Nome Utente: 
Password : 
Restringi sessione all'IP 
Online in 1gg

Challenge: A Black Hats Tale  Vai alla sfida "A Black Hats Tale"

1 2 3 4
Posizione globale: 184
Punteggio totale: 115121
Posts : 166
Grazie: 164
Voti+: 121
Registrato: 18a 251gg
Avatar di Z



Ultima visita: 170gg 15ore
L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci3Grazie!3Bel post!0Brutto post! Link
Some hints regarding the challenge:

If you receive "Login failed, invalid username or password." this means that your reply has been timed out.

Regarding the last part (the challenge is a 3 part ), it looks like that in case of some tools, time zones matters. I have created this challenge in CET/CEST timezone. If you still can't get the right solution, please contact me.

For the token code challenge, a hint:
779286 - from Fri Jul 27 14:23:00 2012 to Fri Jul 27 14:23:59 2012
XXXXX - from Fri Jul 27 14:24:00 2012 to Fri Jul 27 14:24:59 2012 ---> this is the solution
440866 - from Fri Jul 27 14:25:00 2012 to Fri Jul 27 14:25:59 2012

GreetZ and happy challenging
Ultima modifica: Z - 03 Nov 2015 - 15:01:27
Posizione globale: 184
Punteggio totale: 115121
Posts : 166
Grazie: 164
Voti+: 121
Registrato: 18a 251gg
Avatar di Z



Ultima visita: 170gg 15ore
L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!1Bel post!2Brutto post! Link
And another important thing regarding the last part:
If you have found a c source code where you have to enter the current token code displayed, than either you have to search for another tool, or you have to modify it.
Punteggio totale: 956654
Posts : 127
Grazie: 167
Voti+: 115
Registrato: 18a 202gg
Avatar di Jinx














L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!1Bel post!1Brutto post! Link
Hello,
Which C-sourcecode are you talking about? Am I missing something?
I'm totally clueless about the 3rd part. I have the given .asc file and that's all.
Posizione globale: 184
Punteggio totale: 115121
Posts : 166
Grazie: 164
Voti+: 121
Registrato: 18a 251gg
Avatar di Z



Ultima visita: 170gg 15ore
L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!1Bel post!0Brutto post! Link
The 3.rd part is about to google a tool for this one time password thingy. There are some c codes, but not every is suitable for this challenge, and there is also a general purpose windows hacking program, where the older versions are known to working for this challenge. And you have to know what PSA InSecurID means...
Posizione globale: 626
Punteggio totale: 42692
Posts : 22
Grazie: 16
Voti+: 11
Registrato: 18a 177gg


L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!0Bel post!1Brutto post! Link
PSA InSecurID is really, really clear. Just change/remove a few letters and it's obvious. I have that code you were talking about, yes, it is useless (unfortunately).

Perhaps you could give a clue about that general purpose windows hacking program. Windows hacking is either obtaining/cracking LM/NT hashes (which is obviously not related to this challenge) or ?Rem*Desk*Con*? hacking?
Posizione globale: 184
Punteggio totale: 115121
Posts : 166
Grazie: 164
Voti+: 121
Registrato: 18a 251gg
Avatar di Z



Ultima visita: 170gg 15ore
L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!0Bel post!1Brutto post! Link
The general purpose windows hacking program is called **i* from **i*.it Smile
Posizione globale: 626
Punteggio totale: 42692
Posts : 22
Grazie: 16
Voti+: 11
Registrato: 18a 177gg


L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!0Bel post!1Brutto post! Link
Even though your hint is... Disturbing... I probably know what is that "general purpose windows hacking program". Isn't that supposed to be **i******? (not one word), seeing what data is given.

EDIT: yes, I was right, thanks for the hint anyway (it helped to ensure THAT was the right tool) ;)
Ultima modifica: WingeDD - 21 Lug 2009 - 10:07:13
Posizione globale: 184
Punteggio totale: 115121
Posts : 166
Grazie: 164
Voti+: 121
Registrato: 18a 251gg
Avatar di Z



Ultima visita: 170gg 15ore
L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!0Bel post!1Brutto post! Link
Yes, it is **i* * **** but you dont need the * **** part Smile
Punteggio totale: 956654
Posts : 127
Grazie: 167
Voti+: 115
Registrato: 18a 202gg
Avatar di Jinx














L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!0Bel post!1Brutto post! Link
I found the program to calculate it. Runs fine. But it looks like I've got a newer version of it..
I put everything which is given into the program, but don't get the correct number O_o
It's calculating the correct numbers to my input. It looks like, that it's only calculating the numbers for the new version of the chips ;-)
May I pm someone with my results please?

Ultima modifica: Jinx - 21 Lug 2009 - 11:48:04
Posizione globale: 626
Punteggio totale: 42692
Posts : 22
Grazie: 16
Voti+: 11
Registrato: 18a 177gg


L'utente è Offline
Challenge: A Black Hats Tale
Google/traduci1Grazie!0Bel post!1Brutto post! Link
If you have used a too new version, it wouldn't even had allowed you to give the token/import .asc.
Are you sure you have set the correct date&time in the correct timezone?
1 2 3 4
quangntenemy, hobbist, digitalseraphim, tunelko, Doantruongduy, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, WingeDD, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 69114 volte.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.