Umm... have other people been able to spot the vulnerability but been unable to answer due to the answers not making very much sense?
Vuln hunting has its own vocab now :-(
Game of Hacks
11–20 of 56 posts
Re: Game of Hacks
#12There's a big difference between having to select between four different kinds of vulnerabilities when given a piece of that you're told is insecure, and identifying them in the wild. This is more putting the square peg in the square hole than it is measuring the angles and being able to accurately identify the shape.
One of the questions that I got had an option that said "No vulnerabilities". I think having that option for every question with some solid code will let you find vulnerabilities more accurately.
Re: Game of Hacks
#13Timer really put me off. I can solve these, I just need more time, having not used some of these languages in a while.
I'd rather the time counted up, losing points, instead of counting down until I'm told I fail.
Re: Game of Hacks
#14After you answer a question, there should be an explanation of the right answer. I was able to guess through some that I had no idea what they actually were, and an explanation of why I did/didn't get it right will help a lot and actually help me identify vulnerable code.
Re: Game of Hacks
#15After you answer a question, there should be an explanation of the right answer. I was able to guess through some that I had no idea what they actually were, and an explanation of why I did/didn't get it right will help a lot and actually help me identify vulnerable code.
Yeah. I have no CS background so I was hoping to learn something here. Nope.
Re: Game of Hacks
#16Like the idea (and infact I've submitted some code loosely based on an example I actually found in an application!), but yeah, the comments about needing more time because of having not used some of the languages applies here also. And yeah, an explanation of the right answer would help - especially if you haven't used the language (at all, or in a while).
Re: Game of Hacks
#17You should aways have the answer "Non-exploitable code" for every question. For some questions, the lack of this answer makes it clear that there is a vulnerability, and the structure of the question makes it obvious which one of the answers is most likely (e.g., no SQL or methods dealing with SQL exclude all SQL based answers, a question with "sleep" is highly likely to be a DOS by Sleep, etc.)
I'm not a CS guy, but I was able to deduce a lot of the answers just from how the question was structured.
EDIT: The actual response in the app is "Non-exploitable code". Updated my comment to reflect this
Re: Game of Hacks
#18Somewhat ironic that the high scores have already been hacked, though a little inevitable since the game is client side I guess.
Re: Game of Hacks
#19Pretty easy, you can ace without knowing all the languages/APIs used, just follow the usual code smells.
Re: Game of Hacks
#20You should aways have the answer "Non-exploitable code" for every question. For some questions, the lack of this answer makes it clear that there is a vulnerability, and the structure of the question makes it obvious which one of the answers is most likely (e.g., no SQL or methods dealing with SQL exclude all SQL based answers, a question with "sleep" is highly likely to be a DOS by Sleep, etc.) I'm not a CS guy, but…
Just ran through 4 of the "beginner" tests and almost none of the answers I ran across was "none exist." Not trying to prove or disprove your point but did find it odd.