Hack your way through Stripe's Capture the Flag

Post by [deleted] » Thu, Feb 23, 2012, 1:04 AM UTC

chrisacky wrote: post #18

Lots of segfaults! Which by the looks of things, level03 is the furthest anyone is based on logs. > [32041.680408] level03[17009]: segfault at ffdc50c4 ip 00000000080487b2 sp 00000000ffe0aee0 error 4 in level03[8048000+1000]

Post by spicyj » Thu, Feb 23, 2012, 1:10 AM UTC

phzbOx wrote: post #102

Just a word on level2, I don't think that's a hint, if you think so I'll remove this comment asap. The login to get on the page is: level02 and the password is what you've found in level01. I.e. The challenge is not to crack that "Authorization required" dialog.

Post by phzbOx » Thu, Feb 23, 2012, 1:33 AM UTC

spicyj wrote: post #103

phzbOx wrote: post #102

Just a word on level2, I don't think that's a hint, if you think so I'll remove this comment asap. The login to get on the page is: level02 and the password is what you've found in level01. I.e. The challenge is not to crack that "Authorization required" dialog.

The welcome message says: > This one is a web-based vulnerability, so go ahead and point your browser to XXXXX. You'll need to provide the password for level02 using HTTP digest authentication. so no, it's not the challenge. :)

Post by kogir » Thu, Feb 23, 2012, 1:36 AM UTC

gdb wrote: post #92

[deleted] wrote: post #89

[deleted]

I think the machine was actually hosed due to fork bomb. (I kept bumping the rlimits as more people logged in and ran up against nprocs, but the last time I clearly just bumped nprocs way too high. Live and learn....) You certainly should be able to solve all of the levels without tons of brute force though.

Post by ryan-c » Thu, Feb 23, 2012, 2:21 AM UTC