RUaNinja? Win Signed Copies of Ninja Hacking Book

Viewing 102 reply threads
  • Author
    Posts
    • #6067
      Don Donzal
      Keymaster

      [align=center:k9a1b0bn]RUaNinja?[/align:k9a1b0bn]

      Hey all you eager EH-Netters,

      Here’s another contest to test your skills. It’s pretty simple…

      1. Visit the Amazon Page for the new pen testing book, “Ninja Hacking,” by Thomas Wilhelm and Jason Andress (Both EH-Netters  8) ). The link can be found in the book review by Ryan Linn.

      2. There is a clue embedded somewhere on the Amazon page. That starts your ninja adventure.

      3. The only hint we’ll offer is that powers of observation are sometimes more important than L337 5|<1LL5!!

      That’s about it. The only other thing to mention is how we choose our winners. There are 3 signed copies of Ninja Hacking up for grabs. 3 names will be randomly chosen from the group of ninjas that finish the challenge by February 28, 2011.

      [align=center:k9a1b0bn]3 get signed copies, but EVERYONE gets a discount on Syngress Books!![/align:k9a1b0bn]
      [align=center:k9a1b0bn]20% Off Code: 50467
      Good at http://www.syngress.com only.[/align:k9a1b0bn]

      Happy Hacking,
      Don

      [hr:k9a1b0bn][/hr:k9a1b0bn]

      [align=center:k9a1b0bn]Special thanks to Syngress Publishing for providing the prizes and the coupon code. They've always been supportive of EH-Net & the entire security community. Kudos to the entire crew.[/align:k9a1b0bn]

    • #37840
      alan
      Participant

      Interesting… I almost did something without realizing there was a related competition!

      Good luck everyone, I’ve got Thomas’ other book and can say it was a great read.

      EDIT: Removed

    • #37841
      blackazarro
      Participant

      He he, nice… I thought I had it there for a while…

    • #37842
      Pookie
      Participant

      looks like fun

    • #37843
      MaXe
      Participant

      Nice, I thought I had it too but I hit a dead end  ;D

    • #37844
      Grendel
      Participant

      Ah, come on!…. it’s easy!!

      Ok, no it’s not. I got stuck, too.  :-

      Jason put a good challenge together, I must admit. Serious kudos.

    • #37845
      Don Donzal
      Keymaster

      I did the same thing. That’s the reason for the hint in #3 above.

      Don

    • #37846
      rattis
      Participant

      I’ve been bashing my head against this since the post went up. But am having no luck on it.

    • #37847
      hayabusa
      Participant

      @Grendel wrote:

      Ah, come on!…. it’s easy!!

      Ok, no it’s not. I got stuck, too.   :-

      Jason put a good challenge together, I must admit. Serious kudos.

      OK, so I’m pretty sure I found the starting point.  Now trying to determine what to DO with it…  This one has my interest piqued.

    • #37848
      AndyB67
      Participant

      ^ further than i’ve got 🙁 read it and re-read it. 
      May need to have a look earlier in the day when i’m a bit more focused

    • #37849
      rattis
      Participant

      There are 2 things I think could be the starting point. But I’m not really sure.

    • #37850
      mohaab
      Participant

      i think i found it
      i emailed don and wait his reply

    • #37851
      Pookie
      Participant

      I did one and got a good way with the other but am not sure what to do with it.  I think I may have followed a red herring, but since I cannot do with one thing what I want to do and get anywhere, I will keep down the (herring) path.

      very difficult challenge.  either that or my 1337 observation kung foo is weak

    • #37852
      dyngnosis
      Participant

      Anyone else freak out when they thought they were done and you were told to ‘try harder’?

    • #37853
      Don Donzal
      Keymaster

      At that point, I had some choice words for Jason that I’ll keep in my head. As his evil laughing faded away in my head, I could then hear him quoting Sun Tzu.

      Don

    • #37854
      Pookie
      Participant

      @dyngnosis wrote:

      Anyone else freak out when they thought they were done and you were told to ‘try harder’?

      but it was the way he did it.  That had style

    • #37855
      mohaab
      Participant

      I AM STUCK IN PDF PASSWORD WHO IS WITH ME ???????

    • #37856
      darkoperator
      Participant

      @dyngnosis wrote:

      Anyone else freak out when they thought they were done and you were told to ‘try harder’?

      I got stuck here too “try harder” ???

    • #37857
      jasohansen
      Participant

      Super fun… and super frustrating… masochism at its finest.

      EDIT: got the ‘try harder’…… Choice words were yelled….

    • #37858
      hayabusa
      Participant

      Wow… either I’m really close, or he threw a lot of EXTRA fun into this!

      (Edit – but the extra fun is definitely a challenge, in and of itself, whether intentional or not…)

    • #37859
      Pookie
      Participant

      @hayabusa wrote:

      the extra fun is definitely a challenge, in and of itself, whether intentional or not…

      agreed

    • #37860
      MaXe
      Participant

      @dyngnosis wrote:

      Anyone else freak out when they thought they were done and you were told to ‘try harder’?

      Same, got stuck there after 30 minutes  ;D I did check meta-data too but I didn’t check stenography, too lazy for that really  🙂

      The Amazon page is filled with extreme amounts of information so it is quite a lot one can try to look for.

    • #37861
      hayabusa
      Participant

      Well….. took me long enough, but I think I’ve gotten to the end.  Awaiting confirmation.

    • #37862
      Don Donzal
      Keymaster

      And we have our first Ninja!!

      Let me have your thoughts without giving it away… did the hint in Step #3 help or did you just find it on your own?

      We’ve also thought about giving away a little EH-Net love today by offering a hint, but we can’t figure out how to do it without spoonfeeding. Feel free to PM me if you feel you can’t discuss without revealing anything.

      Well done,
      Don

    • #37863
      hayabusa
      Participant

      Thanks, Don!

      (and PM’d you on the hints, etc…)  I know one that MAY come in handy, but not sure how you’d present it, without making things TOO obvious, either.

    • #37864
      tturner
      Participant

      Can’t believe I missed the very obvious hint. Really. It took me this long to see it. I kept thinking I had the wrong page or my work proxy was obscuring something critical. I’m ashamed. I’m so NOT a ninja. Well, let’s see how far this notaninja can get. Grats Hayabusa!

    • #37865
      hayabusa
      Participant

      Be ready to work a little.  That first part was the easy part.

      Thanks for the kudos.

    • #37866
      Pookie
      Participant

      Congrats!  I am banging my head on it, but not making progress since the first bit

    • #37867
      Don Donzal
      Keymaster

      We’re up to 3 ninjas!!

      Don

    • #37868
      Anonymous
      Participant

      Very interesting challenge……
      – obtained the first step
      – obtained the second step
      – found the”try harder”
      …….. cannot figure the passphrase out for the embedded file

      Lots of fun!

    • #37869
      mohaab
      Participant

      i think i finish it wait the results

      thx for this great game

    • #37870
      mallaigh
      Participant

      This an awesome challenge, and I appreciate the challenge.  But, I’m stuck on the PDF (probably overlooked something).

    • #37871
      Pookie
      Participant

      ok, try harder, been stuck 2 weeks, still am.  argh!! ???

    • #37872
      rattis
      Participant

      @Pookie wrote:

      ok, try harder, been stuck 2 weeks, still am.  argh!! ???

      I never even found the first clue. So you did way better than I did.

    • #37873
      MaXe
      Participant

      @chrisj wrote:

      @Pookie wrote:

      ok, try harder, been stuck 2 weeks, still am.  argh!! ???

      I never even found the first clue. So you did way better than I did.

      Hint: Where could they possibly insert embedded information when they can’t edit the Amazon page itself? (It’s very limited what is possible, and you might be surprised what starts this journey, also how you reach the dead end and then might realise that you forgot to look for something you didn’t anticipate  😉 Thanks Dxxxx

      I think the winners has probably already been found by now though  🙂

    • #37874
      jason
      Participant

      There’s still time! Everyone that gets through gets a shot at the drawing, so for anyone that hasn’t solved it yet, you still have a chance.  8)

    • #37875
      Anonymous
      Participant

      @mallaigh wrote:

      This an awesome challenge, and I appreciate the challenge.  But, I’m stuck on the PDF (probably overlooked something).

      I must be really stuck then, as I have not found any PDF that would require getting into……

    • #37876
      hayabusa
      Participant

      As jason noted, the winners are drawn, after February ends, once all successful folks have submitted their answers.  So they haven’t been ‘chosen,’ yet.  So I wish everyone else luck, who’s trying. 

      That said, for those who put in the hours and have figured it out, thus far, congratulations for success. 

      For those who haven’t gotten it, yet, keep trying.

      I won’t drop hints, as I don’t want to diminish the chances of others (who’ve worked hard and found the answers) to win the book.  After I’d solved it, don and I had discussed on a PM, and decided that since folks WERE then managing to solve this, it was best to ‘keep the playing field level.’  If spoilers are to be handed out, I’m sure the authors will do so, for folks’ learning purposes, after the contest ends.

      Suffice to say MaXe’s ‘hint’ is all the more someone should need, to at LEAST get started.

    • #37877
      Pookie
      Participant

      Woot! found the PDF, finally feel like I have accomplished something…

      Now opened the Password

      how much further do I need to go?  I think I am beginning to bug the guy and don’t wanna waste his time.

    • #37878
      hayabusa
      Participant

      When you’ve reached the finish you’ll know.  If you don’t know, yet, you’re likely not quite there…

      😉

    • #37879
      jason
      Participant

      Keep going, you’re very close  ;D

    • #37880
      jsm725
      Participant

      Ok, so I have spent way too much time on this. Anyone else stuck on the password? Trying to use l337 5|<1LL5 (pdf crackers) but feel like I should be able to guess it. Posting to vent frustration…. ???

    • #37881
      yatz
      Participant

      Props to Jason for putting this challenge together.  More props to those who have already finished it!!

      “Try Harder” indeed!  Wow.

    • #37882
      Pookie
      Participant

      Finished yesterday, just amazing challenge.  Learned a lot from it.  Thanks to the organizers.

    • #37883
      Don Donzal
      Keymaster

      Last weekend to play!!

      Don

    • #37884
      awhitehatter
      Participant

      Stumped at the try harder mark… I’ll keep digging.

    • #37885
      awhitehatter
      Participant

      Got a step further…stuck again…this is lots of fun. Thanks to all who put time into it.

    • #37886
      jason
      Participant

      Keep after it, you’ll get there  ;D

    • #37887
      mallaigh
      Participant

      Stuck on the PDF… still… trying to BF it, but can’t figure out what I’m missing.

    • #37888
      awhitehatter
      Participant

      @mallaigh wrote:

      Stuck on the PDF… still… trying to BF it, but can’t figure out what I’m missing.

      Me too!!!!! It’s 128 bit AES, it’ll be tough to BF won’t it?

      Don, will we get any last minute hints?

    • #37889
      Don Donzal
      Keymaster

      Short answer… no.

      Long answer… we have more than 3 ninjas, so there will be winners of the signed copies of the book without having to reward some who had hints and some who didn’t. So for fairness, there willbe no hints before the end of the month.

      On March 1, we’ll start giving away little hints to see if some people want to try it without being given the entire thing.

      Then we’ll do a write-up… maybe even with the help of the first ninja… so we’ll take you through the whole process.

      Hope that helps,
      Don

    • #37890
      awhitehatter
      Participant

      That’s fair, and thanks for giving us a couple of extra days to still figure it out. It’s been really challenging and I’m enjoying learning along the way. There’s still time for me to figure it out tonight! 🙂

      @don wrote:

      Short answer… no.

      Long answer… we have more than 3 ninjas, so there will be winners of the signed copies of the book without having to reward some who had hints and some who didn’t. So for fairness, there willbe no hints before the end of the month.

      On March 1, we’ll start giving away little hints to see if some people want to try it without being given the entire thing.

      Then we’ll do a write-up… maybe even with the help of the first ninja… so we’ll take you through the whole process.

      Hope that helps,
      Don

    • #37891
      jsm725
      Participant

      Finally got it…wow. It was a great challenge and a lot of fun. Thanks guys.

    • #37892
      hayabusa
      Participant

      @don wrote:

      Then we’ll do a write-up… maybe even with the help of the first ninja… so we’ll take you through the whole process.

      If this is a hint, don, I’ll start putting something together from my notes.  😉

    • #37893
      yatz
      Participant

      So how many finished this puzzle?  I’m excited to find out.

    • #37894
      jwshaw
      Participant

      Like many, I got stuck at the try harder part, but I made it past that part yesterday, though I’m still trying to figure out how to get the data out of the part that I discovered using my powers of observation.

    • #37895
      Pookie
      Participant

      @jwshaw wrote:

      Like many, I got stuck at the try harder part, but I made it past that part yesterday, though I’m still trying to figure out how to get the data out of the part that I discovered using my powers of observation.

      That part was so cool and I didn’t know you could do what it takes to get that out of the part you discovered.  (vague enough to not give spoilers)

    • #37896
      awhitehatter
      Participant

      Alright, I’m ready for hint…lol, sooo not a ninja..not yet.

      Like many others, I got stuck on the .pdf.

    • #37897
      Quicknesss
      Participant

      Where will be able to find out the solution and steps that were taken?

      Loved this challenge….didn’t get far, but still loved it!

    • #37898
      Don Donzal
      Keymaster

      [align=center:32gowjhe]Hint #1

      A docx file is actually a compressed file.[/align:32gowjhe]

      Stay tuned for 2 more hints then writeups from some (maybe all) of the 6 ninjas.

      Don

    • #37899
      yatz
      Participant

      Wow only 6 made it?  I’ll start working on my writeup.

      I am also in an organization called Toastmaters, which is a public speaking group.  I was considering doing this as a speech that involves visual aids, so doing a writeup would assist in that decision as well.

    • #37900
      AndyB67
      Participant

      I must have fallen out of the dense tree and hit several branches as i’m still getting nowhere with this one, even with the hint 🙁

    • #37901
      MaXe
      Participant

      @don wrote:

      Stay tuned for 2 more hints then writeups from some (maybe all) of the 6 ninjas.

      Don

      Wow, I thought there was a lot more who did it!  🙂

    • #37902
      awhitehatter
      Participant

      Congrats to the six who made it! Job well done!

    • #37903
      Don Donzal
      Keymaster

      After hearing from some out there, I guess we’ll have to do a prequel hint. So…

      [align=center:wztvj813]Hint #.5

      With all those newfangled smart phones out there, those dang QR Codes are showing up everywhere![/align:wztvj813]

      Don

    • #37904
      rattis
      Participant

      @don wrote:

      After hearing from some out there, I guess we’ll have to do a prequel hint. So…

      [align=center:1eio8vu2]Hint #.5

      With all those newfangled smart phones out there, those dang QR Codes are showing up everywhere![/align:1eio8vu2]

      Don

      GRRR… Really didn’t think that was part of the challenge. Which is probably why I was never able to start it.

    • #37905
      hayabusa
      Participant

      For those why don’t have smartphones, there are websites with online QR readers, too.  If it makes you feel better, chrisj, I had fits trying to read the code, at first, and thought it might not be a clue, either.  Remember to lower your camera resolution, or it might not be able to read properly.

    • #37906
      Data_Raid
      Participant

      The binary code on Jason’s face …. needs to be decoded …. by hand  ;D

    • #37907
      WCNA
      Participant

      I came way late to this party. I saw the QR code and figured it had something to do with the challenge but the only thing my phone got from it was an email address so I wasn’t sure whether this was part of the challenge or not.

      …and then it was time to go back to work.

    • #37908
      hayabusa
      Participant

      @WCNA – but isn’t the email address, in and of itself, kind of ‘thought provoking’?  As it would certainly appear to be, maybe dropping an email to that address would be worth your time.

      @Data_Raid – bwahahahahaha – yeah, I spent plenty of time exploring that, too.  (you’re too funny)

    • #37909
      lorddicranius
      Participant

      @hayabusa wrote:

      For those why don’t have smartphones, there are websites with online QR readers, too…

      Learned something new!  I had worked a little with those 2D barcodes before, but only using handheld scanners in a warehouse.  I didn’t know that there were smartphone apps and websites that decoded those for you too.

    • #37910
      rattis
      Participant

      @hayabusa wrote:

      but isn’t the email address, in and of itself, kind of ‘thought provoking’?  As it would certainly appear to be, maybe dropping an email to that address would be worth your time.

      It was. But I’ve seen some pretty good email addresses over the last couple of years. The guys at Sun Microsystems (Before Oracle bought them) had some great ones.

      So while my phone scanned and I saw the address. And I thought, yeah maybe… I ended up not doing it because I figured he got a really cool email address.

      I observed it, but figured there was NO way it was that easy to start.

    • #37911
      hayabusa
      Participant

      Understood.  I know how it goes.

    • #37912
      AndyB67
      Participant

      @chrisj wrote:

      I observed it, but figured there was NO way it was that easy to start.

      Easy he says…  So much for my powers of obvservation!!

      I was looking in the right area as it happens but completely missed that damn code  ::)

    • #37913
      rattis
      Participant

      @AndyB wrote:

      @chrisj wrote:

      I observed it, but figured there was NO way it was that easy to start.

      Easy he says…  So much for my powers of obvservation!!

      I was looking in the right area as it happens but completely missed that damn code  ::)

      ok, maybe I should have said, the first answer couldn’t be that simple… That was what I thought anyway. kicking myself hard

    • #37914
      Don Donzal
      Keymaster

      The point of the hints is not to kick yourselves, but to try and complete the challenge before all hints are revealed. So give it a shot now! You can still say you did it without being (entirely) spoonfed.  😉

      Don

    • #37915
      R3B005t
      Participant

      I’ve been following this site for awhile now, finally had to register to say I love this challenge, excellent job especially the starting point…. Like several others I’ve been stuck on the PDF but regardless very cool promotional idea!

    • #37916
      Don Donzal
      Keymaster

      [align=center:3w444dib]Hint #2[/align:3w444dib]

          File: Try Harder
          User: Easy for you to say.
          File: No need to get snippy. I’m just data.
          User: Sorry. Maybe I should get to know you better.

      Don

    • #37917
      awhitehatter
      Participant

      @don wrote:

      [align=center:2ykdnao9]Hint #2[/align:2ykdnao9]

           File: Try Harder
           User: Easy for you to say.
           File: No need to get snippy. I’m just data.
           User: Sorry. Maybe I should get to know you better.

      Don

      This was a frustrating point in the race 🙂

    • #37918
      Don Donzal
      Keymaster

      Did the hint help you get past it?

      Don

    • #37919
      lorddicranius
      Participant

      It didn’t help me, but I’m sure I’m making it out to be harder than it actually is lol

    • #37920
      ziggy_567
      Participant

      I’m pretty sure I’ve found what I need to move on….but the problem is I don’t know what to do with it…..

      Unfortunately, I’ve had the puzzle piece since before the contest ended…I just can’t figure out what it is used for…

    • #37921
      R3B005t
      Participant

      @lorddicranius wrote:

      It didn’t help me, but I’m sure I’m making it out to be harder than it actually is lol

      I’m in the same boat tried cracking the PDF analyzed the structure looking for clues and tried manipulating the qscan codes with no success I’m sure its something Ive overlooked but I’m at a loss but I refuse to give up!

    • #37922
      Don Donzal
      Keymaster

      What is defined as data about data? How do you find it?

      Don

    • #37923
      hayabusa
      Participant

      When it comes to data analysis, there are no strings attached… 😉

    • #37924
      ziggy_567
      Participant

      When it comes to data analysis, there are no strings attached…

      That’s a good one….anyway….the outcome of your hint is exactly what I’ve had for roughly 2 weeks trying to figure out what to do with…. ;D ;D ;D

    • #37925
      ziggy_567
      Participant

      By the way, there’s a more precise way to get the clue, hayabusa. I’m assuming Jason chose a JPEG for this precision…

    • #37926
      hayabusa
      Participant

      It’s no more precise, actually.  And if you think about my hint, it’d have helped on more than just this clue.  Works wonders for multiple pieces…

      Edit- if you ever do a lot of forensics, you’ll understand the method to my madness, and the reason you might consider going to it more quickly, down the road, especially when analyzing multiple files.  😉

      Further… Sorry to ramble.  Some of the data we’re referring to was NOT as obvious, using methods which I’m pretty sure you refer to, as it depends on the basics of your OS and default tools.  To be frank, I did try the ‘other’ methods, as well, in the event I missed something, but mine was faster, and I could automate multiple task quickly with it.  While it meant ‘glancing over’ the output, it was worth it to find multiple pieces of info for verification…

    • #37927
      hayabusa
      Participant

      @ziggy_567 wrote:

      When it comes to data analysis, there are no strings attached…

      That’s a good one….anyway….the outcome of your hint is exactly what I’ve had for roughly 2 weeks trying to figure out what to do with…. ;D ;D ;D

      PM me, off thread, ziggy, if you want someone to sound your thoughts to.  Sometimes, I find things come to me as I just tell someone what I’m thinking about.  I’m happy to be a sounding board, if it helps you move forward in it.  😉

    • #37928
      Don Donzal
      Keymaster

      [align=center:klyt8veo]
      Hint #3

      This challenge takes a lot of effort. You can't just phone it in. Then again, why not?!?![/align:klyt8veo]

      Don

    • #37929
      mohaab
      Participant

      !?!?ton yhw ,niaga nehT .ni ti enohp tsuj t’nac uoY .troffe fo tol a sekat egnellahc sihT

      3# tniH

    • #37930
      hayabusa
      Participant

      @mohaab wrote:

      !?!?ton yhw ,niaga nehT .ni ti enohp tsuj t’nac uoY .troffe fo tol a sekat egnellahc sihT

      3# tniH

    • #37931
      Pookie
      Participant

      I didn’t phone it in, I did it differently…

    • #37932
      yatz
      Participant

      Was anyone else able to solve this with the hints?

    • #37933
      Don Donzal
      Keymaster

      Yes. A few more made it through. We’ll be posting the write-ups in April after I get them all, edit, format blah blah blah.  ::)

      Don

    • #37934
      Pookie
      Participant

      and when do we find out who won?

    • #37935
      mohaab
      Participant

      who won this contest ??

      thanks

    • #37936
      MaXe
      Participant

      @mohaab wrote:

      who won this contest ??

      thanks

      I think they’re still drawing randomly, but keep ending up with one or several winners that shouldn’t win  ;D If not, no idea. I gave up on following this contest a long time ago to be honest, and I don’t really care any more  ;D But congratulations to the winners!  🙂 Whenever they’re announced  ;D

    • #37937
      blackazarro
      Participant

      I’m still waiting for the results. When are we going to found out? I can’t wait to see the answers.

    • #37938
      jason
      Participant

      I’ll ping Don about it…

    • #37939
      Don Donzal
      Keymaster

      Totally my bad. Here’s another hint to get most of you through until I get the winning answers posted.

      Look at the metadata. When you find a code, try typing it out using the numbers on your phone. See what the message reads and act accordingly.

      BTW – The 3 winners have been contacted. 2 of 3 have received their books. I’m still waiting to get a secondary address from the 3rd.

      No excuses, just having a lame moment on this one,
      Don

    • #37940
      mohaab
      Participant

      @don wrote:

      Totally my bad. Here’s another hint to get most of you through until I get the winning answers posted.

      Look at the metadata. When you find a code, try typing it out using the numbers on your phone. See what the message reads and act accordingly.

      BTW – The 3 winners have been contacted. 2 of 3 have received their books. I’m still waiting to get a secondary address from the 3rd.

      No excuses, just having a lame moment on this one,
      Don

      i know the  3rd winner

      he lives in far place in egypt 🙂

    • #37941
      blackazarro
      Participant

      I’m still waiting for the answers. Don, what happen here?

Viewing 102 reply threads
  • You must be logged in to reply to this topic.

Copyright ©2020 Caendra, Inc.

Contact Us

Thoughts, suggestions, issues? Send us an email, and we'll get back to you.

Sending

Sign in with Caendra

Forgot password?Sign up

Forgot your details?