiz.ngsec.com 80
POST /game1/level2/validate_l33t.php HTTP/1.0
Host: quiz.ngsec.com
Referer: http://i.own.your.mom/
From: iown@your.mom
User-Agent: HTTPTool/1.0
Content-Type: application/x-www-form-urlencoded
Content-Length: 11

password=:)

The password and referer are WRONG, because I don't want to GIVE you the answers, but you get the point :)


[edit]
Got to level 5 in 25 minutes.  I'm stopping now to go do other things.

WTF ARE THOSE LINKS FOR THEN?! :(

[rabbit]

Examples.

[deadly7]

Not those..
Go back to the page, and then click the links it gives..
If you don't use the GET command, wtf DO you use?

[iago]

Besides GET, there is also POST, HEAD, and I think WRITE. 

[rabbit]

The link given is an introduction to the use of HTTP, you're supposed to go further and figure out how you can do what you need to to progress.

[vursed]

http://quiz.ngsec.biz:8080/game1/level1/index.php
http://quiz.ngsec.biz:8080/game1/level2/l33t.php
http://quiz.ngsec.biz:8080/game1/level3/NGrules.php
http://quiz.ngsec.biz:8080/game1/level4/tryforfun.php
http://quiz.ngsec.biz:8080/game1/level5/achtung.php
http://quiz.ngsec.biz:8080/game1/level6/replicant.php
http://quiz.ngsec.biz:8080/game1/level7/net-dreamer.php

as far as i got.

edit.. found a guide .. heh

http://nocon.darkflame.net/notes/Game1-solutions.txt