RUaNinja? Win Signed Copies of Ninja Hacking Book

This topic contains 102 replies, has 27 voices, and was last updated by  blackazarro 8 years ago.

  • Author
    Posts
  • #6067
     Don Donzal 
    Keymaster

    [align=center:k9a1b0bn]RUaNinja?[/align:k9a1b0bn]

    Hey all you eager EH-Netters,

    Here’s another contest to test your skills. It’s pretty simple…

    1. Visit the Amazon Page for the new pen testing book, “Ninja Hacking,” by Thomas Wilhelm and Jason Andress (Both EH-Netters  8) ). The link can be found in the book review by Ryan Linn.

    2. There is a clue embedded somewhere on the Amazon page. That starts your ninja adventure.

    3. The only hint we’ll offer is that powers of observation are sometimes more important than L337 5|<1LL5!!

    That’s about it. The only other thing to mention is how we choose our winners. There are 3 signed copies of Ninja Hacking up for grabs. 3 names will be randomly chosen from the group of ninjas that finish the challenge by February 28, 2011.

    [align=center:k9a1b0bn]3 get signed copies, but EVERYONE gets a discount on Syngress Books!![/align:k9a1b0bn]
    [align=center:k9a1b0bn]20% Off Code: 50467
    Good at http://www.syngress.com only.[/align:k9a1b0bn]

    Happy Hacking,
    Don

    [hr:k9a1b0bn][/hr:k9a1b0bn]

    [align=center:k9a1b0bn]Special thanks to Syngress Publishing for providing the prizes and the coupon code. They've always been supportive of EH-Net & the entire security community. Kudos to the entire crew.[/align:k9a1b0bn]

  • #37840
     alan 
    Participant

    Interesting… I almost did something without realizing there was a related competition!

    Good luck everyone, I’ve got Thomas’ other book and can say it was a great read.

    EDIT: Removed

  • #37841
     blackazarro 
    Participant

    He he, nice… I thought I had it there for a while…

  • #37842
     Pookie 
    Participant

    looks like fun

  • #37843
     MaXe 
    Participant

    Nice, I thought I had it too but I hit a dead end  ;D

  • #37844
     Grendel 
    Participant

    Ah, come on!…. it’s easy!!

    Ok, no it’s not. I got stuck, too.  :-

    Jason put a good challenge together, I must admit. Serious kudos.

  • #37845
     Don Donzal 
    Keymaster

    I did the same thing. That’s the reason for the hint in #3 above.

    Don

  • #37846
     rattis 
    Participant

    I’ve been bashing my head against this since the post went up. But am having no luck on it.

  • #37847
     hayabusa 
    Participant

    @grendel wrote:

    Ah, come on!…. it’s easy!!

    Ok, no it’s not. I got stuck, too.   :-

    Jason put a good challenge together, I must admit. Serious kudos.

    OK, so I’m pretty sure I found the starting point.  Now trying to determine what to DO with it…  This one has my interest piqued.

  • #37848
     AndyB67 
    Participant

    ^ further than i’ve got 🙁 read it and re-read it. 
    May need to have a look earlier in the day when i’m a bit more focused

  • #37849
     rattis 
    Participant

    There are 2 things I think could be the starting point. But I’m not really sure.

  • #37850
     mohaab 
    Participant

    i think i found it
    i emailed don and wait his reply

  • #37851
     Pookie 
    Participant

    I did one and got a good way with the other but am not sure what to do with it.  I think I may have followed a red herring, but since I cannot do with one thing what I want to do and get anywhere, I will keep down the (herring) path.

    very difficult challenge.  either that or my 1337 observation kung foo is weak

  • #37852
     dyngnosis 
    Participant

    Anyone else freak out when they thought they were done and you were told to ‘try harder’?

  • #37853
     Don Donzal 
    Keymaster

    At that point, I had some choice words for Jason that I’ll keep in my head. As his evil laughing faded away in my head, I could then hear him quoting Sun Tzu.

    Don

  • #37854
     Pookie 
    Participant

    @dyngnosis wrote:

    Anyone else freak out when they thought they were done and you were told to ‘try harder’?

    but it was the way he did it.  That had style

  • #37855
     mohaab 
    Participant

    I AM STUCK IN PDF PASSWORD WHO IS WITH ME ???????

  • #37856
     darkoperator 
    Participant

    @dyngnosis wrote:

    Anyone else freak out when they thought they were done and you were told to ‘try harder’?

    I got stuck here too “try harder” ???

  • #37857
     jasohansen 
    Participant

    Super fun… and super frustrating… masochism at its finest.

    EDIT: got the ‘try harder’…… Choice words were yelled….

  • #37858
     hayabusa 
    Participant

    Wow… either I’m really close, or he threw a lot of EXTRA fun into this!

    (Edit – but the extra fun is definitely a challenge, in and of itself, whether intentional or not…)

  • #37859
     Pookie 
    Participant

    @hayabusa wrote:

    the extra fun is definitely a challenge, in and of itself, whether intentional or not…

    agreed

  • #37860
     MaXe 
    Participant

    @dyngnosis wrote:

    Anyone else freak out when they thought they were done and you were told to ‘try harder’?

    Same, got stuck there after 30 minutes  ;D I did check meta-data too but I didn’t check stenography, too lazy for that really  🙂

    The Amazon page is filled with extreme amounts of information so it is quite a lot one can try to look for.

  • #37861
     hayabusa 
    Participant

    Well….. took me long enough, but I think I’ve gotten to the end.  Awaiting confirmation.

  • #37862
     Don Donzal 
    Keymaster

    And we have our first Ninja!!

    Let me have your thoughts without giving it away… did the hint in Step #3 help or did you just find it on your own?

    We’ve also thought about giving away a little EH-Net love today by offering a hint, but we can’t figure out how to do it without spoonfeeding. Feel free to PM me if you feel you can’t discuss without revealing anything.

    Well done,
    Don

  • #37863
     hayabusa 
    Participant

    Thanks, Don!

    (and PM’d you on the hints, etc…)  I know one that MAY come in handy, but not sure how you’d present it, without making things TOO obvious, either.

  • #37864
     tturner 
    Participant

    Can’t believe I missed the very obvious hint. Really. It took me this long to see it. I kept thinking I had the wrong page or my work proxy was obscuring something critical. I’m ashamed. I’m so NOT a ninja. Well, let’s see how far this notaninja can get. Grats Hayabusa!

  • #37865
     hayabusa 
    Participant

    Be ready to work a little.  That first part was the easy part.

    Thanks for the kudos.

  • #37866
     Pookie 
    Participant

    Congrats!  I am banging my head on it, but not making progress since the first bit

  • #37867
     Don Donzal 
    Keymaster

    We’re up to 3 ninjas!!

    Don

  • #37868
     Anonymous 
    Participant

    Very interesting challenge……
    – obtained the first step
    – obtained the second step
    – found the”try harder”
    …….. cannot figure the passphrase out for the embedded file

    Lots of fun!

  • #37869
     mohaab 
    Participant

    i think i finish it wait the results

    thx for this great game

  • #37870
     mallaigh 
    Participant

    This an awesome challenge, and I appreciate the challenge.  But, I’m stuck on the PDF (probably overlooked something).

  • #37871
     Pookie 
    Participant

    ok, try harder, been stuck 2 weeks, still am.  argh!! ???

  • #37872
     rattis 
    Participant

    @pookie wrote:

    ok, try harder, been stuck 2 weeks, still am.  argh!! ???

    I never even found the first clue. So you did way better than I did.

  • #37873
     MaXe 
    Participant

    @chrisj wrote:

    @pookie wrote:

    ok, try harder, been stuck 2 weeks, still am.  argh!! ???

    I never even found the first clue. So you did way better than I did.

    Hint: Where could they possibly insert embedded information when they can’t edit the Amazon page itself? (It’s very limited what is possible, and you might be surprised what starts this journey, also how you reach the dead end and then might realise that you forgot to look for something you didn’t anticipate  😉 Thanks Dxxxx

    I think the winners has probably already been found by now though  🙂

  • #37874
     jason 
    Participant

    There’s still time! Everyone that gets through gets a shot at the drawing, so for anyone that hasn’t solved it yet, you still have a chance.  8)

  • #37875
     Anonymous 
    Participant

    @mallaigh wrote:

    This an awesome challenge, and I appreciate the challenge.  But, I’m stuck on the PDF (probably overlooked something).

    I must be really stuck then, as I have not found any PDF that would require getting into……

  • #37876
     hayabusa 
    Participant

    As jason noted, the winners are drawn, after February ends, once all successful folks have submitted their answers.  So they haven’t been ‘chosen,’ yet.  So I wish everyone else luck, who’s trying. 

    That said, for those who put in the hours and have figured it out, thus far, congratulations for success. 

    For those who haven’t gotten it, yet, keep trying.

    I won’t drop hints, as I don’t want to diminish the chances of others (who’ve worked hard and found the answers) to win the book.  After I’d solved it, don and I had discussed on a PM, and decided that since folks WERE then managing to solve this, it was best to ‘keep the playing field level.’  If spoilers are to be handed out, I’m sure the authors will do so, for folks’ learning purposes, after the contest ends.

    Suffice to say MaXe’s ‘hint’ is all the more someone should need, to at LEAST get started.

  • #37877
     Pookie 
    Participant

    Woot! found the PDF, finally feel like I have accomplished something…

    Now opened the Password

    how much further do I need to go?  I think I am beginning to bug the guy and don’t wanna waste his time.

  • #37878
     hayabusa 
    Participant

    When you’ve reached the finish you’ll know.  If you don’t know, yet, you’re likely not quite there…

    😉

  • #37879
     jason 
    Participant

    Keep going, you’re very close  ;D

  • #37880
     jsm725 
    Participant

    Ok, so I have spent way too much time on this. Anyone else stuck on the password? Trying to use l337 5|<1LL5 (pdf crackers) but feel like I should be able to guess it. Posting to vent frustration…. ???

  • #37881
     yatz 
    Participant

    Props to Jason for putting this challenge together.  More props to those who have already finished it!!

    “Try Harder” indeed!  Wow.

  • #37882
     Pookie 
    Participant

    Finished yesterday, just amazing challenge.  Learned a lot from it.  Thanks to the organizers.

  • #37883
     Don Donzal 
    Keymaster

    Last weekend to play!!

    Don

  • #37884
     awhitehatter 
    Participant

    Stumped at the try harder mark… I’ll keep digging.

  • #37885
     awhitehatter 
    Participant

    Got a step further…stuck again…this is lots of fun. Thanks to all who put time into it.

  • #37886
     jason 
    Participant

    Keep after it, you’ll get there  ;D

  • #37887
     mallaigh 
    Participant

    Stuck on the PDF… still… trying to BF it, but can’t figure out what I’m missing.

  • #37888
     awhitehatter 
    Participant

    @mallaigh wrote:

    Stuck on the PDF… still… trying to BF it, but can’t figure out what I’m missing.

    Me too!!!!! It’s 128 bit AES, it’ll be tough to BF won’t it?

    Don, will we get any last minute hints?

  • #37889
     Don Donzal 
    Keymaster

    Short answer… no.

    Long answer… we have more than 3 ninjas, so there will be winners of the signed copies of the book without having to reward some who had hints and some who didn’t. So for fairness, there willbe no hints before the end of the month.

    On March 1, we’ll start giving away little hints to see if some people want to try it without being given the entire thing.

    Then we’ll do a write-up… maybe even with the help of the first ninja… so we’ll take you through the whole process.

    Hope that helps,
    Don

  • #37890
     awhitehatter 
    Participant

    That’s fair, and thanks for giving us a couple of extra days to still figure it out. It’s been really challenging and I’m enjoying learning along the way. There’s still time for me to figure it out tonight! 🙂

    @don wrote:

    Short answer… no.

    Long answer… we have more than 3 ninjas, so there will be winners of the signed copies of the book without having to reward some who had hints and some who didn’t. So for fairness, there willbe no hints before the end of the month.

    On March 1, we’ll start giving away little hints to see if some people want to try it without being given the entire thing.

    Then we’ll do a write-up… maybe even with the help of the first ninja… so we’ll take you through the whole process.

    Hope that helps,
    Don

  • #37891
     jsm725 
    Participant

    Finally got it…wow. It was a great challenge and a lot of fun. Thanks guys.

  • #37892
     hayabusa 
    Participant

    @don wrote:

    Then we’ll do a write-up… maybe even with the help of the first ninja… so we’ll take you through the whole process.

    If this is a hint, don, I’ll start putting something together from my notes.  😉

  • #37893
     yatz 
    Participant

    So how many finished this puzzle?  I’m excited to find out.

  • #37894
     jwshaw 
    Participant

    Like many, I got stuck at the try harder part, but I made it past that part yesterday, though I’m still trying to figure out how to get the data out of the part that I discovered using my powers of observation.

  • #37895
     Pookie 
    Participant

    @jwshaw wrote:

    Like many, I got stuck at the try harder part, but I made it past that part yesterday, though I’m still trying to figure out how to get the data out of the part that I discovered using my powers of observation.

    That part was so cool and I didn’t know you could do what it takes to get that out of the part you discovered.  (vague enough to not give spoilers)

  • #37896
     awhitehatter 
    Participant

    Alright, I’m ready for hint…lol, sooo not a ninja..not yet.

    Like many others, I got stuck on the .pdf.

  • #37897
     Quicknesss 
    Participant

    Where will be able to find out the solution and steps that were taken?

    Loved this challenge….didn’t get far, but still loved it!

  • #37898
     Don Donzal 
    Keymaster

    [align=center:32gowjhe]Hint #1

    A docx file is actually a compressed file.[/align:32gowjhe]

    Stay tuned for 2 more hints then writeups from some (maybe all) of the 6 ninjas.

    Don

  • #37899
     yatz 
    Participant

    Wow only 6 made it?  I’ll start working on my writeup.

    I am also in an organization called Toastmaters, which is a public speaking group.  I was considering doing this as a speech that involves visual aids, so doing a writeup would assist in that decision as well.

  • #37900
     AndyB67 
    Participant

    I must have fallen out of the dense tree and hit several branches as i’m still getting nowhere with this one, even with the hint 🙁

  • #37901
     MaXe 
    Participant

    @don wrote:

    Stay tuned for 2 more hints then writeups from some (maybe all) of the 6 ninjas.

    Don

    Wow, I thought there was a lot more who did it!  🙂

  • #37902
     awhitehatter 
    Participant

    Congrats to the six who made it! Job well done!

  • #37903
     Don Donzal 
    Keymaster

    After hearing from some out there, I guess we’ll have to do a prequel hint. So…

    [align=center:wztvj813]Hint #.5

    With all those newfangled smart phones out there, those dang QR Codes are showing up everywhere![/align:wztvj813]

    Don

  • #37904
     rattis 
    Participant

    @don wrote:

    After hearing from some out there, I guess we’ll have to do a prequel hint. So…

    [align=center:1eio8vu2]Hint #.5

    With all those newfangled smart phones out there, those dang QR Codes are showing up everywhere![/align:1eio8vu2]

    Don

    GRRR… Really didn’t think that was part of the challenge. Which is probably why I was never able to start it.

  • #37905
     hayabusa 
    Participant

    For those why don’t have smartphones, there are websites with online QR readers, too.  If it makes you feel better, chrisj, I had fits trying to read the code, at first, and thought it might not be a clue, either.  Remember to lower your camera resolution, or it might not be able to read properly.

  • #37906
     Data_Raid 
    Participant

    The binary code on Jason’s face …. needs to be decoded …. by hand  ;D

  • #37907
     WCNA 
    Participant

    I came way late to this party. I saw the QR code and figured it had something to do with the challenge but the only thing my phone got from it was an email address so I wasn’t sure whether this was part of the challenge or not.

    …and then it was time to go back to work.

  • #37908
     hayabusa 
    Participant

    @wcna – but isn’t the email address, in and of itself, kind of ‘thought provoking’?  As it would certainly appear to be, maybe dropping an email to that address would be worth your time.

    @data_raid – bwahahahahaha – yeah, I spent plenty of time exploring that, too.  (you’re too funny)

  • #37909
     lorddicranius 
    Participant

    @hayabusa wrote:

    For those why don’t have smartphones, there are websites with online QR readers, too…

    Learned something new!  I had worked a little with those 2D barcodes before, but only using handheld scanners in a warehouse.  I didn’t know that there were smartphone apps and websites that decoded those for you too.

  • #37910
     rattis 
    Participant

    @hayabusa wrote:

    but isn’t the email address, in and of itself, kind of ‘thought provoking’?  As it would certainly appear to be, maybe dropping an email to that address would be worth your time.

    It was. But I’ve seen some pretty good email addresses over the last couple of years. The guys at Sun Microsystems (Before Oracle bought them) had some great ones.

    So while my phone scanned and I saw the address. And I thought, yeah maybe… I ended up not doing it because I figured he got a really cool email address.

    I observed it, but figured there was NO way it was that easy to start.

  • #37911
     hayabusa 
    Participant

    Understood.  I know how it goes.

  • #37912
     AndyB67 
    Participant

    @chrisj wrote:

    I observed it, but figured there was NO way it was that easy to start.

    Easy he says…  So much for my powers of obvservation!!

    I was looking in the right area as it happens but completely missed that damn code  ::)

  • #37913
     rattis 
    Participant

    @AndyB wrote:

    @chrisj wrote:

    I observed it, but figured there was NO way it was that easy to start.

    Easy he says…  So much for my powers of obvservation!!

    I was looking in the right area as it happens but completely missed that damn code  ::)

    ok, maybe I should have said, the first answer couldn’t be that simple… That was what I thought anyway. kicking myself hard

  • #37914
     Don Donzal 
    Keymaster

    The point of the hints is not to kick yourselves, but to try and complete the challenge before all hints are revealed. So give it a shot now! You can still say you did it without being (entirely) spoonfed.  😉

    Don

  • #37915
     R3B005t 
    Participant

    I’ve been following this site for awhile now, finally had to register to say I love this challenge, excellent job especially the starting point…. Like several others I’ve been stuck on the PDF but regardless very cool promotional idea!

  • #37916
     Don Donzal 
    Keymaster

    [align=center:3w444dib]Hint #2[/align:3w444dib]

        File: Try Harder
        User: Easy for you to say.
        File: No need to get snippy. I’m just data.
        User: Sorry. Maybe I should get to know you better.

    Don

  • #37917
     awhitehatter 
    Participant

    @don wrote:

    [align=center:2ykdnao9]Hint #2[/align:2ykdnao9]

         File: Try Harder
         User: Easy for you to say.
         File: No need to get snippy. I’m just data.
         User: Sorry. Maybe I should get to know you better.

    Don

    This was a frustrating point in the race 🙂

  • #37918
     Don Donzal 
    Keymaster

    Did the hint help you get past it?

    Don

  • #37919
     lorddicranius 
    Participant

    It didn’t help me, but I’m sure I’m making it out to be harder than it actually is lol

  • #37920
     ziggy_567 
    Participant

    I’m pretty sure I’ve found what I need to move on….but the problem is I don’t know what to do with it…..

    Unfortunately, I’ve had the puzzle piece since before the contest ended…I just can’t figure out what it is used for…

  • #37921
     R3B005t 
    Participant

    @lorddicranius wrote:

    It didn’t help me, but I’m sure I’m making it out to be harder than it actually is lol

    I’m in the same boat tried cracking the PDF analyzed the structure looking for clues and tried manipulating the qscan codes with no success I’m sure its something Ive overlooked but I’m at a loss but I refuse to give up!

  • #37922
     Don Donzal 
    Keymaster

    What is defined as data about data? How do you find it?

    Don

  • #37923
     hayabusa 
    Participant

    When it comes to data analysis, there are no strings attached… 😉

  • #37924
     ziggy_567 
    Participant

    When it comes to data analysis, there are no strings attached…

    That’s a good one….anyway….the outcome of your hint is exactly what I’ve had for roughly 2 weeks trying to figure out what to do with…. ;D ;D ;D

  • #37925
     ziggy_567 
    Participant

    By the way, there’s a more precise way to get the clue, hayabusa. I’m assuming Jason chose a JPEG for this precision…

  • #37926
     hayabusa 
    Participant

    It’s no more precise, actually.  And if you think about my hint, it’d have helped on more than just this clue.  Works wonders for multiple pieces…

    Edit- if you ever do a lot of forensics, you’ll understand the method to my madness, and the reason you might consider going to it more quickly, down the road, especially when analyzing multiple files.  😉

    Further… Sorry to ramble.  Some of the data we’re referring to was NOT as obvious, using methods which I’m pretty sure you refer to, as it depends on the basics of your OS and default tools.  To be frank, I did try the ‘other’ methods, as well, in the event I missed something, but mine was faster, and I could automate multiple task quickly with it.  While it meant ‘glancing over’ the output, it was worth it to find multiple pieces of info for verification…

  • #37927
     hayabusa 
    Participant

    @ziggy_567 wrote:

    When it comes to data analysis, there are no strings attached…

    That’s a good one….anyway….the outcome of your hint is exactly what I’ve had for roughly 2 weeks trying to figure out what to do with…. ;D ;D ;D

    PM me, off thread, ziggy, if you want someone to sound your thoughts to.  Sometimes, I find things come to me as I just tell someone what I’m thinking about.  I’m happy to be a sounding board, if it helps you move forward in it.  😉

  • #37928
     Don Donzal 
    Keymaster

    [align=center:klyt8veo]
    Hint #3

    This challenge takes a lot of effort. You can't just phone it in. Then again, why not?!?![/align:klyt8veo]

    Don

  • #37929
     mohaab 
    Participant

    !?!?ton yhw ,niaga nehT .ni ti enohp tsuj t’nac uoY .troffe fo tol a sekat egnellahc sihT

    3# tniH

  • #37930
     hayabusa 
    Participant

    @mohaab wrote:

    !?!?ton yhw ,niaga nehT .ni ti enohp tsuj t’nac uoY .troffe fo tol a sekat egnellahc sihT

    3# tniH

  • #37931
     Pookie 
    Participant

    I didn’t phone it in, I did it differently…

  • #37932
     yatz 
    Participant

    Was anyone else able to solve this with the hints?

  • #37933
     Don Donzal 
    Keymaster

    Yes. A few more made it through. We’ll be posting the write-ups in April after I get them all, edit, format blah blah blah.  ::)

    Don

  • #37934
     Pookie 
    Participant

    and when do we find out who won?

  • #37935
     mohaab 
    Participant

    who won this contest ??

    thanks

  • #37936
     MaXe 
    Participant

    @mohaab wrote:

    who won this contest ??

    thanks

    I think they’re still drawing randomly, but keep ending up with one or several winners that shouldn’t win  ;D If not, no idea. I gave up on following this contest a long time ago to be honest, and I don’t really care any more  ;D But congratulations to the winners!  🙂 Whenever they’re announced  ;D

  • #37937
     blackazarro 
    Participant

    I’m still waiting for the results. When are we going to found out? I can’t wait to see the answers.

  • #37938
     jason 
    Participant

    I’ll ping Don about it…

  • #37939
     Don Donzal 
    Keymaster

    Totally my bad. Here’s another hint to get most of you through until I get the winning answers posted.

    Look at the metadata. When you find a code, try typing it out using the numbers on your phone. See what the message reads and act accordingly.

    BTW – The 3 winners have been contacted. 2 of 3 have received their books. I’m still waiting to get a secondary address from the 3rd.

    No excuses, just having a lame moment on this one,
    Don

  • #37940
     mohaab 
    Participant

    @don wrote:

    Totally my bad. Here’s another hint to get most of you through until I get the winning answers posted.

    Look at the metadata. When you find a code, try typing it out using the numbers on your phone. See what the message reads and act accordingly.

    BTW – The 3 winners have been contacted. 2 of 3 have received their books. I’m still waiting to get a secondary address from the 3rd.

    No excuses, just having a lame moment on this one,
    Don

    i know the  3rd winner

    he lives in far place in egypt 🙂

  • #37941
     blackazarro 
    Participant

    I’m still waiting for the answers. Don, what happen here?

You must be logged in to reply to this topic.

Copyright ©2019 Caendra, Inc.

Contact Us

Thoughts, suggestions, issues? Send us an email, and we'll get back to you.

Sending

Sign in with Caendra

Forgot password?Sign up

Forgot your details?