Root Access

ChatBot John Cavil

9:00 PM

oldmud0

nailed it the first time

cat

!!caaaaat

ChatBot John Cavil

cat

!!caaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaat

ChatBot John Cavil

DavidPostill

9:00 PM

@oldmud0 It's slightly different this time :)

But the same password ...

oldmud0

this is violation of tos, look at all the copyright infringe

dont su pls

cat

Err @Rahul2001: Your page is a lie

> The proxy script consists of only one line of code: <?=file_get_contents($_REQUEST['url'])?>

No, it contains six lines of code.

> <?php
error_reporting(E_ERROR | E_PARSE);
$url = $_REQUEST['url'];
echo (file_get_contents($url));
die;
?>

Ben N

We can see all your PHP code ;)

Rahul2001

@cat yeah, that is to suppress errors, not relevant

Ben N

Also I'm deffo not running an EXE that 7 AV programs think is a worm

Rahul2001

9:05 PM

@BenN how? What did I miss?

Ben N

Time for some disassembly!

Rahul2001

@BenN what? It is detected as a virus?

Ben N

virustotal.com/en/file/…

Psycogeek

@tereško from what i can tell with an overclocking MB simple overclocking can be done with a non-K , just using the turbo features and having a board that will allow to adjust all that. For example i had a $60 chip that reached 4k in 5 minutes of overclocking. but that chip was also cheap were other things counted, on-die cache and cores.

Rahul2001

joseph.pyrotech.club/medacium_src.bat

@BenN

tereško

9:08 PM

@Psycogeek .. until intel pushes another microcode update

cat

@Rahul2001 It's still a lie!

Rahul2001

@cat how did you see that though?

Ben N

404

Rahul2001

joseph.pyrotech.club/mendacium_src.bat

cat

@Rahul2001 Your "vulnerability"

Rahul2001

9:09 PM

@cat ah, didn't realise it would show itself :p

Psycogeek

@tereško yea but i was not referring to that, special full control overclocking. even back in core2 people bought Ks and were going to end up with 20-25% simple 24-7 overclocking not award winning stuff. you just bumped the strap to 25% and tweak the voltage a bit, and it was done.

cat

What did you expect file_get_contents(<anything the user specifies>) was going to do? :-P

Ben N

Fun fact: it works on /etc/passwd too

cat

lol

Ben N

And probably on web server logs

Anyway, is there anything beyond this quiz, or do I win?

tereško

9:10 PM

@Psycogeek ok, I will keep in mind the "downgrade CPU a bit" as an option

(the build is not for me)

Rahul2001

@BenN I don't think it will work...

Ben N

It doesn't give actual passwords, but a list of users

Rahul2001

@BenN um... Login and see?

Shit... That vulnerability backfired

Psycogeek

@tereško my last K didnt change the price doodle, i think it was $20 change.

Ben N

I guess that's why they call it a vulnerability ;)

cat

9:12 PM

> if($user == "joseph"
&& $pass == $new_str)
{
include("rbchal1.php");
}

oldmud0

yay

cat

say what

Rahul2001

@cat f*ck

I made it wrong...

cat

What, @BenN has won already

oldmud0

Ye

rip webserver

Rahul2001

9:13 PM

@cat I dont think so

oldmud0

actually, rip all the services on this machine

tereško

FUCK

cat

> $input = $_POST['LOLinput'];
if($input == "Rahul_is_better_at_programming_than_you!")
{
include("srchal2.html");
}

...

tereško

something's wrong with my Arch

cat

!!doublefacepalm

ChatBot John Cavil

9:13 PM

tereško

it has frozen second time in 10 minutes (full lockup, looks like GPU drive crash)

oldmud0

this challenge is banking on the fact that nobody's going to hack the entire system

Ben N

You can't really do anything just by reading files

cat

mendacium.exe?

Was that what the virus scanners said was a trojan?

Ben N

Yep

oldmud0

9:15 PM

What if I want to read /dev/hda

What if I want 50 clients to read /dev/hda?

cat

> <b>Parse error</b>: syntax error, unexpected ':', expecting ',' or ';' in <b>/home/rahulcom/public_html/pyrotech.club/rahultishack/chucknorris/serverroot/‌public_html/proxy.php</b> on line <b>4</b><br />

Ben N

I think you have to be root for that to work

cat

Hi /home/rahulcom/public_html/pyrotech.club/rahultishack/chucknorris/serverroot

Rahul2001

@cat FIXED!

@cat the vulnerability won't backfire any more :D

oldmud0

Good job for trying to fix something that's obviously broken

cat

9:17 PM

Who is Joseph anyway

Rahul2001

@oldmud0 It's ment to be broken, just not too broken

@cat random fictional dude

@cat try logging into his account?

cat

@Rahul2001 Make me

Rahul2001

@cat eh, suit yourself

cat

As MC Hammer would say, it's party time.

Rahul2001

@ChatBotJohnCavil :D

Eh, you guys destroyed the challenge :P

oldmud0

9:20 PM

What did you expect? We're the Internet

2

Rahul2001

BUT, saved me from future embarrassment :D

Anyways, I'll have to see about that exe now

Ben N

Is this EXE packed or something? I'm still not going to run it on my main machine, but I'm a little curious

Rahul2001

bat-to-exe :P

Ben N

Oh, that's probably what triggered the virus alert

Rahul2001

For god's sake, it is 64 goddamn KB, how can it be a trojan?

Ben N

9:22 PM

Shellcode is usually about a KB

oldmud0

Put a hexeditor on it

Rahul2001

heh

Ben N

I have it open in IDA and it looks obfuscated

oldmud0

Is it UPX'd?

Rahul2001

huh...

let me look for alternatives

Ben N

9:23 PM

You could just write a simple .NET thing

It's super easy to decompile, but the quiz isn't terribly difficult either

cat

dd if=/dev/zero of=/dev/sda is only 30 bytes.

So many girls in this hotel...

Hm....

Rahul2001

@cat thinking or asking one (or more) out?

oldmud0

Well I got your /etc/passwd in your flub. But it doesn't look like any of the services on it are enabled.

Rahul2001

@oldmud0 You shouldn't be able to get it now, I fixed it

DavidPostill

Ben N

9:26 PM

They probably wouldn't be reachable from the internet, and modern Linuces put the actual hashes in /etc/shadow, which is only accessible to root

oldmud0

Tab is still open.

Rahul2001

@oldmud0 LOL

Ben N

See, I know at least a couple of things about non-Windows!

Rahul2001

@BenN More than me, anyways...

cat

@Rahul2001 Err if you don't know about /etc/shadow and /etc/passwd you have no business running a honeypot public server (especially one with access to the school network)

Rahul2001

9:28 PM

@cat I know more than the rest :P

Seriously though, this is just a temporary setup

I need to sandbox it

Ben N

VM?

Super easy and pretty secure

cat

Yeah yeah, your biggest mistake was posting it in a public chat room full of geeks tbh.

oldmud0

This isn't temporary, you've clearly done a lot of these things

Rahul2001

@oldmud0 ??

cat

I had a job interview once where they basically gave you access to one of their internal servers and asked you to do stuff. And be good.

Rahul2001

9:30 PM

@cat Well, I learn more stuff in an hour from you guys than I do in a year from school

oldmud0

before making php files with a "not-invented-here" attitude, please put it in a docker container or something

cat

Candidates were trusted to not muck about, and tbh, it'd be self-defeating to try break it

Docker is not security.

Ben N

Right, you need an actual hypervisor if you want to separate the guest from the host

Hyper-V is pretty awesome

oldmud0

well at this point any kind of separation is better than no security

why you suggesting him stuff he ovsiouly can't use

Rahul2001

@oldmud0 I don't have a "not-invented-here" attitude, more like a "I-made-this-and-I-want-you-guys-to-crack-it" attitude

oldmud0

9:32 PM

use kvm

Rahul2001

My solution:

<?php
if($_REQUEST['url'] == "../rpass/tispass.txt")
{
	echo "password: damnit123";
}
?>

LOL

So, no more real proxy.

Ben N

But now the Facebook example is broken!

oldmud0

well there's this silly attitude going around, especially visible in programming competitions, that you can't use well-established basic algorithms

Ben N

Though it never really worked to begin with, because it wouldn't fix up references to other resources

Rahul2001

@BenN Well, it would have been reported as phishing anyways

oldmud0

9:34 PM

and of course, you're forced to use this behemoth of a language called java

Rahul2001

That's what happened when I used to run a (proper) proxy

Got reported as phishing

oldmud0

of course, we're preparing students to join the workforce with knowledge of a grossly insecure, bloated, deprecated language, which probably won't ever be directly used if they're not going to do enterprise applications or Android apps

Ben N

You also might want to check if you're vulnerable to this (via TBG)

cat

!!tell 31228527 headdesk

ChatBot John Cavil

Rahul2001

9:38 PM

@cat :P

cat

One of the worst things, that I hate most in the world...

oldmud0

also something outrageous that I don't see in computer science classes is a proper explanation of good design principles

Rahul2001

@cat What do you hate?

that code?

Ben N

The LAMP stack?

cat

"Simulators" for tests/exams/demos that pretend to act like the product being simulated but in reality are just a bunch of "if command = X then print <something that looks like the command output>".

Rahul2001

9:39 PM

@BenN Do you happen to know c++?

cat

Cisco uses them a lot for their certifications and exams -_-

oldmud0

Oh yeah, I hate packet tracer

cat

Course, if you try do things a different way to the way it was described in the book, it'll just say "Invalid command" or some shit

oldmud0

What does that even use? an interpreter?

Gosh, how much work would it take just writing an emulator?

Rahul2001

@cat lol, well they obviously cannot give you real vulnerable system

cat

9:41 PM

@Rahul2001 Sure they can, it's an exam ffs.

They can spawn as many VMs or emulators as they want. Heck, I can download and run an emulator myself

oldmud0

And when you open the "web browser," hey look crappy iexploder frame

Rahul2001

fair enough...

cat

@oldmud0 lol

IE6! :-x

Rahul2001

@cat Hm... I'll work on the proxy tomorrow, it's 2:15 AM right now, not in the mood for input validation...

Ben N

@Rahul2001 Just enough to produce this answer, and little tidbits I picked up from Raymond Chen

oldmud0

9:42 PM

they don't even bother using awesomium or something like that

Ben N

I know a lot more about the native Windows API than I do about actual C++

Rahul2001

@BenN Shit, that's pretty cool

cat

> First up, I'll have you know that I learned C++ and Win32 just for this question.

oldmud0

@BenN Good, you'll be a perfect Windows NT developer. Please follow me, we're going to the computer lab where all the old computers are.

cat

Wow, that's dedication

Rahul2001

9:44 PM

...the kind only found on StackExchange

Ben N

You'll do a lot for a +100 bounty when you're scrambling to get 2K rep

Rahul2001

;p

@BenN Would you happen to know if I can embed multiple batch commends in C++?

Ben N

You could always just launch a cmd /c process

Or dump out a batch file from an embedded resource and run it

cat

@BenN Some bounty hunters on this site do barely more than copy and paste a knowledgebase article for 500 point bounties -_-

Ben N

Incidentally, I have a hat IRL that says "bounty hunter"

Rahul2001

9:46 PM

@BenN No sensible AV detects it :/

Ben N

Well, if anybody is using one of those 7, they'll be suspicious :/

oldmud0

What AV? Sorry I don't have an AV so couldn't scan it for you

waits for storm

Rahul2001

@oldmud0 I don't use one either ;p

cat

Log in to facebook, first post I see from someone:

> Thinking about everyone in Munich. Please stay safe indoors and no unneccesary risks!

Rahul2001

Well, I use Windows Defender

Ben N

9:47 PM

Oh no, what happened in Munich?

cat

Great. I already know some more shit's gone down without even checking the news.

Ben N

bbc.com/news/world-europe-36870874 :(

Rahul2001

Shooting, kills 9

Man, f this world

cat

Every time I log in to Facebook...

... that said, these shootings get way too much media attention

Ben N

I hear that crime is actually going down, but media coverage is ramping up

Canadian Luke

9:49 PM

I hear all the killings are done by the guy who sells coffins...

oldmud0

but, people died

Rahul2001

> Police say children may be among the victims.

@CanadianLuke hey...

oldmud0

crime is becoming more acute, I would agree with that

cat

Y'know, more people get shot and killed by the police in the US every week, than have been killed by terrorists in the ten years to 2014?

oldmud0

@cat [citation needed]

cat

9:50 PM

It's all a huge hooha and exaggeration

@oldmud0 start.umd.edu/pubs/…

Canadian Luke

@Rahul2001 What?

Rahul2001

um... hi?

cat

@oldmud0 bbc.co.uk/news/magazine-36826297

Rahul2001

It was supposed to be a greeting.

Canadian Luke

Oh sorry! I thought I offended you lol. How's it going

Rahul2001

9:52 PM

;)

cat

ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/…

> In 2013 there were 8,416 alcohol-related deaths registered in the UK

More deaths due to alcohol per year in the UK, than all terrorism related deaths across Western Europe since 1970.

Canadian Luke

Don't tell people that! Or else we'll have another prohibition!

cat

They want to take our civil liberties away to "protect us from extremists" huh.

Fuck that shit.

oldmud0

must be GTA. sue rockstar

cat

Dear News,
Perspective, motherfuckers, get some.

oldmud0

9:56 PM

You must be looking for Fox News

Psycogeek

@cat problem is news is "new"s the same old stuff that has been killing people in mass quantity for 2000 years isnt new.

cat

> A total of 32,658 people were killed by terrorists around the world in 2014 - an 80 per cent increase on the previous year, according to the Global Terrorism Index.

Meanwhile:

> There were an estimated 198 million cases of malaria worldwide (range 124–283 million) in 2013, and an estimated 584 000 deaths

oldmud0

news has been sensationalist stuff since 80s

cat

> UNFPA estimated that 289,000 women died of pregnancy or childbirth related causes in 2013.

> Every day, approximately 830 women die from preventable causes related to pregnancy and childbirth.

Meanwhile, 9 people getting shot makes international news.

Rahul2001

On a more unrelated note, According to a survey, only 1/3 Women will date a Trump supporter

cat

10:03 PM

Hah

oldmud0

can we stop making meaningless stats

cat

> From 2005-2014, there were an average of 3,536 fatal unintentional drownings (non-boating related) annually in the United States — about ten deaths per day.

Ben N

@oldmud0 tylervigen.com/spurious-correlations

cat

Yup, hundred times more people drowning in their own pools, than being killed by terrorists

Rahul2001

Political polarization is making dating worse

►

oldmud0

10:04 PM

He holds the laptop like that on purpose, to make you cringe.

cat

By letting terrorists get so much coverage in the media despite their practically non-existent contribution to unnecessary deaths, you're letting them win and giving them exactly what they want. Terror.

2

Rahul2001

+10

oldmud0

so, should we adopt china's ways and become ethnic happyland?

Rahul2001

hm... 3:40 AM

goodnight guys...

Ben N

Bye!

Rahul2001

10:09 PM

@oldmud0 We don't have to live on either extreme

cat

@oldmud0 As opposed to orwellian big brother land?

oldmud0

@cat uh, who said that china wasn't orwellian big brother land

cat

Oh wait, that's right, we're already there

We just don't have the ethnic happyland benefits to go with it

oldmud0

we have no idea how many people are getting arrested daily in china, much less how many people are being executed, tortured

after all, ignorance is bliss

it all goes so well... until you hit a wall

then you fight the system

That Brazilian Guy

@cat Waaaat? It's not an isolated server? It's on the school network?!

@cat But.... But how are we gonna get THEM BIG NEEEEWWWSSSS

Ben N

10:14 PM

@ThatBrazilianGuy Actually, it looks like it's on GridHoster

But maybe that's only a proxy

That Brazilian Guy

@Rahul2001 No, I am not. It's a song.

Psycogeek

they can still do the news, they just report more of it. 115 people died today while driving thier cars, 48 died while walking being hit by a car, 58 people died of the flu , 118 people died of old age, and 2 people were killed by terrorists, and a homeless man was shot by a cop. Texas this week. (note all numbers were made up but dont have to be)

DavidPostill

@BenN lol

Psycogeek

now one has to ask if that would be better news than reporting that the kardashians made a new youtube video

oldmud0

Okay, I have to make a decision tomorrow

Am I going to upgrade to win10

DavidPostill

10:18 PM

Or all the stupid pokemon news stories

oldmud0

I hate windows 10, the UI is brutally inconsistent

cat

@ThatBrazilianGuy My assumption is it is, if it's being used to bypass the school proxy/filter

oldmud0

But it's the only way I can get support

cat

@Psycogeek That's 10 from the errorists

Errorists win.

oldmud0

> Breaking news: Reddit declares war on errorism, grammar Nazis

Rahul2001

10:22 PM

@ThatBrazilianGuy no, my own server

@BenN nope, I use gridhoster

cat

@oldmud0 Yeah, headline news when errorists kill three sentences in a day

That Brazilian Guy

(tan 60/cot 30)(24*2-36/3)*2-2^3 = @%% it, Wolphram Alpha will tell me

oldmud0

easy...

Rahul2001

@oldmud0 who needs support when you have superuser?

@ThatBrazilianGuy 64, actually

That Brazilian Guy

> <form method="POST" action="rbchal1.php">
<input type="text" name="LOLinput"></input><br/>
</form>

There's no submit button.

oldmud0

10:25 PM

no, as in extended support going to expire soon

That Brazilian Guy

/me opens element inspector

Now there is!

Rahul2001

Tan60/cot30 is zero. Basic stuff, but wolfram doesn't know that :D

@ThatBrazilianGuy press enter?

cat

Why are you still awake

Rahul2001

Can't sleep... :/

oldmud0

Well, it's time to bid windows 7 goodbye.

sniffles

Psycogeek

10:27 PM

oh you'll be back

That Brazilian Guy

@Rahul2001 Uhhh.... Tan60/cot30 = 1

Rahul2001

Yeah, sorry, my bad

oldmud0

windows 7 was the second greatest windows version ever

Rahul2001

@oldmud0 the greatest!

oldmud0

no... the greatest was XP

Rahul2001

10:29 PM

I beg to differ

oldmud0

Yes, you bed to differ. Go to bed.

cat

Bed to giffer

Rahul2001

Yeah, I really should sleep :P

Goodnight

oldmud0

Okay I need to make a decision

Windows 10, arch, or debian?

That Brazilian Guy

DOS!

oldmud0

10:30 PM

@ThatBrazilianGuy Already installed, sorry

cat

Windows 9

oldmud0

couldn't find it on softpedia

MS BOB

Ms. Bob?

microsoft bob

10:34 PM

I know lol

cat

!!caat

ChatBot John Cavil

That Brazilian Guy

Windows 3.0 optimized for PC-XT

Ben N

Windows Server 2012 R2 Core

mr enigma

ME BETA

That Brazilian Guy

10:36 PM

Raspbian

mr enigma

what can go wrong!

That Brazilian Guy

menuetos.net

oldmud0

I still have that piece of crap on my bookmarks

People making oses

In assembly

At least make a python operating system

That Brazilian Guy

Piece of crap? It has image and video players, network stack, USB 2.0

mr enigma

assembly would take ages

That Brazilian Guy

10:38 PM

It can room Quake

AND IT FITS ON A FLOPPY

ON. A. FLOPPY.

mr enigma

so it has no bloat

That Brazilian Guy

Lightweight!

oldmud0

ye but no chromium

crap.... chrome os

That Brazilian Guy

SteamOS!

Your new OS for your work PC shall be SteamOS

mr enigma

dos is made in asm and has the source code released by microsoft

and nt4 has leaked the project files . headers locales globals etc

oldmud0

10:41 PM

it's 2016

mr enigma

but its open source

oldmud0

it's like our computer kid forgot how to add

That Brazilian Guy

Coming Soon: @JourneymanGeek's Birthday - this monday! Happy Birthday JMG! :D

2

oldmud0

Holy cow, 3450 W for Symbolics 3600

What does the hollow star mean

Like a sticky?

That Brazilian Guy

@oldmud0 Yep!

Ben N

10:49 PM

@oldmud0 It's a "pinned" message

That Brazilian Guy

Now I wanna try menuetOS again

The last time I tried it was back in 2008, I couldn't get the network stack to work

oldmud0

What's the difference between adhesive and pins? @_@

SE, virtually reducing environmental footprint since 2007?

That Brazilian Guy

Adhesive makes you dirty and pins make you bleed

Weird! If I pin my own message, it gets a star. Then I unpin it, the star remains... But whose star is it?

mr enigma

well nobody owns outer space

Ben N

I imagine it's Community♦'s

Hang on, there was an MSE thing about this a while back

mr enigma

10:54 PM

so its nobody and everybodys star

That Brazilian Guy

@mrenigma Tell that to ~~NASA~~ Trump

@BenN It's not really that important....

mr enigma

oh god trump is a douchebag

That Brazilian Guy

Damn, my shift ends at 5pm and it's 8pm and I'm still at the office. On a friday night.

mr enigma

im not in the usa but still

That Brazilian Guy

I might be getting old ._____.

Ben N

10:56 PM

2

Q: Issue re-starring or pinning a chat item after removing stars, plus a 'star cheat'

I went to pin a message in a room I own, and was puzzled that I couldn't. Another moderator could though. So I tested on another message, and found this is what happens: Star or pin an item, then change my mind Decide again to pin or star that item Can't do it, message when I try to star is "...