Follow us on Twitter!
It is the path of least resistance that makes rivers and men crooked. - Bj Palmer
Wednesday, April 23, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 25
Guests Online: 19
Members Online: 6

Registered Members: 82885
Newest Member: ConiBE
Latest Articles
View Thread

HellBound Hackers | HellBound Hackers | Comments and Suggestions

Author

More details on pen-testing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 24-10-07 20:27
Hi there,

I started the pen-testing challenge and gathered awesome 90 pts.
Now my idea would it be to enhance the details in "my profile" from "accumulated x pts" to "found: [removed by system]"
Or better insert a private pen-testing details page, where a user can review which exploits he/she found.

In this way people can easier talk about special parts, have a better overview on which topics are exhausted, which should make it easier to find a new direction for further pen testing and exploits found by accident get categorized, which makes it easier to review and overthink why and how they work, as well as the vocabulary extends.

As the idea of learning is the background for this challenges I'd think this would improve this challenge.

I'd also suggest to add such informations to all challenges, but the expenditure would be enorm, I assume.

Looking forward to your opinions.
The FIDO

Edited by SySTeM on 24-10-07 20:38
Author

RE: More details on pen-testing

SySTeM
Member

Your avatar

Posts: 1524
Location: England, UK
Joined: 27.07.05
Rank:
HBH Guru
Posted on 24-10-07 20:39
People aren't meant to know what exploits are in there! That's the whole idea of it!!!


img138.imageshack.us/img138/6527/sig2ak1.jpg
www.hellboundhackers.org/sig/r/2783.png

http://www.elites0ft.com/
Author

RE: More details on pen-testing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 25-10-07 00:03
Anyways, it looks as if you can tell what exploits people found by the point totals they have. IIRC, the point totals are VASTLY different for each exploit.



Author

RE: More details on pen-testing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-11-07 12:36
Zephyr_Pure wrote:
Anyways, it looks as if you can tell what exploits people found by the point totals they have. IIRC, the point totals are VASTLY different for each exploit.


Haha, yeah it would be like:

+10!!! ON ONE PART

and then like
+2195782138956723189756 pts on another!! Pfft


Author

RE: =PPPP


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-11-07 17:53
10 points seems reasonable for throwing some random shit in a random place that one should have been 1 point =P
Author

RE: More details on pen-testing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-11-07 17:59
yes it is more than enough for simply replacing *something*
but when you can get for one thing 135 pts. ...
oh i can't get past 40 pts.


Author

RE: More details on pen-testing


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-11-07 18:20
The point counts seem to be in the order of which you are most likely to find. If one is more obscure / unlikely than others on the list, then you'll get more points for it. Simple.





Edited by on 03-11-07 18:26
Author

RE: one that note


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-11-07 18:43
...dont try to look for exploits in some sort of order..like dont just look for sql everywhere first...need some first b4 you get to others