Follow us on Twitter!
Don't judge the unknown - Grindordie
Thursday, April 17, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 19
Guests Online: 19
Members Online: 0

Registered Members: 82813
Newest Member: VesuviusSentinel
Latest Articles
View Thread

HellBound Hackers | HellBound Hackers | Comments and Suggestions

Author

Rotating Challenges


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-05-07 17:27
Would it be possible, through server side scripts, to create challenges that changed their own passwords every now and then.

I was just reading in the shoutbox, people talking about points, and how they are often not an indicator of skill. There are (sadly) many tutorials out there that simply provide answers without explaining the 'why' of it all, nevermind the 'how'.

If each challenge structure remained the same, but the actual answer (password, url, etc) changed every week or month, points would be harder to earn if you don't deserve them.


Author

RE: Rotating Challenges

richohealey
Member



Posts: 1022
Location: #!/usr/local/bin/python
Joined: 01.05.06
Rank:
Monster
Posted on 10-05-07 17:37
good plan... difficult to implement. also with many challs (basic 5?) they are hard to get and opften people have them... just minor errors

but yes i agree for some challs this is a good idea


bitchohealey at hotmail dot com skype:richohealey www.psych0tik.net
Author

RE: Rotating Challenges

jaggedlancer
Member



Posts: 471
Location: London
Joined: 18.09.06
Rank:
Moderate
Warn Level: 5
Posted on 10-05-07 17:43
Yeah, and there are a few sites around which have HBH answers on them so that would help with all the n00bs that just want "fame" from loads of points


i212.photobucket.com/albums/cc270/Eyefork/jageye.png
73 6d 69 6c 65 79 77 69 7a 61 72 64 40 68 6f 74 6d 61 69 6c 2e 63 6f 2e 75 6b - twitter.com/joshsmile
Author

RE: Rotating Challenges


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-05-07 18:41
actually, for alot of the challs i dont think a rotation password would be hard to get. many of the basics could be dynamically done, however, the problem with this lies as...
say you are working on a challenge one day and come back the next day. you won't be able to pick up where you left off. if you scored a username and a directory the day before they won't do you any good now.

we'd have to find a better way to do that. perhaps an entry into the user's dbase to 'hardcode' what "rotation" they are


Author

RE: Rotating Challenges

jaggedlancer
Member



Posts: 471
Location: London
Joined: 18.09.06
Rank:
Moderate
Warn Level: 5
Posted on 10-05-07 19:08
How about a timer on the challenge saying how long its got till the pass changes?


i212.photobucket.com/albums/cc270/Eyefork/jageye.png
73 6d 69 6c 65 79 77 69 7a 61 72 64 40 68 6f 74 6d 61 69 6c 2e 63 6f 2e 75 6b - twitter.com/joshsmile
Author

RE: Rotating Challenges


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-05-07 19:21
jaggedlancer wrote:
How about a timer on the challenge saying how long its got till the pass changes?


Cron job which changes all the passwords would be easy. Stored the passwords as MD5 hashes in an offsite DB. Would be piss easy