Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

HBH Penetration Testing Challenge


HBH Penetration Testing Challenge


Here are the results for the weekends competition:

Spyware - 180 [WINNER] Mozzer - 125 mastergamer - 125 V1P3R - 100 darksun - 15 revolt0163 - 15 mikispag - 15

Also, basic 20 is now up for everyone, this challenge was created by <a href="/profile/nights_shadow.html">nights_shadow.

In addition to that, other 13 is also up :)

Patching 4 has now been released too, this challenge was made by <a href="/profile/system_meltdown.html">system_meltdown

Here are the results for the weekends competition:

Spyware - 180 Was able to not only hack the competition site, but pointed out further exploits that could lead to a breach of the full domain, instead of the sub domain challenge website.

Mozzer - 125 Obtained file access to the compeittion website and successfully hacked it using his own coded exploits.

mastergamer - 125 sucessfully hacked and obtained file access to the challenge website. He was also the first person to complete it. thus an additional 25 points.

V1P3R - 100 sucessfully hacked and obtained file access to the challenge website.

The following members were able to hack the forums using a public cookie exploit. however they were not able to obtain file access which was what the challenge asked for. however, 15 points are awarded for their effort and ability to breach the forums.

darksun - 15 revolt0163 - 15 mikispag - 15

Comments
ghost's avatar
ghost 17 years ago

Me as well spyware

ghost's avatar
ghost 17 years ago

i won too. mr cheese just didnt put me on :S :D

ghost's avatar
ghost 17 years ago

@blackbird: did you email cheese when you done it with a screenshot?

ghost's avatar
ghost 17 years ago

ya. we already talkes. i still get 15 points (didnt break into the files) now im just waitng for him to give me 15 points and put me up here :D

ghost's avatar
ghost 17 years ago

I did the cookie exploit on the forums. It just didn't work :P

korg's avatar
korg 17 years ago

Didn't get a shot at it "Pissed". By the time I got wind of it it was down:(. Oh well HOF time I guess.

ghost's avatar
ghost 17 years ago

I got my name up there too, I just hope mr_cheese finds the time to update the list soon.

ghost's avatar
ghost 17 years ago

man that was fun but hard… i just couldnt do it :) i hope we do that again some time :p shame it was ruined though

ghost's avatar
ghost 17 years ago

Would anyone want me to post s step-by-step guide on my blog?

ghost's avatar
ghost 17 years ago

didn't you use your own exploit?

ghost's avatar
ghost 17 years ago

@mozzer that would be great :D

ghost's avatar
ghost 17 years ago

I just found 2 XSS holes in members.php and the defaceable guestbook… didn't bother to send mail wasn't too grt for exploits anyway :)

ghost's avatar
ghost 17 years ago

@mozzer: i quite fancy a step by step please :D

ghost's avatar
ghost 17 years ago

Right, I'll stick that up tomorrow then