Valhalla Legends Archive

General => Fun Forumâ„¢ => Topic started by: Skywing on September 15, 2003, 08:31 PM

Title: Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: Skywing on September 15, 2003, 08:31 PM
http://lists.netsys.com/pipermail/full-disclosure/2003-September/009998.html
http://lists.netsys.com/pipermail/full-disclosure/2003-September/010019.html

The page in question: http://www.battle.net/news/secret/index.shtml
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: j0k3r on September 15, 2003, 08:43 PM
Oww my head, text is DEFINITELY easier to read without scrolling to the right.

I've read the article twice and still fail to see what it is, I get that it has to do with battle.net and it's encrypted, and that it probably wasn't supposed to be posted/go live, but what's it all about?

[edit]BTW, on the battle.net link page if you higlight everything (ctrl+a, I read it in the source :P) it'll reveal a link, to 'the real super secret page' which has links to the rules of the battle.net website... I'm sure there is something else on the 'real super secret page'...[/edit]
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: iago on September 15, 2003, 09:16 PM
eew, another highlight trick :)
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: j0k3r on September 15, 2003, 09:47 PM
I found it fun however. I wish there was a scavenger hunt through a website, using all sorts of tricks... and involving skills which people might have learned by using the net.

Anyways, anyone care to explain what this is about?
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: Spht on September 15, 2003, 09:58 PM
Quote from: j0k3r on September 15, 2003, 09:47 PM
I found it fun however. I wish there was a scavenger hunt through a website, using all sorts of tricks... and involving skills which people might have learned by using the net.

Anyways, anyone care to explain what this is about?

It's pretty much all explained in the second link.
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: iago on September 15, 2003, 10:01 PM
Quote from: j0k3r on September 15, 2003, 09:47 PM
I found it fun however. I wish there was a scavenger hunt through a website, using all sorts of tricks... and involving skills which people might have learned by using the net.

Anyways, anyone care to explain what this is about?

www.try2hack.nl is like that, but more hacker-ish
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: j0k3r on September 15, 2003, 10:04 PM
Quote from: iago on September 15, 2003, 10:01 PM
Quote from: j0k3r on September 15, 2003, 09:47 PM
I found it fun however. I wish there was a scavenger hunt through a website, using all sorts of tricks... and involving skills which people might have learned by using the net.

Anyways, anyone care to explain what this is about?

www.try2hack.nl is like that, but more hacker-ish

w00t! Level 2... Right on... I think I'm stuck.
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: iago on September 15, 2003, 10:10 PM
I got the the level with the .pl script where you have to use a common exploit to get his password, then a password cracker to find it out. I never got around to finding a password cracker.  It's level 7, iirc
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: j0k3r on September 15, 2003, 10:20 PM
So you have to know about security holes in programs commonly used on the net? Bah, I hate flash.

I worked around the 'no right click' thing (hold left button, hold middle button, right click), but I don't think that counts for anything.

Yup. I'm definitely stuck at level 2.
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: Spht on September 15, 2003, 10:24 PM
Quote from: j0k3r on September 15, 2003, 10:20 PM
So you have to know about security holes in programs commonly used on the net? Bah, I hate flash.

I worked around the 'no right click' thing (hold left button, hold middle button, right click), but I don't think that counts for anything.

Yup. I'm definitely stuck at level 2.

Try downloading the flash file, then open it up in Notepad or something and look for anything to do with username and password. IIRC, that one really simple.
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: iago on September 16, 2003, 03:25 AM
Quote from: Spht on September 15, 2003, 10:24 PM
Quote from: j0k3r on September 15, 2003, 10:20 PM
So you have to know about security holes in programs commonly used on the net? Bah, I hate flash.

I worked around the 'no right click' thing (hold left button, hold middle button, right click), but I don't think that counts for anything.

Yup. I'm definitely stuck at level 2.

Try downloading the flash file, then open it up in Notepad or something and look for anything to do with username and password. IIRC, that one really simple.

Yes, that's right.  The flash file is extremely small, and they store the strings in plain-text.
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: j0k3r on September 16, 2003, 06:39 AM
Ah well if I knew how to do that I would have tried it :P
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: Brolly on September 16, 2003, 05:02 PM
Im stuck on lvl 6 :(
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: Hitmen on September 16, 2003, 05:12 PM
Yea, once I got to level six I didn't bother to try anymore. (This was 3 or 4 months ago). Too lazy to try again.
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: j0k3r on September 16, 2003, 07:24 PM
Level 4 now... Just looking for a the program to open java files :P
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: Brolly on September 16, 2003, 07:41 PM
Look for JAD.
Title: Re:Just what one would expect to find on the Full-Disclosure mailinglist...
Post by: iago on September 16, 2003, 08:32 PM
There used to be an evil level 4 bug.. it was referencing a .dat file which appeared in Temporary Internet Files .. I don't see it there anymore :)