Some suggestions. | Defend the Web

gudgip
11 years ago

0

Hi guys,

I’m registered for only 2 days and I almost finished all missions. I know I’m a bit of a veteran when it comes to wargames, but the missions are really a bit too easy.

So, here are a few suggestions:
- blind sqli
- xss
- IRC missions
- Application missions. Nothing is as much fun as firing up a hex editor to find the key, heck even writing a keygen.
- Linux. There are literally 0 missions that even uses the word linux. Maybe some jailed ssh/telnet logins? Or writing a program that sends ‘codes’ to a certain port on your server.

I did enjoy all the missions though. I love how I didn’t come across bugs. The missions are really polished.

Keep up the good work!

Luke [flabbyrabbit]
11 years ago | edited 11 years ago

0

HI @gudgip,

I am glad you enjoyed the missions :) and I am aware that the levels are not particularly taxing. The main problem with some of the ideas you have listed above is getting them working in a secure environment so as not to interfere with other users. Work is being done to get a bunch of XSS and CSRF levels up and running but there are some problems with stability. If anyone has the knowledge and time to help some of these levels up that would be great. Hopefully some interesting things will be coming soon (I know everyone including me says that a lot … but hopefully this time it is true :p).

I hope you stick around and join in with some discussions or even contribute a bit of your knowledge to the forum/articles.

P.S. you still have two coding missions left :p

gudgip
11 years ago

0

Yap, I didn’t feel like doing them yet, as a baker doesn’t bring his own bread home ;) You are right about security with linux missions, it’s a whole project to analyse a stable environment.

I will surely stick around whenever I have some spare time left ;-)

[deleted user]
11 years ago

0

The levels are easy after they’ve been completed, they weren’t so easy before then. Having challenges is better than a walk in the park, when it comes to hacking.

Cyan Wind [freewind1012]
11 years ago | edited 11 years ago

0

Well… Real levels are actually hard for me to solve. I never have to face the real problems. Do you guys have any suggestion?

P/S: I don’t ask about hints. Hm, maybe about mindset when seeing a website? What to do first to attempt to hack?

![Image](https://www.hackthis.co.uk/user/userbar.png?user=freewind1012%20//%20Navigator)

[deleted user]
11 years ago

0

Understand the source code and try to modify the URL at first. You can try some SQLi too…