| Author |
Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
lets get web wars started!
For those of you who dont know what web wars is:
it is a online hacking competition where teams compete agasint each other to hack another teams website.
Here are the rules we have so far:
Website Creation:
-Teams must create their own website
- websites must have some sort of hackable content (php fusion 4.01 / guestbook etc)
- The hackable content must be uploaded onto the site, with no external links to bravenet etc
Contest:
- Each team will attempt to hack other teams websites
- points will be awarded for how long a team can own another persons website
- points will be awarded for stopping a hack, and patching it
- teams are allowed to upload backdoors for later use
- server hacks are NOT permitted
- competition will take place over 3 days
Afterwards:
- Websites are returned to their owners and backdoors removed
- Teams must submit their hacks and exploits to Judges
- Participants are then given a list of exploits + how to patch them
- Points will then be awarded to teams
- Websites are rebuilt ready for the next event.
__________________________
Does anyone have any questions / improvements / ideas?? We're interested in your feedback!
|
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
sure thing, i'll speak with you on AIM at some point, i'll tell you what to do etc.
|
|
|
| Author |
RE: Web Wars: |
Slodave
Member
Posts: 189
Location: Slovenia
Joined: 13.04.05
Rank: HBH Guru |
|
|
Another question about web wars. How much do I need to know to join a team and play in web wars. I really would like to participate, but I don't know if I am good enought. |
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
you need a willingness to learn.
Webwars is designed for the weaker people to learn from the strong.
So you cna be any ability, there is something for everyone, and its a really good learning experiance.
|
|
|
| Author |
RE: Web Wars: |
Deshouleres
Member
Posts: 132
Location:
Joined: 30.04.05
Rank: Wiseman |
|
Quick Question:
Should we put a post on the Index.htm page that allows the other teams to see what we consider 'control' of the site? Such as a user/pass directory we set up, or perhaps a guestbook... or do they just find out on their own?
Signed,
Ex-Hacker
Deshouleres
Study over
|
|
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
you dont HAVE to plan a way to hack it. You can post a message on the index page, saying how you would like them to deface it and post theit team hash.
However the beauty of webwars is that there is not set way to hack thigs. The websites arent like a mission, you are allowed to roam free and hack it however you pelase.
|
|
|
| Author |
RE: Web Wars: |
Deshouleres
Member
Posts: 132
Location:
Joined: 30.04.05
Rank: Wiseman |
|
|
Mr_Cheese wrote:
you dont HAVE to plan a way to hack it. You can post a message on the index page, saying how you would like them to deface it and post theit team hash.
However the beauty of webwars is that there is not set way to hack thigs. The websites arent like a mission, you are allowed to roam free and hack it however you pelase.
Perhaps I should re-phrase... you said there must be atleast one thing able to be hacked in .php format... so I am wondering if you mean we must have a note saying what we wish to have them attempt to hack...?
Sorry for being such a bother...
-Deshouleres
Signed,
Ex-Hacker
Deshouleres
Study over
|
|
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
nope, you dont have to explain anything. The point of this, is to simulate hackable websites. So people have to find the exploit(s) for themselves.
Just make sure the exploit, can allow for defacements
|
|
|
| Author |
RE: Web Wars: |
thousandtoone
Member
Posts: 274
Location: chown thousandtoone /
Joined: 16.04.05
Rank: Monster |
|
I personally think we need a solid protocol for scoring, involving both attackers and defenders.
Attackers should recieve-
Lower points for known exploits
Higher points for unknown/custom exploits
Higher points for creative exploits
Lower points for a HAHA J00 GOT HAXD style defacement
Higher points for creative defacement, relative to the content
Points relative to the difficulty of the exploit
Very low points for ragin, (spam in forums, users, ecommerce orders, etc,)
Type of control gained, (moderation, admin, file access, database access, server access)
If Server access is gained, Bonus points, but instant ban from Web Wars if server is touched maliciously
-Bonus Points- For being sneaky about anonymity
Defenders should recieve points for-
Having known exploits
Added exploits of their own
More points for creative means of showing off the exploit
Points for site type variety, (forums, eccomerce,)
Custom web software to be hacked
Realistic scenarios
Complexity of site beyond visable level- (IE. Secrative information hidden deeply beneath the surface)
rootbound admin. |
|
|
| Author |
RE: Web Wars: |
Deshouleres
Member
Posts: 132
Location:
Joined: 30.04.05
Rank: Wiseman |
|
|
thousandtoone wrote:
I personally think we need a solid protocol for scoring, involving both attackers and defenders.
Attackers should recieve-
Defenders should recieve points for-
Perhaps that would be best for a later webwars, seeing as this one is still barely functional. Few people seem willing to participate actively, so I think it would be best for a later version... but good ideas.
Signed,
Ex-Hacker
Deshouleres
Study over
|
|
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
most of what has been said above is true and decided by the judges. However the judges will decide on the amout of points given.
|
|
|
| Author |
RE: Urgh... another question |
Deshouleres
Member
Posts: 132
Location:
Joined: 30.04.05
Rank: Wiseman |
|
X.X
In the rules you keep mentioning 'control' of a site, does that mean we must have a login point and after webwars starts can't do server-side edits, but must go through the site we made, log-in etc.?
If that doesn't make sense just give me a heads up and I will attempt to clarify.
Signed,
Ex-Hacker
Deshouleres
Study over
|
|
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
yes your correct.
It is the WEBSITE that must be hacked. People ARE NOT to use server exploits.
By gaining control i mean either getting admin access / ftp access etc
|
|
|
| Author |
RE: Web Wars: |
nights_shadow
Member
Posts: 856
Location: /var/log/messages
Joined: 30.12.04
Rank: God |
|
They're just normal websites, they are held on free webhosting servers. Everyone will be able to view them.
 |
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
thats something we cant control, which is why we wish members, not to disclose urls to non web wars members. I doubt this will happen. And if it does, and any destruction is caused, we can always restore the website.
|
|
|
| Author |
RE: Web Wars: |
Mr_Cheese
HBH Owner
Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank: God |
|
they wont.... but they might get hold of the urls from other members etc.
|
|
|
| Author |
RE: Web Wars: |
metsoc30
Member
Posts: 351
Location: USA
Joined: 01.02.05
Rank: HBH Guru |
|
Team Cheese is going down!
Capitalization is the difference between "I had to help my uncle Jack off a horse.." and "I had to help my uncle jack off a horse.." |
|
|
| Author |
RE: Web Wars: |
nights_shadow
Member
Posts: 856
Location: /var/log/messages
Joined: 30.12.04
Rank: God |
|
You wish! We're going to kick emperor's ass! 
|
|
|
| Author |
RE: Web Wars: |
metsoc30
Member
Posts: 351
Location: USA
Joined: 01.02.05
Rank: HBH Guru |
|
Are you serious? Your team name is cheese. Cheese!!! Cheese cannot inspire any sort of fear or intimidation. When I think of cheese, I think of stupid Packer's fans with their fucking cheeseheads. I mean come on!
Capitalization is the difference between "I had to help my uncle Jack off a horse.." and "I had to help my uncle jack off a horse.." |
|
|
| Author |
RE: Web Wars: |
nights_shadow
Member
Posts: 856
Location: /var/log/messages
Joined: 30.12.04
Rank: God |
|
lmao, well the emperors make you sound like old guys from back in the ages of castles and horses. And, as everyone knows, old guys are slow
Seriously though, good luck to every team, make this a good one!
|
|
|
Main:
