Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Israeli Mossad launches cyber challenge

3d375032374147a7865753e4bbc92682.xyz

Post reply on HN
Print view View original

71–80 of 121 posts

Re: Israeli Mossad launches cyber challenge

#71

Post by j4m3sr00t »

stdcall83 wrote: post #68
DvirRonaldo wrote: post #62

First Challenge Solution: Mossad 2019 Challenge Start: https://r-u-ready-4.it/ Every line in the image is binary 8-bit number that will give you an ip address : 35.246.158.51 Challenge-1 :Link http://3d375032374147a7865753e4bbc92682.xyz / http://35.246.158.51 Download app.apk from http://3d375032374147a7865753e4bbc92682.xyz/static/app.apk Remember your Client ID - mine is 854279b4c89e4b5c9722352c3f9f1d6c You will use…

Exactly what I did. But in Python. Now I'm stuck on challenge 2

Yes, I'm stuck on second as well.

But I got some progress: 1. Image leads to subdomain: http://dev.missilesys.com/ 2. It generates p12 certificate for login to admin-panel. You should enter username/password, submit the form and click download. (It there is no download button just try something like this: refresh the page, change method from POST to GET, enter credentials and press Submit, after that press submit again it'll appear) 3. Add certificate to KeyChain (on macOS) and go to missilesys.com. 4. You're got into admin-panel, but you have no permissions to shutdown it. You need to be an administrator. 5. You should get .p12 certificate for administrator, but you can't because "User alreay exists!". This's place where I'm stuck.

It would be great if you have an idea how to handle with it :)

Re: Israeli Mossad launches cyber challenge

#73

Post by Harible »

j4m3sr00t wrote: post #71
stdcall83 wrote: post #68

Earlier quoted context omitted.

Exactly what I did. But in Python. Now I'm stuck on challenge 2

Yes, I'm stuck on second as well. But I got some progress: 1. Image leads to subdomain: http://dev.missilesys.com/ 2. It generates p12 certificate for login to admin-panel. You should enter username/password, submit the form and click download. (It there is no download button just try something like this: refresh the page, change method from POST to GET, enter credentials and press Submit, after that press submit aga…

Now the problem is to get the administrator certificate

Re: Israeli Mossad launches cyber challenge

#74

Post by hashberry »

whoisjuan wrote: post #46
hashberry wrote: post #41

This site loads the jQuery library in order to... 1. Access $("#text1")[0].innerHTML 2. $( document ).ready() { typeWriter (); } facepalm

It's done like that because the typeWriter effect is actually rendering line break elements ( ) as it shows up.

woosh, loading jQuery to access an element is not needed. document.getElementById would suffice.

Re: Israeli Mossad launches cyber challenge

#76

Post by j4m3sr00t »

Harible wrote: post #73
j4m3sr00t wrote: post #71

Earlier quoted context omitted.

Yes, I'm stuck on second as well. But I got some progress: 1. Image leads to subdomain: http://dev.missilesys.com/ 2. It generates p12 certificate for login to admin-panel. You should enter username/password, submit the form and click download. (It there is no download button just try something like this: refresh the page, change method from POST to GET, enter credentials and press Submit, after that press submit aga…

Now the problem is to get the administrator certificate

Did you solve it?

Re: Israeli Mossad launches cyber challenge

#77

Post by Gra8 »

Harible wrote: post #73
j4m3sr00t wrote: post #71

Earlier quoted context omitted.

Yes, I'm stuck on second as well. But I got some progress: 1. Image leads to subdomain: http://dev.missilesys.com/ 2. It generates p12 certificate for login to admin-panel. You should enter username/password, submit the form and click download. (It there is no download button just try something like this: refresh the page, change method from POST to GET, enter credentials and press Submit, after that press submit aga…

Now the problem is to get the administrator certificate

As I check:You need to input administrator inside login without pass in browser Preserve log mode and jAvAsCrIpT generate it by login name check Headers Form Data private key .I think I am on the way but now I need password from cert of Admin now:))

Re: Israeli Mossad launches cyber challenge

#78

Post by [deleted] »

Gra8 wrote: post #77
Harible wrote: post #73

Earlier quoted context omitted.

Now the problem is to get the administrator certificate

As I check:You need to input administrator inside login without pass in browser Preserve log mode and jAvAsCrIpT generate it by login name check Headers Form Data private key .I think I am on the way but now I need password from cert of Admin now:))

[deleted]

Re: Israeli Mossad launches cyber challenge

#79

Post by itaybre »

Gra8 wrote: post #77
Harible wrote: post #73

Earlier quoted context omitted.

Now the problem is to get the administrator certificate

As I check:You need to input administrator inside login without pass in browser Preserve log mode and jAvAsCrIpT generate it by login name check Headers Form Data private key .I think I am on the way but now I need password from cert of Admin now:))

Did you get any solution from there? To me it seems that these are just randomly generated certs with a CN

Re: Israeli Mossad launches cyber challenge

#80

Post by whoisjuan »

hashberry wrote: post #74
whoisjuan wrote: post #46

Earlier quoted context omitted.

It's done like that because the typeWriter effect is actually rendering line break elements ( ) as it shows up.

woosh , loading jQuery to access an element is not needed. document.getElementById would suffice.

jQuery is still a valid way to manipulate the DOM. There’s nothing wrong with doing that, especially if you already need to load jQuery for something else. I don’t think this is what the comment was referring to.
Post reply on HN