Hacking Password 4
 

Challenge number 8:
In this challenge you have to guess the right password in order to get access...
The challenge link is:
http://uobroom.freehostia.com/hack8/

There are two ways to deal with this challenge, either you analyze the code and do some calculations or you just do something else which is very easy...
Let's see who's gonna be the first one to solve this challenge.
I want to remind you from now: "NO SPOILERS" ... :)

Thank you.

Re: Hacking Password 4
 

solved in 47 minutes using the very easy method, and i learned many stuff during this.

Re: Hacking Password 4
 

Re: Hacking Password 4
 

yes yes, i used the easy method, and u have to take into consideration the following:
1- slow connection
2- i was doing other stuff too while thinking
3- several attempts to connect to my website through ftp -> failure
4- several attempts to [no spoilers] through notepad -> failure, i never knew that windows can't edit javascript.
5- i thought i was doing something wrong in (4) and i had to google a lot on how to use the most simple function in javascript.
6- attempt to solve it manually, but i knew it would be a mess
7- finally i connected to my website through http, uploaded an html page, and generated the damn output.

conclusion: it took me 1 minute to find the idea of the solution, and 46 minutes to get it to work. and i still insist that i used the easy method :D

Re: Hacking Password 4
 

Roudy, You didn't solve this using the easiest solution and i'm so sure...
It doesn't needs all this...
The easiest solution takes less than 1 minute and not 46 minutes...
Feshel :p, If you know the solution you will kill yourself...

Re: Hacking Password 4
 

19 minutes :D, i am sure i could have got the answer in less than 10 minutes, i just wrote the first result wrong on the paper. i used a calculator also :D

Re: Hacking Password 4
 

Re: Hacking Password 4
 

Is it something like ' or $pass=1 ? i used the calculations method though.

Re: Hacking Password 4
 

Re: Hacking Password 4
 

damn i am a dumb ass!!! lol i just realized it :P it needs 5 seconds :P

Re: Hacking Password 4
 

Re: Hacking Password 4
 

Dooooone and the pass is :"F17D2587068A7515F97A928C13E71690"

Re: Hacking Password 4
 

wlak:S:S:S i wasted all my time and javascript was disabled on firefox :hawhaw:
loooooooooooooooooooooooooool

Re: Hacking Password 4
 

Re: Hacking Password 4
 

okey i was googling to find out what a line means in the source text
and i came accross the solution ... although i didn't understand anything :p
so it took me less than a minute to solve it lool, since the search result only had 1 page :p ... copy / paste and i'm done lool
waiting to read the solution :D

Thank You ...

Re: Hacking Password 4
 

lol abousoun you're such a cheater, even when it comes to quizzes

Re: Hacking Password 4
 

i use 2 browsers (opera and mozilla firefox)

Re: Hacking Password 4
 

Re: Hacking Password 4
 

Re: Hacking Password 4
 

The persons who solved this challenge are:
Kingroudy, polo, joseph28, xcoder, Dr.Scoo, abousoun, Rami_s and chaingang_100.

we can solve this challenge in two ways...
Either we do some hard calculations or we just do it in a very easy way...

First method:

The funcion unescape converts the hex value to ascii code...
so "%61%68%6f%79" will be "ahoy" (61=a ; 68=h ; 6f=o ; 79=y)...
The string "ahoy" is assigned to the variable rawr...

The function charCodeAt(integer number) convert a ascii character to decimal number...
It depends on the input, first we are writing "string.function" which means that we are going
to apply this function on the variable called "string"... Second thing to know is that
we are giving the function an input, for example: string.charCodeAt(1); ... the input is one...
So the function "charCodeAt" is going to check the second character of the variable "string"...
In javascript and in other programming languages, we begin counting from 0, which means that the

number 2 is the third... (we have 0,1,2,3,4...ect..)
The second character is "l" and it is 108 in decimal (using a ascii to decimal convertor)...
The number 108 is assigned to the variable a.
The 8'th character is also "l"...
The number 108 is assigned to the variable b.
The 5'th character is "a" and it is 97 in decimal.
The number 97 is assigned to the variable c.
Note that we can check the numbers...by pressing the key alt+97 we obtain the letter a.

Now we have to do some calculations in order to obtain the value of the variable schloob...
Note that in the calculation, the priority is for the multiplication and the division...
So at the end, we divide by 2 then we divide by 5 and not 5+b... after we divide by 5 we add b to

the whole...
we sould obtain the number 9860.4 ...

now, asdf=rawr+"_"+schloob; is telling us to assemble our variables and put "_" between them...
So the password will be ahoy_9860.4

Second method:
We can just add to the code:
document.write(asdf);
or alert(asdf);
or put asdf in the place of "'Shame on you!!!'"

That's all...

I hope you enjoyed this tutorial :P