hackertest.net level 3 :: Same but different
by Arxleol on Sunday 11.01.2009, under hackertest.net, tutorial
hackertest level 3 is similar to the previous two in fact it is almost the same as the level 2 just that you are required also to have some basic html knowledge, before proceeding.
When you pass level 2 level 3 page is opened and yet again inquires password from us in prompt window. It is OK to click cancel and use knowledge from the previous level, therefore immediately examining source code of the page.
On the very beginning of the page you will find this javascript function:
function pass() { var pw, Eingabe; pw=window.document.alinkColor; Eingabe=prompt ("Please enter password"); if (Eingabe==pw) { window.location.href=String.fromCharCode(97,98,114,97,101)+".htm"; } else { alert("Try again"); } }
At first glance you probably notice two variables one is initialized with the specific value from the web page. We will return to this part later, meanwhile the other receives value from the prompt window that is the value that we have entered. The next statement is then comparison between these two variables and as you may imagine it is very simple to get pass this if we find the value of the pw variable.
As I have mentioned in the post that is solution for the level 1 you may notice window.document this referes to the same web page again and after that alinkcolor a is html tag that represents those hyperlinks things that you are able to click and another web page is opened alinkcolor is a default color of such link. Now these values may be saved in css file not to go in this too deep or in the file you are viewing. Since they are reading this value from the current file we must search if there is color of the hyperlink defined somewhere.
To help all of you who haven’t found it check out body tag. Body tags are used to represent the body of html document in fact the things that are visible to you user.
Here is body tag:
<body onload=javascript:pass(); alink="#000000">
Checkout what is written in the end of the body tag alink=”#000000″ in fact they declare hyperlink color here, so you should just copy the value of the color and enter it in the prompt box.
So password for the impatiant ones is: #000000
Thursday 03.12.2009 on 00:16
[...] http://www.hackertest.net/l3l.htm level3 [...]
Monday 26.07.2010 on 07:31
lv purse