3 ms·
I quite enjoyed this :-) Reminds me of an online game that I played through years ago which I'm having trouble digging references to now; hack your way through
by morganpyne 16y ago
I quite enjoyed this :-) Reminds me of an online game that I played through years ago which I'm having trouble digging references to now; hack your way through successive levels, starting with really trivial things like default passwords and working your way up through all the exploitation techniques through to the more interesting ones (buffer overflows, off by 1 errors etc).
I was well hooked on the writings of Aleph1, Mudge and Rain Forest Puppy at the time, and this game was an excellent tool for teaching developers about vulnerabilities and thus how to defend against them. I know that the game spawned a plethora of copy-cats later on of varying qualitites - does anybody happen to know the one I'm referring to?
- harisenbon 16y agoI wonder if you're thinking of Uplink? http://en.wikipedia.org/wiki/Uplink_(video_game) http://en.wikipedia.org/wiki/Uplink_(video_game) I was completely addicted to that game in college. The also apparently have a version on steam now.
- morganpyne 16y agoThanks for the link, had not seen Uplink before. It's not what I was trying to remember though. I'm basically talking about a website. On the first screen it has a username and a password box. The password check is hardcoded into the JS on the page and viewsource gives it to you. Completing it gets you to the next stage. The next stage has no such info, but the password is easily guessable. The one after can be beaten by a cookie modification, the one after that involves injecting some variables into a server-side script etc etc... At each stage it links you to articles which may be relevant tothe task at hand; It's like a step-by-step training to hacking websites, graded nicely in difficulty from the trivial up to some reasonably difficult techniques at the higher stages.
- morganpyne 16y agoAnswering my own question here, but curiosity got the better of me so I trawled through my mail archives and found the site. It was http://quiz.ngsec.com/ http://quiz.ngsec.com/ and it's unfortunately offline now. Shame.