Join us at IRC!
It is the path of least resistance that makes rivers and men crooked. - Bj Palmer
Thursday, May 17, 2012
Navigation
Members Online
Total Online: 30
Web Spiders: 10
Guests Online: 27
Members Online: 3

Registered Members: 70039
Newest Member: p0isoN
Latest Articles

O_o Javascript 15 o_O



FLV Blaster - Download Music and Videos Faster

website security 2nd 'serious' article so far.. but it's kinda small...



Again, I got bored so i'm gonna write an article about JS 15, seeing as many people are stuck on it, but when you finish this article, you'll realise how easy it was.. it doesnt deserve 50 points... And i don't care how you rate it, cause myself i hate one challenge articles, if i write one about another JS later, i'll merge them, making a nice article :)


**************
A. Understanding it
**************
As always, we start by viewing the source, and the scblockedript is lying there, waiting for you to crack it..

*First off you have SlimTim10 showing off (jk).... and then the function that the button "check" uses to check your password starts.. So the password is definately within this function... Now if you're lazy like me, you directly look at the comparision the scblockedript does, to see what the password's string name is, and make the code output/alert it, you find this big condition line, and you try to get stuff from it, but it doesnt work.. I wont explain that method cause other articles talk about it.

*You read the code more carefully and you find out that "password" is the password you put into the textbox, and a,b,c,etc. are variables containing it's characters and indicating their position in the password. You still have no idea what the password should be, but if you read on, you see the big IF condition, it says that those letters (the ones within the a,b,c,etc variables), placed after each other within the alphabetical order, should form the riddle 'var' which says "query test mess".. you also notice that 'riddle' has as much characters as the number of a,b,c,etc.'s... Great!! even if you don't know it, you have just solved the challenge!

**************
B. Solving it
**************
let's take the case of 'var a', it says:

var a = password.charAT(9)

and if you check in the IF condition, of course considering the order given, 'var a' should be the same as the first letter of 'riddle' , so the 10th letter of the password is [spoiler removed], great!
do the same for the rest of the vars and you get a 2-word password, submit it and congratulations!

**************
C. Coding tip
**************
I wont say that in detail cause it would spoil the whole challenge, but, you might as well do a scblockedript, where password=riddle, and copy all the declared vars (from the original scblockedript) then make it alert them considering the '.charAT()' order, and it will just give you the password :) Both methods only take 4 minutes anyway.. happy cracking!

**************
D. Notes
**************
_I said 10th letter in part 'B' cause .charAT(0) exists.
_never mind the '+ "" +' parts cause "" is 'NULL' so this adds nothing to the sequence
_Republish wherever you want, just give credit to me :)




Ice0lated(a.k.a god)

Comments

macrostblack on June 25 2006 - 15:49:19
Cheers for that, I had the variables the wrong way round :| and yeah you are right it is easy once you know how.
-The_Flash- on June 25 2006 - 15:50:02
Nice work! Top article
god on June 25 2006 - 17:28:26
thx for the feedback :) i corrected some minor mistakes..
system_meltdown on June 25 2006 - 18:42:34
Awesome article man!!!
stax on June 25 2006 - 19:18:08
Ya, awesome :)
cubeman372 on June 25 2006 - 21:44:50
I still haven't looked at this challenge yet
SwiftNomad on June 25 2006 - 21:53:20
I am going to beat this one. I like it. Very GOOD! Well thought out.
crazy_sniper on June 27 2006 - 08:54:10
man i knew it was something like taht, just didnt think it was THAT way.
interslice on July 03 2006 - 07:37:24
nice article dude. good job!:)
H-oLm35 on August 07 2006 - 16:47:55
nice xx:happy:
ZeckOwner on January 04 2007 - 11:57:00
Sorry, can't figure it out.
skathgh420 on July 25 2008 - 04:24:16
Great article :D:D:D
Post Comment

Sorry.

You must have completed the challenge Basic 1 and have 100 points or more, to be able to post.
Ratings
Rating is available to members only.

Please login or register to vote.

Awesome! 79% [11 Votes]
Very Good 14% [2 Votes]
Good 7% [1 Vote]
Average 0% [No Votes]
Poor 0% [No Votes]
Guest
Username

Password

Remember Me


Bookmark This Page
Affiliates
Adverts

 

 

Links
By using, viewing or obtaining any information contained on this site, you agree to the disclaimer.

© HellBound Hackers 2008- 2009. Since 3rd December 2004.