Security Override - Hacking Challenges

User	Points
★ letm	6525
★ Mawekl	6525
★ Strongboi	6525
★ wiser	6525
dloser	6510
Kyrah	6465
iamthehacker	6305
makler2004	6120
auditorsec	6115
jameslove	6115
ptrcl	6075
preet	6040
sload	5960
Teddy	5925
Abhinav2107	5880
Null Set	5805
c3tf	5775
Armageddon	5760
criple_ripper	5710
stuvtro	5665

User	Posts
bluechill	1412
madf0x	1240
cruizrisner	1057
Qwexotic	1031
Null Set	861
auditorsec	602
godofcereal	599
TurboBorland	585
Stormc1nd3r	403
Teddy	390

Hacking Challenges

Welcome to SecurityOverride Hacking Challenges.

These hacking challenges are designed to put your hacking skills to the test. For each challenge completed you will receive points based on the level of the challenge. The Scoreboard will keep track of your points so you know where you rank among other SecurityOverride members. Your profile will also be updated as challenges are completed to include your total points and a list of the challenges you have successfully completed.

If you have a challenge idea please feel free to post it in the challenges section on the forums.

Challenges

Welcome, guest! Please login or register.
Your currently have 0 points. You must login to gain challenge points.
The Scoreboard

Reconnaissance

Challenge 1 5 Points IP address identification

Challenge 2 10 Points NS server identification

Challenge 3 15 Points PHP version identification

Challenge 4 20 Points Full Path Disclosure identification

Challenge 5 25 Points Full Path Disclosure identification via Array

Basic

Challenge 1 15 Points Low level password discovery

Challenge 2 20 Points Medium level password discovery

Challenge 3 30 Points User agent

Challenge 4 40 Points Low level Tamper Data

Challenge 5 50 Points Low level Tamper Data with additional security

Challenge 6 75 Points Medium level Tamper Data

Challenge 7 100 Points HTTP protocol

Challenge 8 110 Points Low level SQL injection

Challenge 9 125 Points Cookies

Challenge 10 140 Points Poisonous Cookies

Challenge 11 165 Points Low level script injection.

Challenge 12 185 Points High level SQL injection.

Challenge 13 200 Points Unsanitized exec (The Magic 8-Ball level)

Challenge 14 225 Points Medium Level XSS

Challenge 15 250 Points Unique / Obscure XSS

Advanced

Challenge 1 50 Points PHP Sucks

Challenge 2 100 Points Obfuscated PHP

Challenge 3 75 Points Upload Bypass

Challenge 4 100 Points Local File Inclusion/WAF Bypass

JavaScript

Challenge 1 10 Points Login Bypass

Challenge 2 20 Points Login Bypass

Challenge 3 25 Points Login Bypass

Challenge 4 30 Points Login Bypass

Challenge 5 35 Points Extended Math

Challenge 6 40 Points Potentially 'Evil' Scripting

Challenge 7 45 Points Login Bypass MD5 Style

Challenge 8 50 Points JavaScript with 448-bit Blowfish encryption

Challenge 9 100 Points JavaScript with live encryption/decryption

Decryption

Challenge 1 10 Points ROT13

Challenge 2 20 Points BASE64

Challenge 3 30 Points Binary

Challenge 4 40 Points LM Hash

Challenge 5 50 Points MD5 Hash

Challenge 6 60 Points SHA1 Hash

Challenge 7 70 Points Custom Encrytion

Challenge 8 80 Points XOR Encryption + BASE64

Challenge 9 90 Points Advanced Custom Encryption

Privilege Escalation

Challenge 1 50 Points Gain access

Challenge 2 75 Points Message digest algorithms

Challenge 3 100 Points Privileged service

Challenge 4 125 Points Buffer Overflow

Challenge 5 150 Points Privileged service

Forensics

Challenge 1 15 Points FTP Authentication

Challenge 2 20 Points SMTP Details

Challenge 3 25 Points SMTP Authentication

Challenge 4 30 Points HTTP Basic Authentication

Challenge 5 35 Points Telnet Authentication

Challenge 6 40 Points FTP data

Challenge 7 45 Points IRC Communications

Challenge 8 50 Points ARP Poisoning

Challenge 9 55 Points Advanced SMTP Analysis

Challenge 10 60 Points Advanced Encryption Forensics

Steganography

Challenge 1 10 Points Hidden information discovery

Challenge 2 15 Points Hidden information discovery

Challenge 3 20 Points Hidden information discovery

Challenge 4 25 Points Hidden information discovery

Challenge 5 30 Points Hidden information discovery

Challenge 6 35 Points Hidden information discovery

Programming

Challenge 1 10 Points Basic String Manipulation

Challenge 2 15 Points Basic ASCII Manipulation

Challenge 3 20 Points Word Unscrambling

Challenge 4 25 Points Basic Geometry

Challenge 5 30 Points String Positioning

Challenge 6 35 Points Trinomial Factoring

Challenge 7 40 Points Prime Factorization

Challenge 8 45 Points Advanced Geometry

Challenge 9 50 Points Calender Algorithm

Challenge 10 55 Points Crawler Script

Challenge 11 60 Points Captcha Cracking

Challenge 12 65 Points (5 Variable Equation)^3

Challenge 13 70 Points Barcode Interpretation

Software Cracking

Challenge 1 25 Points Basic Serial Disclosure

Challenge 2 35 Points Serial Disclosure

Challenge 3 45 Points Serial Disclosure

Patching

Challenge 1 15 Points SQL Injection Patching

Challenge 2 15 Points XSS Attack Patching

Challenge 3 15 Points. BOF Exploit Patching

Challenge 4 15 Points. Format String Attack Patching

Logic

Challenge 1 5 Points Very Basic Logic

Challenge 2 5 Points Very Basic Logic

Challenge 3 5 Points Very Basic Logic

Challenge 4 10 Points Basic Logic

Challenge 5 10 Points Basic Logic

Challenge 6 10 Points Basic Logic

Challenge 7 15 Points Logic

Challenge 8 15 Points Logic

Challenge 9 15 Points Logic

Challenge 10 20 Points Logic

Challenge 11 15 Points Logic

Challenge 12 20 Points Logic

Realistic

Challenge 1 100 Points

Background: One of our friends has signed up to take a survey on this website. Ever since he joined he has received nothing but spam emails from them.

Objective: Login to their site as an administrator and remove all the email addresses in there spam list.

Realistic

Challenge 2 150 Points

Background: You have been hired by a government agency to hack into a private security company's computer system. The company has stumbled across a top secret Emergency Action Message (EAM) luckily for us the msg is encrypted but they are working hard to decrypt the code.

Objective: Gain level 1 access to their computer system and delete the EAM before it can be decrypted.

Realistic

Challenge 3 200 Points

Background: Your friend John is getting ripped off by the "Library Of Knowledge," because they claim he has not returned a book to them. He has, indeed, returned it, and the return was successful almost a month ago, and yet this library has credited his account for $10 to replace it! John's credentials are John:guitar

Objective: Part 1: Manipulate the website to 'check the book back in' to the library. Part 2: Make John's account balance positive again.

Realistic

Challenge 4 250 Points

Background: Your friend Logan bought file uploading space from Pro File Host, but they banned his account. His login credentials are Logan:whitehat although they might not be of too much use to you...

Objective: Gain access to the administrative account and unban Logan's account.

Realistic

Challenge 5 300 Points

Background: Your friend Ian has tried to bail his friend James out of trouble, but is coming to you now for help. James, hacked a site, but the admin was able to track him down and he posted a lot of personal information about James on the site. Ian's credentials are ian:vacuum

Objective: Gain access to the administrative account and delete the blog post containing James' personal information.

Realistic

Challenge 6 350 Points

Background: You have run into a job offer. NikezAndMacs has offered you a challenge in which you will receive 350 points in return for completing it.

Objective: Profile the name provided (found in the message from nikezAndMacs), and threaten the user with the information you gain.

Realistic

Challenge 7 400 Points

Background: Your friend had his site hosted on PregTech hosting. He switched hosts from the lousy customer support though, and he wants some justice.

Objective: Find an exploit in the PregTech website that your friend can use for revenge. Output the contents of the phpinfo() command.

You must be logged in to try the hacking challenges.
Please login or register, then try again.

· Vulnerable Web Environment	[10027]
· Google Captcha Wordlist	[8958]
· Google Secrets	[8415]
· user2sid and sid2user	[7311]
· xss.pdf	[5124]

Welcome to SecurityOverride.org!