Help Me Hack

Page 8 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

Kalvin00

Lifer
Jan 11, 2003
12,705
5
81
Originally posted by: AmdEmAll
I still can't get lvl 3. I'm a newb at h4xing. I opened the source and I know it has something to do with

<body bgcolor="#000000" link="#235711">

Do I have to convert that number to hex or something?

You're a n00b because you don't realize that it doesn't need to be converted *cough*
 

AmdEmAll

Diamond Member
Aug 27, 2000
6,699
9
81
Yeah I new what it was all along, I just copied and pasted it wrong and then I started to think it was more in depth heh.

On 8, where is this 'directory'
 

Kilrsat

Golden Member
Jul 16, 2001
1,072
0
0
Originally posted by: glugglug
Originally posted by: Oscar1613
Originally posted by: glugglug
Level 11 requires cheating because the javascript code is bugged.
Specifically there is no value e such that e.substring(1,2) + e.substring (4,5)+ e.substring (6,7) + e.substring (0,1) + e.substring(5,6)+ e.substring(2,3) + e.substring(3,4) == "e..m.et".

They are looking for "meet." but that doesn't actually work.

its "meet..." ;)

Doesn't work with the extra periods either. The person who wrote that piece of javascript misinterpreted substring(x,y) as taking characters in the index range [x;y) when the function actually uses the range [x;x+y)

Manually editing the URL for the page it's supposed to redirect you to, where they have you enter the 5 passwords again just incase you cheated and got there that way, it becomes quite apparent they actually are looking for meet with exactly one period after it. (even though this doesn't work on the previous input form).

Umm... you suck at teh javascript

You must be thinking of the VB substring function which is (startIndex, length):
JavaScript (and Java) substring goes (startIndex, endIndex)

http://www.jennifermadden.com/162/examples/stringSubstring.html


More proof:

public class test {

public static void main(String[] args) {
String e = "meet...";
String test = e.substring(1,2) + e.substring (4,5)+ e.substring (6,7) + e.substring (0,1) + e.substring(5,6)+ e.substring(2,3) + e.substring(3,4);
System.out.println(test);

}
}

Output:
C:\>java test
e..m.et
 

glugglug

Diamond Member
Jun 9, 2002
5,340
1
81
Ah, you're right, but my mozilla must suck at it too, cause when I typed the 5 inputs in on the first page, that really didn't work in my browser. Maybe missed a '.'?

A quick google search shows that pretty much every other language has the last param to substring being the length.

SML XSLT XPath MYSQL Perl PHP awk C++

Java and Javascript are pretty much the only things using endchar instead of length.
 

dighn

Lifer
Aug 12, 2001
22,820
4
81
Originally posted by: glugglug
Ah, you're right, but my mozilla must suck at it too, cause when I typed the 5 inputs in on the first page, that really didn't work in my browser. Maybe missed a '.'?

A quick google search shows that pretty much every other language has the last param to substring being the length.

SML XSLT XPath MYSQL Perl PHP awk C++

Java and Javascript are pretty much the only things using endchar instead of length.

in js there is both substr and substring, substr uses the 2nd parameter as length, while substring uses the 2nd parameter as the terminal index. and BOTH are used in that code... i was really tired so i didn't see the difference and got really furstrated...
 

glugglug

Diamond Member
Jun 9, 2002
5,340
1
81
Originally posted by: dighn
Originally posted by: glugglug
Ah, you're right, but my mozilla must suck at it too, cause when I typed the 5 inputs in on the first page, that really didn't work in my browser. Maybe missed a '.'?

A quick google search shows that pretty much every other language has the last param to substring being the length.

SML XSLT XPath MYSQL Perl PHP awk C++

Java and Javascript are pretty much the only things using endchar instead of length.

in js there is both substr and substring, substr uses the 2nd parameter as length, while substring uses the 2nd parameter as the terminal index. and BOTH are used in that code... i was really tired so i didn't see the difference and got really furstrated...

wow, never realised that before and didn't notice the 2 different function names.... that is kind of nifty.
 

Calin

Diamond Member
Apr 9, 2001
3,112
0
0
Originally posted by: RaynorWolfcastle
Does anyone know how number 10 works? I solved it using method described in the thread, but I don't understand where that source4.js comes from. How come if you look up the address directly you get that Chebyshev riddle? I'd like to know how they actually made that redirect

Hmmm... aparently "view source" doesn't show the html code that gets used... so that's the illusion of the wrong webpage, however I still don't know how they work that

The server knows the page from where you came. If you come from anywhere but the previous page, the poem file is served instead of the required javascript.
If you could set the refferer page to the current page in the browser (or download manager or whatever) then the correct js file will be received (I suppose so, at least)
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
Originally posted by: Calin
Originally posted by: RaynorWolfcastle
Does anyone know how number 10 works? I solved it using method described in the thread, but I don't understand where that source4.js comes from. How come if you look up the address directly you get that Chebyshev riddle? I'd like to know how they actually made that redirect

Hmmm... aparently "view source" doesn't show the html code that gets used... so that's the illusion of the wrong webpage, however I still don't know how they work that

The server knows the page from where you came. If you come from anywhere but the previous page, the poem file is served instead of the required javascript.
If you could set the refferer page to the current page in the browser (or download manager or whatever) then the correct js file will be received (I suppose so, at least)


I don't think that will change anything on that 'test'....the file you need will be on your own system (that's just a vague hint).

I am on 16 now.....

 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
last one was a little easy, more childhood game than hacking...but I guess hacking is a childhood game as well :)

That was interesting....

I guess they send you a starfleet academy haxor certificate? heheh ;)

&Aring;
 

glugglug

Diamond Member
Jun 9, 2002
5,340
1
81
Originally posted by: Calin
Originally posted by: RaynorWolfcastle
Does anyone know how number 10 works? I solved it using method described in the thread, but I don't understand where that source4.js comes from. How come if you look up the address directly you get that Chebyshev riddle? I'd like to know how they actually made that redirect

Hmmm... aparently "view source" doesn't show the html code that gets used... so that's the illusion of the wrong webpage, however I still don't know how they work that

The server knows the page from where you came. If you come from anywhere but the previous page, the poem file is served instead of the required javascript.
If you could set the refferer page to the current page in the browser (or download manager or whatever) then the correct js file will be received (I suppose so, at least)


Actually it has absolutely nothing to do with your referer ("from where you came"). Hint: It's a relative URL.
 

Isaiah

Senior member
May 31, 2000
453
0
0
Originally posted by: FFactory0x
can someone give answer to 3 and 4?

Also whats the steps to find 3

Number 3 is the links color(#hex) and number four is really easy...just use the ASCII table to figure out what is says.


Now just if I could figure out how to do 11...any ideas?
 

FFactory0x

Diamond Member
Aug 8, 2001
6,991
0
0
GOT it. Now how about level 5???? What do i do to find this?
I saved as and opened in notepad but how do i find the code length
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
All you idiots liberally giving away the answers are breaking the rules.

All the pages are of the type where viewing the source will set you on the right path...that is the only hint they give and really all you need.

If you don't know programming and math well there is no use to test yourself there. The only reward is solving the puzzles...you get nothing more than a text: "congratulations!" that's it. Even in the end that's all you get.

&Aring;
 

simms

Diamond Member
Sep 21, 2001
8,211
0
0
So, anyways, anyone decipher that code in 14? Or maybe just give me the URL for 15.. I really don't wanna sift thru that long, complex code when I should be writing my own programming app for school :)
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
Originally posted by: simms
So, anyways, anyone decipher that code in 14? Or maybe just give me the URL for 15.. I really don't wanna sift thru that long, complex code when I should be writing my own programming app for school :)

14 is the hardest one i think (if that is the one with the tsOK function in it.

My question is if someone gives you the answer what purpose does it give you? There is no prize or anything neat that happens other than figuring it out.

If you are a programmer simply iterate through the code...it's simple from that aspect, just tedious.

&Aring;
 

Lawrencetan21

Senior member
Oct 26, 2003
305
0
0
# of users passed the levels:

Level 8 - 047589
Level 9 - 048648

I don't get it. Don't you have to pass 8 first before you get to 9? Why is the number of users that passed level 9 is > level 8?


 

simms

Diamond Member
Sep 21, 2001
8,211
0
0
Originally posted by: alkemyst
Originally posted by: simms
So, anyways, anyone decipher that code in 14? Or maybe just give me the URL for 15.. I really don't wanna sift thru that long, complex code when I should be writing my own programming app for school :)

14 is the hardest one i think (if that is the one with the tsOK function in it.

My question is if someone gives you the answer what purpose does it give you? There is no prize or anything neat that happens other than figuring it out.

If you are a programmer simply iterate through the code...it's simple from that aspect, just tedious.

&Aring;

Yea, but that 15th one involves .htaccess and Jack the Ripper, so it'd be pretty interesting to use that because I've never had the opportunity before. Sifting through code is possible, but not likely. Just want a chance to see if I can actually get through .htaccess because I use it a lot and want to see if it's any useful...
 

dighn

Lifer
Aug 12, 2001
22,820
4
81
Originally posted by: Lawrencetan21
# of users passed the levels:

Level 8 - 047589
Level 9 - 048648

I don't get it. Don't you have to pass 8 first before you get to 9? Why is the number of users that passed level 9 is > level 8?

maybe more ppl directly link to level 9, eg links given to them, repeated attempts etc
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
Originally posted by: Lawrencetan21
# of users passed the levels:

Level 8 - 047589
Level 9 - 048648

I don't get it. Don't you have to pass 8 first before you get to 9? Why is the number of users that passed level 9 is > level 8?

cheaters....even in this thread someone asked for a direct link to bypass a hard level.