Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Israeli Mossad launches cyber challenge

3d375032374147a7865753e4bbc92682.xyz

Post reply on HN
Print view View original

61–70 of 121 posts

Re: Israeli Mossad launches cyber challenge

#61

Post by stdcall83 »

revocheese wrote: post #53
atdt wrote: post #44

Decompile the apk, and run 'strings' on assets/flutter_assets/kernel_blob.bin. Poke around and you'll find code for POSTing JSON-encoded credentials to http://35.246.158.51:8070/auth/getUrl . (Grep for the IP to find it.) So, using the web site name as the seed and the 'client id' as the password, we get: $ curl -X POST -H "Content-Type: application/json" -d '{"Seed": "3d375032374147a7865753e4bbc92682", "Password": "…

following your steps at getting the strings, which in turn helped me get the code of the whole application first of all, as per the code, the User-Agent must be setup to "iWalk-v2" then doing a simple get request to http://35.246.158.51:8070 will return {"AuthURL":"/auth/v2"} replacing the original url with http://35.246.158.51:8070/auth/v2 and then sending a json like '{"Seed": "3d375032374147a7865753e4bbc92682", "P…

You're missing a big hint. Go back to the apk and grep for github

Re: Israeli Mossad launches cyber challenge

#62

Post by DvirRonaldo »

First Challenge Solution: Mossad 2019 Challenge Start: https://r-u-ready-4.it/ Every line in the image is binary 8-bit number that will give you an ip address : 35.246.158.51

Challenge-1 :Link http://3d375032374147a7865753e4bbc92682.xyz / http://35.246.158.51

Download app.apk from http://3d375032374147a7865753e4bbc92682.xyz/static/app.apk Remember your Client ID - mine is 854279b4c89e4b5c9722352c3f9f1d6c You will user it as "Seeder" property in the app //////////////////////////////////////////////////////////////////////////////////////////////// using WireShark (or any other packet snipper) we can see that the login button does this:

POST /auth/v2 HTTP/1.1si user-agent: iWalk-v2 content-type: application/json; charset=utf-8 accept-encoding: gzip content-length: 29 host: 35.246.158.51:8070 {"Seed":"admin","Password":"admin "}HTTP/1.1 200 OK Content-Type: application/json Date: Wed, 08 May 2019 21:49:05 GMT Content-Length: 47

{"IsValid":false,"LockURL":"","Time":149646302} ///////////////////////////////////////////////////////

Using http://www.javadecompilers.com/, i Decompiled the apk, and got a lock at the Manifest The line "look for us on github.com" got my attention, so i looked for iwalk.locksmither in github and found "iwalk-locksmithers" linke: https://github.com/iwalk-locksmithers-app the server source code was there. In the code, there are a few comments that can help

https://github.com/iwalk-locksmithers-app/server/blob/master... link 70 points us to the auth-1 weeknes.

the part of "for currentIndex the securing aginst bruteforce (tyring all combinations) is the weeknes. The idea behind for hacking the password is to try only one char at first. if we get a 30ms dealy, it means we got the 1st char right, so then we can check the next one, so we will try 2 chars (the 1st we know, the second we will guess) if we will get 60 ms +- dealy then we got th 2nd char and we will try the third one, and again and again, until we will get the password.

To solve it, it wrote a simple c# code that does in a loop http push to the server every time we try to add a new char to the password, and if we got a dealy that is +- 30ms more then the last try, we add that char our final password the uri is http://35.246.158.51:8070/auth/v1_1 and user agent is ed9ae2c0-9b15-4556-a393-23d500675d4b (as writen in the server) I did some avg calcs of the dealys The password length is 32 with hexa char (didnt know that until i guessed the password) we can know that the password is correct when we get back "IsValid":true" *Time we get is in nano Seconds and not ms

After I enterd the pasword and cliend id, i got a link for a token and a linke for challenge 2

http://759d8eba52184f538c8a4525680cfb33.xyz/

Challenge-2 http://759d8eba52184f538c8a4525680cfb33.xyz/

Re: Israeli Mossad launches cyber challenge

#65

Post by rootux »

DvirRonaldo wrote: post #62

First Challenge Solution: Mossad 2019 Challenge Start: https://r-u-ready-4.it/ Every line in the image is binary 8-bit number that will give you an ip address : 35.246.158.51 Challenge-1 :Link http://3d375032374147a7865753e4bbc92682.xyz / http://35.246.158.51 Download app.apk from http://3d375032374147a7865753e4bbc92682.xyz/static/app.apk Remember your Client ID - mine is 854279b4c89e4b5c9722352c3f9f1d6c You will use…

Not sure I understand the bruthforce code. I'm trying to get the first char. I've written something along

import requests

import string

#a-zA-Z!@#$%^&*()_-=

printables_chars = string.printable

agent = 'ed9ae2c0-9b15-4556-a393-23d500675d4b'

for i, char in enumerate(printables_chars):

    print('run {}. char {}'.format(i,char))

    result = requests.post('http://35.246.158.51:8070/auth/v1_1',
                  data={"Seed": "d14236b60e0f4aef94499cb648a5f522", "Password": char})

    if(result.json()['Time'] > 100000000):

        # This prints randomly for some cases and others doesn't

        print(result.json()['Time'])

Re: Israeli Mossad launches cyber challenge

#66

Post by [deleted] »

TheLoneTechNerd wrote: post #30
mrlatinos wrote: post #29

Earlier quoted context omitted.

Cookies must be enabled... APK to install... Does curiosity really make ya'll this dumb?

Level 1: The people who just go to the site/download the APK Level 2: The people who realize that the requested actions are likely unsafe, and complain about it Level 3: People who realize that this is part of the challenge and just use a VM Nobody on HN is "this dumb", if you want to participate in a challenge with an intelligence agency , take the proper precautions

[deleted]

Re: Israeli Mossad launches cyber challenge

#67

Post by m3gatr0n »

nocturnial wrote: post #54
mrlatinos wrote: post #32

Earlier quoted context omitted.

The majority of the population is Level 1. Consider what that means for Mossad. Enjoy your challenge.

I thought the majority of the population was level 4. Level 4: Ignore it.

Level 5: You've downloaded Droid4X extra because of it, installed Java and everything and then you come back on HN to look if somebody is already on the next challenge (in order to save time) and then you start again, but with the new challenge :)

Re: Israeli Mossad launches cyber challenge

#68

Post by stdcall83 »

DvirRonaldo wrote: post #62

First Challenge Solution: Mossad 2019 Challenge Start: https://r-u-ready-4.it/ Every line in the image is binary 8-bit number that will give you an ip address : 35.246.158.51 Challenge-1 :Link http://3d375032374147a7865753e4bbc92682.xyz / http://35.246.158.51 Download app.apk from http://3d375032374147a7865753e4bbc92682.xyz/static/app.apk Remember your Client ID - mine is 854279b4c89e4b5c9722352c3f9f1d6c You will use…

Exactly what I did. But in Python. Now I'm stuck on challenge 2
Post reply on HN