Follow us on Twitter!
Few are those who can see with their own eyes and hear with their own hearts. - Albert Einstein
Thursday, April 24, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 26
Guests Online: 23
Members Online: 3

Registered Members: 82889
Newest Member: Geriztul
Latest Articles
View Thread

HellBound Hackers | Challenges | Application Cracking

Author

App 10 dead or its me!

sam207
Member



Posts: 55
Location: MY LOVELY COUNTRY NEPAL
Joined: 30.08.08
Rank:
Newbie
Posted on 27-09-08 12:05
I got password from app10.. It said the password for hbh is s******* but when I do it here, its saying invalid password.. So can I pm anyone with what I got to check if I m right? Or could anyone verify if the challenge is dead?
Thanks..


www.techgaun.com
The signs of real hackers:
-he doesn't flame newbies.
-he doesn't stop learning.
-he doesn't hesitate to question no matter how much he is pro.

Winners don't do different things,they do things in different way - Shiva Kheda

www.hackers.org/sig/c/33439/NEPAL:NEVER ENDS PEACE N LOVE.png
img521.imageshack.us/img521/5784/sam207jr1.jpg
[url=http://www.hackers.org/profile/yours31f.html]T
ufuckingfaggot@msn.com fuckdaworld@yahoo.com http://www.techgaun.com
Author

RE: App 10 dead or its me!

sam207
Member



Posts: 55
Location: MY LOVELY COUNTRY NEPAL
Joined: 30.08.08
Rank:
Newbie
Posted on 27-09-08 12:44
thanks moshbat.. but even with ur suggestions, it is not working.. I feel its dead.. I don't think its me to make mistake coz its saying the password for hbh is ........



www.techgaun.com
The signs of real hackers:
-he doesn't flame newbies.
-he doesn't stop learning.
-he doesn't hesitate to question no matter how much he is pro.

Winners don't do different things,they do things in different way - Shiva Kheda

www.hackers.org/sig/c/33439/NEPAL:NEVER ENDS PEACE N LOVE.png
img521.imageshack.us/img521/5784/sam207jr1.jpg
[url=http://www.hackers.org/profile/yours31f.html]T
ufuckingfaggot@msn.com fuckdaworld@yahoo.com http://www.techgaun.com
Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 12:10
I've got exactly the same.
Can someone confirm that this is really a problem with the challenge and not with the answer we came up with?

thx

/xplizion
Author

RE: App 10 dead or its me!

sam207
Member



Posts: 55
Location: MY LOVELY COUNTRY NEPAL
Joined: 30.08.08
Rank:
Newbie
Posted on 01-10-08 12:34
Probably u need to click ok thrice to get another password after getting the first password... I got another one. But that also didn't work.. I dunno what's happening.. I need to do more research...


www.techgaun.com
The signs of real hackers:
-he doesn't flame newbies.
-he doesn't stop learning.
-he doesn't hesitate to question no matter how much he is pro.

Winners don't do different things,they do things in different way - Shiva Kheda

www.hackers.org/sig/c/33439/NEPAL:NEVER ENDS PEACE N LOVE.png
img521.imageshack.us/img521/5784/sam207jr1.jpg
[url=http://www.hackers.org/profile/yours31f.html]T
ufuckingfaggot@msn.com fuckdaworld@yahoo.com http://www.techgaun.com
Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 12:44
It's been a while since I did these but, in some of them, there's a concern with placing your jumps. If your jumps skip any of the data manipulation, you'll get to the part that says "Your HBH pass is", but it will be with a "partial" value. Also, make sure you're changing the right jumps, not just the first one you notice.


Author

RE: App 10 dead or its me!

sam207
Member



Posts: 55
Location: MY LOVELY COUNTRY NEPAL
Joined: 30.08.08
Rank:
Newbie
Posted on 01-10-08 12:56
Zephyr_Pure wrote:
It's been a while since I did these but, in some of them, there's a concern with placing your jumps. If your jumps skip any of the data manipulation, you'll get to the part that says "Your HBH pass is", but it will be with a "partial" value. Also, make sure you're changing the right jumps, not just the first one you notice.

I didn't make any modification with the jumps.. I just did obtain the text I should enter in the box in order to get the password for hbh. the comparison was being made with some value.. & i did obtain right values I should put for that comparison to be true.. I mean, for 60 I put s & likewise.
But that didn't work.


www.techgaun.com
The signs of real hackers:
-he doesn't flame newbies.
-he doesn't stop learning.
-he doesn't hesitate to question no matter how much he is pro.

Winners don't do different things,they do things in different way - Shiva Kheda

www.hackers.org/sig/c/33439/NEPAL:NEVER ENDS PEACE N LOVE.png
img521.imageshack.us/img521/5784/sam207jr1.jpg
[url=http://www.hackers.org/profile/yours31f.html]T
ufuckingfaggot@msn.com fuckdaworld@yahoo.com http://www.techgaun.com
Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 12:57
well I didn't really changed any jumps,
I just kind of "bruteforced" (if you can call it like that) the password.
And when I enter this password the program gives me the following message:
"The password for HBH is s*******"
so I fill this in in HBH and it doesn't work.
Author

RE: App 10 dead or its me!

sam207
Member



Posts: 55
Location: MY LOVELY COUNTRY NEPAL
Joined: 30.08.08
Rank:
Newbie
Posted on 01-10-08 13:04
xplizion wrote:
well I didn't really changed any jumps,
I just kind of "bruteforced" (if you can call it like that) the password.
And when I enter this password the program gives me the following message:
"The password for HBH is s*******"
so I fill this in in HBH and it doesn't work.

Did u try ok & go click again and again in the app after entering the first pass.. I got another pass but that too didn't work in hbh..


www.techgaun.com
The signs of real hackers:
-he doesn't flame newbies.
-he doesn't stop learning.
-he doesn't hesitate to question no matter how much he is pro.

Winners don't do different things,they do things in different way - Shiva Kheda

www.hackers.org/sig/c/33439/NEPAL:NEVER ENDS PEACE N LOVE.png
img521.imageshack.us/img521/5784/sam207jr1.jpg
[url=http://www.hackers.org/profile/yours31f.html]T
ufuckingfaggot@msn.com fuckdaworld@yahoo.com http://www.techgaun.com
Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 13:08
for some reason he just keeps appending to the success message whenever you press "go".
And the third time he adds the String he generated from your password to the response message.
So I don't really think that this is the right answer.
Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 13:13
xplizion wrote:
well I didn't really changed any jumps,
I just kind of "bruteforced" (if you can call it like that) the password.

How did you "bruteforce" the password?


Author

RE: App 10 dead or its me!

sam207
Member



Posts: 55
Location: MY LOVELY COUNTRY NEPAL
Joined: 30.08.08
Rank:
Newbie
Posted on 01-10-08 13:22
Zephyr_Pure wrote:
xplizion wrote:
well I didn't really changed any jumps,
I just kind of "bruteforced" (if you can call it like that) the password.

How did you "bruteforce" the password?

Probably I did like him.. But it was obvious. It is not really bruteforcing.. I mean it was so easy to get the password by guessing.. By just looking what was happening to the input we are giving & with what value was our value being compared, I got the password within few minutes of trying.


www.techgaun.com
The signs of real hackers:
-he doesn't flame newbies.
-he doesn't stop learning.
-he doesn't hesitate to question no matter how much he is pro.

Winners don't do different things,they do things in different way - Shiva Kheda

www.hackers.org/sig/c/33439/NEPAL:NEVER ENDS PEACE N LOVE.png
img521.imageshack.us/img521/5784/sam207jr1.jpg
[url=http://www.hackers.org/profile/yours31f.html]T
ufuckingfaggot@msn.com fuckdaworld@yahoo.com http://www.techgaun.com
Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 14:11
that is indeed what I meant...
hence the "'s around my Bruteforce Smile

Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 14:39
xplizion wrote:
hence the "'s around my Bruteforce Smile

And that's not how you explained it... hence the question. Fancy terms are handy for show but, when you're providing details, be accurate or it will be hard for people to help.

If all you did to the application was set breakpoints / watches, then it should give you the correct password... if you didn't modify the application in any way. To be sure, try downloading the app again and, without even opening it in OllyDbg or your prog of choice, use the same password you used to solve it. If that still yields the same answer for the HBH password, then it's possible that the challenge is just broken.


Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 15:02
I was not "showing off" with nice terms, since I put the quotes and the ()...
I just didn't know how else to call it.
We can go on about this, but I don't think this changes anything to the fact that I said that I didn't change any jumps.

About downloading it again, I tried this already before posting here to be really sure. But this gives the same result.

Thanks for taking the time to answer here.

Edited by on 01-10-08 15:02
Author

RE: App 10 dead or its me!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-08 15:23
xplizion wrote:
I just didn't know how else to call it.
We can go on about this, but I don't think this changes anything to the fact that I said that I didn't change any jumps.

You don't have to "call it" anything. It doesn't change the fact that you said that you didn't change any jumps. My point is that you didn't explain what you did to solve it, either. It's not necessary for you to have a retort to this concept every time I try to make you aware of it... When people are trying to help you, don't cut corners; it just makes it more difficult for them to help you. I'm not nitpicking without reason, and it's advice... treat it as such.


About downloading it again, I tried this already before posting here to be really sure. But this gives the same result.

Another example of how time could've been saved if all of the info was available upfront.


Thanks for taking the time to answer here.

No problem.