Contest!

[CrAz3D]

I don't get it.

Is it a picture of a hedgehog?

"badgerbadgerbadger HEDGE HOG" makes very little sense to me.

[iago]

I don't get it.

Is it a picture of a hedgehog?

"badgerbadgerbadger HEDGE HOG" makes very little sense to me.

No, the last page says "post this as a reply to the thread to prove you've been here:"

[hismajesty]

How about an explanation.

[iago]

Sure:

1. Fake 404 page, email address is [email protected].  Go to dodgeit.com and check email.
2. Last character in every line spells "contest.mine.nu/testpage.html"
3. Fake "bandwidth exceeded" page -- view source for rot13-encoded url
4. Fake your referer with a FireFox plugin (RefSpoof I think) or by using telnet to send the request
5. Password is hidden on the line "<script src=JavaScript></src>"

[hismajesty]

k so I got to #1 and that's it!

[Blaze]

I got up the referer, then I tried to use microsoft search to get onto the site, but of course it told me to copy & paste onto the address bar. Silly microsoft, now only if they were as good as google..

[NicoQwertyu]

Kyle@NA-0060YM1FOOF2 ~/src/getreferrer
$ gcc main.c -lws2_32 -o main

Kyle@NA-0060YM1FOOF2 ~/src/getreferrer
$ main
Connecting...
Connected!
Sending request...
Awaiting response...


...

HTTP/1.1 200 OK
Date: Tue, 31 May 2005 02:03:37 GMT
Server: Apache/1.3.33 (Unix) PHP/4.3.11
Transfer-Encoding: chunked
Content-Type: text/html

57
Congratulations!<br>
<br>
Click <a href='final-challenge-.html'> to continue!<br>
<br>

0



Kyle@NA-0060YM1FOOF2 ~/src/getreferrer
$

/* main.c */

#include <windows.h>
#include <winsock2.h>
#include <stdio.h>
#include <string.h>

int main(int argc, char **argv) {

   SOCKET       sock;
   WSADATA      wsa_data;
   char      send_buffer[] = "GET /guardiantestpage.pl HTTP/1.1\nHost: contest.mine.nu\nReferer: microsoft.com\n\n";
   char      recv_buffer[2048];
   int      iret       = 0;
struct   sockaddr_in   sin;   
struct   hostent      *h;

   if (WSAStartup(MAKEWORD(2, 0), &wsa_data)) return 1;

   sock = socket(AF_INET, SOCK_STREAM, 0);
   if (sock == SOCKET_ERROR) return 1;

   h = gethostbyname("contest.mine.nu");
   if (!h) return 1;

   sin.sin_addr.s_addr    = ((struct in_addr *)h->h_addr)->s_addr;
   sin.sin_family       = AF_INET;
   sin.sin_port      = htons(80);

   printf("Connecting...\n");
   if (connect(sock, (struct sockaddr*)&sin, sizeof(sin)) == SOCKET_ERROR) return 1;
   printf("Connected!\n");

   send(sock, send_buffer, strlen(send_buffer), 0);
   printf("Sending request...\n");

   printf("Awaiting response...\n");
   iret = recv(sock, recv_buffer, 2048, 0);
   recv_buffer[iret] = 0;

   printf("\n\n ... \n\n%s\n", recv_buffer);

   closesocket(sock);
   WSACleanup();

   return 0;
}

http://contest.mine.nu/JavaScript

pass = "Password*#^";
site = "congrats-bigg.txt";

I was so lost until the explination,  but that was fun.  More! More!