Computer Everything

Out of bordem I googled “hacker games” to see what would turn up.  I came across a fairly cheesy yet cryptic puzzle game called Hacker 2.  I was unable to complete the first level but I didn’t give up.  I decided to decompile the .swf program and  see how it was written.  Well deciphering the puzzles was a hell of a lot easier… Was this cheating?  I think not!  The way the designer explains the puzzles makes the game a little more difficult, heres an explination:

Level 1: “XK Servers”

The facts:

website: www.xkservers.web

company name: algoEX

Well this isn’t quite enough information for us to complete the mission so what happens when we scan www.xkservers.web ?

Open ports found… 6204 used for webmail.  What happens when we point our browser to www.xkservers.web:6204

We get a banner saying that our username has been reset to 01CompanyName

Now that’s what was difficult for me.  I did not realize that algoEX was in fact the company name.  Anyways its now safe to assume the username is 01algoEX.

What happens when we run this username in the Crack against the webmail URL?  BOOM we get a password. PWND! (p.s. PWND! is not the password).

Now if we login to the main website with the username 01algoEX we get the address of the victims FTP site which is: ftp.01algoex.xkservers.web.  Login to the FTP and download the algorhythm and you win level 1.

Level 2: “F8datastreams”

The facts:

website: www.f8stream.web

upload website: www.upload.f8stream.web

username: admin

This ones even easier than the first, go to the Crack and run the admin username against the upload URL.  BOOM… PWND!

login to the upload site as admin and enable FTP then Scan the server… looks like FTP’s running on its default port 21.  Put in your newly discovered password and upload your virus!

Level 3- “Delta adworks”

Facts:

Victim’s email: gary@deltaadworks.web

Website: www.deltaadworks.web

If we visit the website we dont get any useful info, so lets scan the server… And it appears port 6945 is open for Database Management.  Lets point our browser to www.deltaadworks.web:6945 and see what fact we pick up next…

username: adminuser

once again lets Crack this username against the URL (www.deltaadworks.web:6945).  There’s our password.  Lets go ahead and login to see what else we can get access to… Lookie Webmail database is down, better restart that and get connected!  I wont ruin the final steps of this game for you but you get the point.

If you’ve enjoyed this tutorial or have any questions please feel free to post feedback!