What is it? @.@

Here is the place where I record some tactics about wargame, systems, and other security issues.

2012-11-27

Hacker Test - Level 1

Description:

Level 1

Hackers solve problems and build things, and they believe in freedom and voluntary mutual help. To be accepted as a hacker, you have to behave as though you have this kind of attitude yourself. And to behave as though you have the attitude, you have to really believe the attitude.

Solution:
  1. View page source code and find the HTML of the above form.
    <div align="center">
    <center>
    <table border="1" cellspacing="1" style="border-collapse: collapse" bordercolor="#111111" width="15%" id="AutoNumber4">
    <tr>
    <td width="100%">
    <p align="center"><font size="1" face="Tahoma"><br>
    </font><font size="2" face="Tahoma">Password:</font><form name="a" action="javascript:check()">
    <p align="center">
    <input type="login" name="c" maxlength="25" size="16"><br>
    <br>
    <input type="submit" value=" Log In "></p>
    </form></p>
    </td>
    </tr>
    </center>
    
  2. Now we knew that there's a JavaScript function named 'check()' would check our submitted password.
  3. Let's check it.
    <script language=JavaScript>
    {
    var a="null";
    function check()
    {
    if (document.a.c.value == a)
    {
    document.location.href="http://www.hackertest.net/"+document.a.c.value+".htm";
    }
    else
    {
    alert ("Try again");
    }
    }
    }
    </script>
    
  4. Yes, the password is "null" and the URL of level 2 is :
    http://www.hackertest.net/null.htm

No comments:

Post a Comment