Axino.net » javascript

JavaScript Challenge 15 :: nag a ram

Arxleol — Sun, 04 Jul 2010 01:10:22 +0000

This mission is interesting and a bit harder to solve, because we need to actually solve it and cannot use some simple way of outputting finished password.

Javascript actually generates password from riddle or even better anagram.



// Written by SlimTim10
// Hint: The answer may be more than one word and may contain spaces.
 
function checkpassword()
{
 
	password = document.password.password.value;
	var a = password.charAt(9)
	var c = password.charAt(4)
	var b = password.charAt(10)
	var d = password.charAt(7)
	var f = password.charAt(6)
	var e = password.charAt(1)
	var g = password.charAt(3)
	var i = password.charAt(0)
	var h = password.charAt(8)
	var j = password.charAt(13)
	var l = password.charAt(5)
	var k = password.charAt(6)
	var m = password.charAt(11)
	var o = password.charAt(12)
	var n = password.charAt(2)
	var riddle = "query test mess";
 
	if (a+""+b+""+c+""+d+""+e+""+f+""+g+""+h+""+i+""+j+""+k+""+l+""+m+""+n+""+o==riddle)
	{
		alert("Congratulations!");
	}
	else
	{
		alert("Wrong, but keep at it!");
	}
 
}

To solve it I used piece of paper. First I draw 14 boxes starting with zero till 13. Next step is to copy anagram: query test mess. And write below each letter, letters from a to o.

Now you need to fill boxes with letters let’s solve it for letter a.

Over letter A is letter Q and now we check javascript code: var a = password.charAt(9) so letter a should be in box 9 so fill the box 9 with q.

Simple or not. Here is interesting and surprising final answer: system requestSimilar Posts:

JavaScript Challenge 10 :: Math time

Arxleol — Sat, 03 Jul 2010 16:16:20 +0000

We will solve this challenge as we already used to solve some others. Simply by executing javascript in your browser and checking result.

So very first step is to find javascript that will be executed when password is entered.



 //By system_meltdown
 function checkpass()
 {
 pass=document.password.pass.value;
 rawr=unescape('%61%68%6f%79');
 string="llama llama duck!";
 a=string.charCodeAt(1);
 b=string.charCodeAt(7);
 c=string.charCodeAt(4);
 schloob=((60*50/3*a)-(b*c))/2/5+b;
 asdf=rawr+"_"+schloob;
 if(pass==asdf)
 {
 alert('Wahoo you got it!');
 }
 else
 {
 alert('Awww shame!');
 
 }
}

Now for executing we will take just the important part of code:



rawr=unescape('%61%68%6f%79');
 string="llama llama duck!";
 a=string.charCodeAt(1);
 b=string.charCodeAt(7);
 c=string.charCodeAt(4);
 schloob=((60*50/3*a)-(b*c))/2/5+b;
 asdf=rawr+"_"+schloob;

Executing script in your browser is easy. Just open new tab and in the URL bar enter following javascript code. Notice that I am alerting value of asdf variable.



javascript:rawr=unescape('%61%68%6f%79');string="llama llama duck!";a=string.charCodeAt(1);b=string.charCodeAt(7);c=string.charCodeAt(4);schloob=((60*50/3*a)-(b*c))/2/5+b;asdf=rawr+"_"+schloob; alert(asdf);

Now you should receive this password as result.

ahoy_9860.4

Similar Posts:

JavaScript Challenge 14 :: Simple answer

Arxleol — Thu, 10 Jun 2010 21:44:40 +0000

Sometimes the simplest answer is the correct one. Obvious when you examine this challenge you will find following javascript:



a = screen.width;
if(a != 800)
{
 alert('Sorry you do not have the right parameters!');
}else{
 window.location='/challenges/js/js14/index.php?ans=1e799d6ab6736c258580e7bc9feebacb'
}

Now you probably notice that you should have screen resolution of width 800 pixels. However, if you check else statement you will find new location and if you use it you will solve this challange.

So jump to this URL: index.php?ans=1e799d6ab6736c258580e7bc9feebacbSimilar Posts:

JavaScript Challenge 13 :: Cookie

Arxleol — Tue, 08 Jun 2010 22:28:17 +0000

We will solve this challenge with Firebug. Open challenge page in Firefox, and start Firebug. Now you probably see this sentence:

You are not authorized to view this page!

however, checking source code you will find that page is using cookie for authorization named authorized with value: false.

So if you are already in Firebug just open Cookies tab find cookie named authorized right click on it and select edit. Now just change false into true and reload page.Similar Posts:

JavaScript Challenge 12 :: execute

Arxleol — Tue, 08 Jun 2010 21:53:50 +0000

I know, when you opened this challenge you probably though again some math problem. But this one can be solved very easily.

Script that awaits you is long and it would be boring to analyze it. You already noticed that you cannot use javascript injection.



function checkpass()
{ 
 
 pass=document.password.pass.value;
 z=2;
 x=z*1.5;
 v=z*2;
 w=v*1.75;
 y=v*1.25;
 abc=(((y*v*y*x+z)*x+w)*z+y)*v+w; 
 
 if(pass==abc)
 {
  alert('Congratz! You are good at Math');
 }
 else
 {
  alert('Sorry, try again when you learn more Math!'); 
 
 } 
 
}

So what we want to do is to execute mathematical part and obtain answer. You can do this by opening new tab and executing following script that will output correct mathematical answer:



javascript:z=2;x=z*1.5;v=z*2;w=v*1.75;y=v*1.25;abc=(((y*v*y*x+z)*x+w)*z+y)*v+w;alert(abc);

You should get this answer in alert box: 7331Similar Posts:

JavaScript Challenge 11 :: js injection

Arxleol — Sun, 06 Jun 2010 20:14:46 +0000

This time we will use javascript injection once more.

Javascript code we are required to examine is following:



//By system_meltdown
var s = "Llama llama chicken duck, schloob mcfroob, moo asdf qwerty zxcv. Rawr llama kinasd, [insert random crap here]It's hammer on the keyboard time: sfsdfoashdfy78sdfysdfs67dftsdf 6tsdf76as tfa. Well I'm bored, so if you're still reading this I advise you to stop because you are wasting your time....dumbarse :)";
var asd = s.charCodeAt(14);
var fdsa = s.charCodeAt(42);
var sadfasf = s.charCodeAt(4);
var moo = s.charCodeAt(43);
var teeep = s.charCodeAt(32);
var asdf = asd+fdsa+sadfasf+moo+teeep;
function checkpass()
{
pass=document.password.pass.value;
if(pass==asdf)
{
alert('Well done dude!');
}
else
{
alert('You suck!');
}
}

Now instead of analyzing the code we will use once again javascript injection. You probably already noticed if statement in whish password is compared to asdf. What we will do is to output value of asdf and enter it as the password.

So next step is to write peace of javascript code in the URL bar in your browser and output variable asdf.



javascript:alert(asdf)

I obtained following value: 441Similar Posts:

JavaScript Challenge 9 :: timer

Arxleol — Wed, 02 Jun 2010 19:59:35 +0000

In this challenge we are faced with timer. As soon as you’ve seen this challenge you figured out you have to reset timer somehow.

Of course one probable solution would be to wait until timer reaches zero value.

But that defies the point. If you examine code you will find following script:



<script>
var c = 34200;
var p = "%68%6F%77%73%6C%69%66%65%3F%65%61%73%79%2E%00";
var a;
fc();
function fc()
{
if(c>0)
{
 document.getElementById("say").innerHTML = "Please wait " + c + ' seconds.';
 c = c - 1;
 setTimeout("fc()", 1000)
} else {
 a = unescape("%33");
 document.getElementById("say").innerHTML = "Your password is: " + unescape(p-a) + unescape("%3C%66%6F%72%6D%20%61%63%74%69%6F%6E%3D%27%69%6E%64%65%78%2E%70%68%70%27%20%6D%65%74%68%6F%64%3D%27%50%4F%53%54%27%3E%0D%0A%45%6E%74%65%72%20%50%61%73%73%77%6F%72%64%3A%20%3C%69%6E%70%75%74%20%74%79%70%65%3D%27%74%65%78%74%27%20%6E%61%6D%65%3D%27%70%61%73%73%27%20%73%74%79%6C%65%3D%27%74%65%78%74%62%6F%78%27%3E%3C%62%72%3E%0D%0A%3C%69%6E%70%75%74%20%74%79%70%65%3D%27%73%75%62%6D%69%74%27%20%6E%61%6D%65%3D%27%73%75%62%6D%69%74%27%20%76%61%6C%75%65%3D%27%43%68%65%63%6B%20%79%6F%75%20%61%6E%73%77%65%72%27%20%73%74%79%6C%65%3D%27%62%75%74%74%6F%6E%27%3E%0D%0A%3C%2F%66%6F%72%6D%3E%00");
}
}
script>

This is where Firebug comes in really handy. Now open Firebug and select DOM tab in here you should search for variable c. Because variable c contains number of seconds till we receive our password. And now when you find variable c in DOM tab change its value to something low for example number 5. Now if you’ve done everything correctly you will notice that counters switched to 5 and is counting down. When it reaches 0 you will receive password:

Your password is: NaN

Similar Posts:

hackthissite.org solutions to all javascript missions

Arxleol — Sat, 22 May 2010 22:59:51 +0000

Javascript missions

Similar Posts:

Javascript Missions 7 :: JS Obfuscation. FTW!

Arxleol — Sat, 22 May 2010 09:37:32 +0000

Now this one is really tricky if you are not using right tool. At first I was checking obfuscated code and couldn’t figure out much. Then I went to search trough source code of the page and didn’t find anything useful. Noteworthy is that I was using Google Chrome. Then I switched to Firefox and examined code with Firebug. And what surprise awaited me. Well see for yourself:

And this did not show up in Chrome really interesting. So you can see that password is: j00w1nSimilar Posts:

Javascript Missions 6 :: go go away .js

Arxleol — Wed, 19 May 2010 23:00:03 +0000

This is nice example of some kind of decoy strategy. At first when you opened mission you checked source code and found following two functions.



RawrRawr = "moo";
function check(x)
{
"+RawrRawr+" == "hack_this_site"
if (x == ""+RawrRawr+"")
{
alert("Rawr! win!");
window.location = "about:blank";
} else {
alert("Rawr, nope, try again!");
}
}
 
function checkpassw(moo)
{
RawrRawr = moo;
checkpass(RawrRawr);
}

Now if you check HTML code of the button you will notice that function is not among these two present.

So I followed this clue and found that above those two functions there is remotely connected javascript file.

When you open that file you will find following javascript code:



dairycow="moo";
moo = "pwns";
rawr = "moo";
 
function checkpass(pass)
{
if(pass == rawr+" "+moo)
{
alert("How did you do that??? Good job!");
window.location = "../../../missions/javascript/6/?lvl_password="+pass;
} else {
alert("Nope, try again");
}
}

I guess that from here you are already able to figure that password is: moo pwns. If not then ask Similar Posts: