WillYouHack.Me?

http://willyouhack.me/

by hansy • 12 years ago

36 24 12 years ago

willyouhack.me

wingerlang2• 12 years ago

function decrypt(a){return "a";}

notAdmin

"Login complete, and notAdmin is Admin."

Reminds me of when I made a login-form in flash, that simply redirected the browser to "hiddenLoggedIn.html". To be fair I was around 13.

scarygliders• 12 years ago

Bah, and I spent the 60 seconds "decrypting" notAdmin's password ;)

Woops, you got him there! (teehee)

wingerlang2• 12 years ago

Yeah I saw the case thing and ... noo thanks.

In hindsight we could've just called decrypt from the console.

decrypt("dllkhGlgME") "woopsGotME"

dwyer• 12 years ago

{user: "aBlackDude", pass: "12inches", flag: "u"}

Cool racism, bro.

cwb71• 12 years ago

Yeah, keep it classy.

nijiko• 12 years ago

Came here to say this

kevinschumacher• 12 years ago

Reminds me of hackthissite.org

jayd3e• 12 years ago

Came here to say this. That site was so awesome back in the day. Still is.

loopdoend3• 12 years ago

This only serves to illustrate why relying on obfuscation to protect you via security-through-obscurity is ridiculous. Commercial Javascript libraries with DRM should take note.

Igglyboo• 12 years ago

I've never run into one of these and am curious, do you have an example of a library that tries to do this with obfuscation?

curiousHacker• 12 years ago

What's the state of the art in JavaScript DRM?

mantraxC2• 12 years ago

I think you're confusing JS minification with obfuscation. Minified code looks obfuscated, sure, but it's not done to deter "hacking", just to make the code smaller.

loopdoend3• 12 years ago

The code in the challenge isn't even minified, it's just really minimally obfuscated. So, no confusion here.

drunkcatsdgaf• 12 years ago

Surprised no one has really hacked you on godaddy.

markcampbell• 12 years ago

  currentUser = users[2].user; function checkUserNameAndPass() { return true; }

im3w1l• 12 years ago

That's an "unconventional" way of using the switch/case construct. But it doesn't seem to matter in this case. Intentional?

md5 of password is 44f02a78f5203c7c41463c75aba9e9cc.

johnlim5847• 12 years ago

cool

q3k2• 12 years ago

So this is like the hip, overhyped version of any [1] number [2] of [3] public [4] CTF [5] and [6] hackme [7] sites [8]?

1 - http://overthewire.org/wargames/

2 - http://www.hacker.org

3 - http://smashthestack.org

4 - http://3564020356.org

5 - https://w3challs.com

6 - http://sys.warchall.net

7 - http://canyouhack.it

8 - http://www.microcontest.com

(Seriously, there's a ton)

codezero2• 12 years ago

Is there any reason there should be some limit on these kinds of sites?

q3k2• 12 years ago

Not really, just don't make them as shitty as this one before going public.

WillYouHack.Me?

Related Stories