Are you good enough to hack?

[Nastrodamus]

Here is an online hacking game...enjoy...

Hack me if you can (http://www.hulla-balloo.com/hack/level1/)

[Nastrodamus]

Level one is so easy....


Oh ... By the way...

What this game is about is that your are to hack into the page, that is find the password to get in.

;)

[Nastrodamus]

I can't seem to get pass level 3...

I know its easy but its just not clicking...

[Arch_Angel]

Yeah, I'm stuck on level 3 too. Thought it was my lack of hacking skills that I couldn't figure it out, but I see you're in the same boat, so I don't feel so bad. ;D

[MiTcHiE]

Summen muss wrong with me. I caan get pass Level 1

[Nastrodamus]

Level One Hint : Go back to the source

[Ropy]

I prefer to use the version found at http://www.hackthissite.org/ than the one nastro is talking about. It was too much head ache for me although this is only a little bit better.

[ramesh]

I'm at level 3 too. The hint is password.txt and line 8, but I tried everything I could think of. It hold me!

[Nastrodamus]

Read the error again..... ;D


If the password.txt is not there, then where is it? ;)

[ramesh]

That still don't help me. I looked into that already, and nothing click yet. You past level 3 yet, Nas?

[Arch_Angel]

I prefer to use the version found at http://www.hackthissite.org/ than the one nastro is talking about. It was too much head ache for me although this is only a little bit better.
Something about registering at a site that deals with hacking, doesn't too agree with me. That's why I didn't join up. :-\

[GATT-Handsome]

i was on hackthissite but someone hack it and messed up my account and i could neer log on again

:(

[GATT-Handsome]

[u]Chapter 3: Discovering Password Files

So, you've tried everything from asking people to brute forcing the server, but you just can't find out the password file's name or directory? Don't panic! In this site's basic web hacking challenges, you will ALWAYS either have a way to find out the password file, or decrypting passwords (see the next chapter). I'm going to walk you through a couple of ways of finding these out.

So, let's go back a chapter. Say that you previously had access to a file, and now you don't. Before, the webmaster fogot to upload the password file and you had free access to everything..but now he remembered, and uploaded the password file. What do you do?

Well, again...do not panic. There are a few steps to do in order to figure it out. Remember when I told you to take the error message down if you saw one? Well, this is where it will be in good use. You should have seen an error like this, depending on the type of server:

Warning: fopen(somefile.txt): failed to open stream: No such file or directory in somedirectory/somesubdirectory/somesubdirectory/ on line X

The line X can be any number, and the somedirectory/somesubdirectory is whereever the file it was trying to open [(fopen(somefile.txt)]. Here's the reason why I told you to keep that:

As the webmaster finds out that he had no password file, he/she may have uploaded it as quickly as possible. He/she may have also uploaded it to the same place as it was going to go before...That way, the script still works. Why does that help you? Well, look at your error.

Warning: fopen(somefile.txt): failed to open stream: No such file or directory in somedirectory/somesubdirectory/somesubdirectory/ on line X

That tells you the name of the password file, and where it is located! That way, you can just put it into your browser and get the password! Simple as that!

(*Note*: Most people, while trying to get to level 4, can not find the password file. This is due to them looking for the password file at: web/level3/password.txt However, are we trying to look for the password for level 3, or for level 4? Are you trying to get into level 3, or level 4? Should you be looking for the password in the level 3 directory, or level 4?)
[u]
that is for level 3
and his is the link
http://www.hackthissite.org/readarticle.php?id=185

[willy]

well i am at level 9 if u want to hack some thing go to hackerslab.org this is too easy i think thy got this idea from wwwtrytohack.com

ps: i was jokin didn't even try to hack pass level 2 level 1 was too easy