Bitcoin Forum

Hello, our FIRST HACKME started!!!! www.satoshihack.com/hackme1/ (http://www.satoshihack.com/hackme1/)
Test your skill! Its the first hackathon and so its designed VERY EASY! Anybody with minimal webdevelopment knowledge can hack it!

the winner gets 0.1 BTC and 500.000 QORA (https://bitcointalk.org/index.php?topic=881230) immediately!

if you have any question about this Hackathon #1, ask in this thread. i will give some hints.



more infos: https://bitcointalk.org/index.php?topic=993678

when I click enter, its says enter secret code?

are we guessing for this code?

nope cant pass the lvl 1 :D

NOT guessing. you have to FIND it out.

UPDATE: I changed this message..

Are you sure you call the right function?

Not Found

The requested URL /hackme1/lxx.php was not found on this server.

dude, there'is goForit() on the js code but; onclick is assigned to goForitt().

where the hell is the second JS?

Scroll down

you said it yourself...
only because you typed the "lxx.php" manually into the address line of browser!!! you didn't look good enough.
this lazy way DON'T work...


#EDIT: ALL HACKME LEVELS ARE TESTED. SO WHEN IT DON'T BRING YOU TO THE NEXT LEVEL. THAN ITS ONLY YOUR FAULT!!!

What the fuck is



Bullshit. Once again this is another Bitcoin Game where you have to be an autistic savant to solve it. I have more than "little IT-knowledge".

Nope, I didn't type it manually. I inspected element ;)

any chance to link to the balance of the .1 btc, because some giveaways just end up the op just leaving. not that you`ll do this.

i recommend to escrow the amount like tomatoecage.

yes some irritations built in. but this is not "another Bitcoin Game where you have to be an autistic savant to solve it".
its very easy. i also will opensource it all after the winner.


SORRY I CAN NOT POST THE PRIVATEKEY into the first .html and mark it with <PRVKEY: XXXXXXXXXXX>.
i think you understand. SOME thinking is required.

BUT ON A SCALE from 1 - 10. This hackme is DEFINITELY LEVEL 1-2. (MAXIMUM).


#HINT for lvl2 - IGNORE THE IRRITATING SOURCECODE

1hackxBzktVKWn1FnkSBFoWQC1tWL9nFa

its on this pub key above. and the privkey you get when you reach LAST level. AND you can say tomatocage to contact me and i give him the solution of the hackme so he see the privkey in the solution, because i think tomatocage its trusty community member and i know he do not steal it sure.

#EDIT: also this is NOT a giveaway. you must do something for it. and i do it for 100% free. also on my website is NO ADS. so its 100% non-profit for me.

I passed your 2 levels of source passwords and got to http://www.satoshihack.com/hackme1/lvl2.php?login=68934a3e9455fa72420237eb05902327. Immediately it dialog boxes: "Uuups. Something is wrong!"

Once again, I have more than "little IT-knowledge".

Oh, and according to https://btc.blockr.io/address/info/1hackxBzktVKWn1FnkSBFoWQC1tWL9nFa at 0008 UTC, the balance is 0 BTC, 0.1 unconfirmed. You didn't even start this with a funded private key?

is it related to this video?
https://www.youtube.com/watch?v=hFHYyy8K-DI

hmm i can not judge your IT-knowledge.

but i can say 100% that anybody with LITTLE IT-knowledge can make this..

you say it: The dialog box say you : "Uuups. Something is wrong!"
so something is WRONG here...

#HINT FOR LEVEL2: IGNORE THE IRRITATING SOURCECODE!

#EDIT: and dont worry about the private-key. its tx is confirmed before the winner reach last level..

no the background is only for style of the website. NOT affected the hackathon.

If someone with more than "little IT-knowledge" cannot hack it, then it is not 100%.
If someone with only "little IT-knowledge" cannot hack it, then it is not 100%.
For your statement to be true, then I'd have to have less than "little IT-knowledge" where "little" as defined by you is not what 100% of people knowledgeable in IT would define "little" as.

i will adapt the declaration and make it "with MINIMAL web-development knowledge". so for me "MINIMAL webdev knowledge" is same like little IT-knowledge.

sorry when you feeled offended by this project. this is not my purpose. i try to make a good project here to bring people in and start thinking and use brain. but often people forget the real purpose of a project and then start only talking about things NOT RELATED really to the soul of this project.

i make this so people start THINK and USE BRAIN for the solutions and THINK OUTSIDE THE BOX.

i writed a HINT in your last quotation above..



#EDIT: the real soul/idea of this project: https://bitcointalk.org/index.php?topic=993678

I also have MINIMAL webdev knowledge as that is synonymous with "little IT-knowledge" for me as well. Still NOT 100%.

/*back:to:the:roots:rot5*/ and <!--NOgoback--> is closer to autistic savant-level shit, not solvable by anyone with any definition that you purport to offer.

Yes, I'm offended by everyone being lied to (with definitions of "little" and "minimal" that are only your own) repeatedly.

yes please read again the info-thread https://bitcointalk.org/index.php?topic=993678.
it says: (look the bold text)

"When is the launch?
The first BitcoinHackMe will start THIS WEEKEND!!!   Cool  see the countdown: www.bitcoinhack.me
We will make it not so hard first time. So only use php, html, js and basics of encryption and hashing-algorithms.
I will also be in the IRC #satoshihack and give hints when somebody have absolutely NO idea. But last 2 level user must find all out alone."

this project is also to learn something.  but if you only would understand minimal knowledge of the above IT-fields (php, html, js and basics of encryption and hashing-algorithms) you would already have lvl3 or lvl4.
you do not focus. you still want to proof that this is not easy. BUT IT IS EASY! but still MUST USE BRAIN. maybe its not easy for everyone. but for EVERY PERSON with MINIMAL knowledge in the above area its not a big thing. FOCUS!


PS. HINT: the hints you found above is also important for the hackme. but if you still not @lvl3 or above. it s worthless for you....

#EDIT: you only look at the sourcecode. THIS IS WRONG technic. THINK OUTSIDE THE BOX! Webdevelopment-knowledge is not only "Right Click -> Show SourceCode" ........ its more...

Yep... not "minimal" by anyone's definition but yours and perhaps autistic savants who are assholes with not even the ability to mimic empathy, implying that everyone is a retard who doesn't have medium to advanced knowledge (by everyone else's definition) in those fields. This ~genius has wasted more than BTC0.1 worth of effort on this bullshit already, so... bye.

i have the minimun and i cant pass the level 1 :( what that hell

Passed level 1  ;D But that is probably it.

Great project!

i am stuck on level 2
i know i miss something but still can't get it

yup

its necessary edit the login= xxxxx ?

yes you are right! very good!


i post a big hint for level 2:

the solution for this level is NOT in the sourcecode. You must look in the ADDRESS-LINE. The url pass a variable for the php:

http://www.satoshihack.com/hackme1/lvl2.php?login=68934a3e9455fa72420237eb05902327

you must change this variable and make it "true"....

yep, i got it righ now im thinking in level 3

hahahah, nice, would have never guessed :)

level 3 passed :D
EDIT: my english is not my language so i dont get the hint from TheButterZone, i need a diferent hint
edit2: im stuck on level 4  ??? i have many ideas on my head but i dont get it

cool, i`m at level 3 now (1h to discovery) =D
very interesting... nice game

level 4 now =D, very easy haha

good luck on lvl4 :)

I think the game is more interesting if you don`t give any hints... =(

not so hard... but giving hints you remove all merity from who discovered without it

i did all to lvl4 without reading any hints before.... if i did, everyone can do it =D

seems like that you will the only that will get the private key because i dont know the level 4 how is working

i`m stucked on lvl 4 atm too =D

i was just saying... i resolved until here all from my own... after that i saw ppl sharing the answer from before... it`s a little demotivating...

tell me a hint when you get it because im going crazy with the possibilites

Got upto level 2 myself, very intriguing. Good job ca333 :)

I really like the Matrix background on the website cause it makes it look like very cyberpunky  ;D So has anyone already made it to lvl. 5? It's the final level right?

backgroung has a char like 5y 9v x 3 1 7 94 etc. should we use theese?

level 3!

very good. this means you have good analytical thinkings.
so not everybody is soo fast like you.

i say this in the explanation thread: https://bitcointalk.org/index.php?topic=993678
"[...] and give hints when somebody have absolutely NO idea. But last 2 level user must find all out alone."

i must help a litle bit in the begin. so people have then also motivation. so in example. lvl1 i have not helped so much.

and i also say in level 3 and level 4 i help not.

i am happy when you all like it!


thank you Collegestudent! I am happy you like it!


yes i like the matrix-story soo much so i build it in the hackme also.



no the matrixbackground is ONLY FOR STYLE of website. so it is nothing affected with the HackMe.



super! only focus and sometimes think outside the box. then you can come to level 5.

Still on 0x204820139351933103 :(

you look in the wrong place...

https://bitcointalk.org/index.php?topic=998907.msg10845615#msg10845615

last hint for level 2: use the brain or google... and then make it "TRUE"

Gotcha. Thanks! I didn't know I was so stupid :D



Edit: I suspect the google analytics code has nothing to do with the answer?

Edit: Thanks, I read those hints

the ga code you can ignore.

I got kind of what I thought was an answer It was a funny one. But I still get nothing :(

Gotcha :D
This was pretty clever hints, lol ;)

read this again and think about it: https://bitcointalk.org/index.php?topic=998907.msg10849220#msg10849220

Hit Level 4 :D

That was pretty easy ;) (I mean level 3)

Currently at lvl 4... hmm true story... ???

Still stuck on lvl 2, i have no idea for lvl 2  :) Great Challenge  ;D

i am at level 3 :)

is there any hint for level 3?

Does lvl 4 has anything to do with english specific language?

I'm having trouble to understand what do you want exactly, I have some true stories but none of them checks out, does the way I type has anything to do with it?

Level 1 answer has something to do with the javascript source.
Level 2 answer has something to do with login variable and Hashing
Level 3 answer has something to do with html

now im at level 4.. Like on previous posts he said, answers will be "php, html, js and basics of encryption and hashing-algorithms"

Level 1 is js
Level 2 is hashing/encryption
Level 3 html
so Level 4 = php? Not sure

Also seems like the /* back:to:the:roots:rot5 */  from level 1 has something to do with level 4...

Rot5 is a cypher technique that involves numbers.

Now im stuck at level 4.  :P                     

Same here, knowing that doesn't help me at all

The logo is a triangle.
So, it have a thing to do with Illuminati.
Nah..i wont join this "game".

very good! you are clever.

ps: no level 4 is "nothing" with php. but you can use a php function to "solve" it (but also many other way to solve it).

rot5 is the key for the last door.


#EDIT: HINT: tell me a TRUE story... (read this loud out and listen to your self)

I found the level 5 final key, where should I write?

pm ca333 for it or try if it is a private key of the walelt
 ;)

'theonebefore'

the "1" before?

or the one before lvl4?

now ım go to level 4 :D but really good job :D

Decrypting the level 2 code results in "false", what do I do with it now? Turn false to true? I'm clueless.

i need level 1 hint

Do I need to use <!--d5--> somewhere?

Exactly. ;)



Where did you get that?

Edit: yes, found it.. ???

no i am sorry. i see you PM. its not correct. last solution is the private-key.
but you are very close. its infront of your eyes. you can "see" it but in the same time you can not..



https://bitcointalk.org/index.php?topic=998907.msg10849220#msg10849220


read back this thread or look @code...


its only a small uncomplete hint... (this hint help you to find correct method)

Still can't understand the mysterious "theonebefore"

Do I have to change the hackme'1' to something else to get a new link? (tried that so many times and failed)

Another meaning could be to spot any difference from the previous to current one. (d5)
I even put the 1 before d5 and converted it to hex, used md5, did all sort of crazy things like:
Tell me a true story:
This is a true story and stuff.. (then realized that may be the wrong turn after all)


Another one could be to check the previous levels.

i have checked the first levels and i cant get it, the 'd5' its confuse

maybe d5 is hint to md5

its impossible to get something i quit

yes that was my first thought, but d5 is a letter too

>.<
i'm back, well... lvl 4 is hard.

stucked here too

you are very clever. in the next hackme you will be faster because you think complexity.
but this hackathon is not so difficult. you must think global. i say: tell me a TRUE story...



+1

I even did md5 for TRUE (the old one)

The question is where do I put it..

well, now i have the same ideas of the secuence from the firsts levels: source code, encryption, source code, encryption(?)
but the true story is not the hash what we have to find... i guess. is a sencente? or just a word, give us a hint

HINT: In information technology we know 2 status. TRUE and FALSE. Elictricity and NoElectricity. Positive and Negative. and what else?

rock yeah! got it man

Strangely enough i tried that before and it didn't work, now it did... strange

if you make the correct solution you come to next level. when you make it wrong you dont.
so you have NOT maked the correct one before.


#EDIT: the hackathon is tested well. So we check all levels good. and also we push it online with timestamp on other click-hoster. so
its provably a serious hackme.

Gotcha! But that was tooo simple that I didn't even try it.  :-\ :D

You got to see those hackathones in which you won't even pass the first level...

i dont know who are the guys in the pic, is related with they?

You mean binary?

yes i know this hackathons.. :) i often play in it.
i love the sql-i and XSSs. its soo nice when you must scan the database if its have the good query filtering. but then you can make a select on table view. and so you see it all... and also i like the real hackathon with a real server. also with my friends from alumni in unversity we often make a good hackathon in the long weekends. so then we make in example 2 teams with 2 people in it and then we look for a good challenge for the other team. And not the fastet team wins. But the team who make the hardest hackathon. :)

My vision is one day when i can afford we make a good and long hackathon with some days (maybe 2 times in a year) with real vulns of server. in example a old version of vulnerable kernel or network driver and then the user must particiapte and find it and make a real exploit. or a server with old version of the SSL. so people start learn more and read the IT-technics, or metasploit, and so on and so on. when in example its a hackme with 20BTC. i think then its sooo much fun and also people will learn make a collaboration and work in teams..

Just want to know it changes with case.

Is the first letter upper case?

 I found the key. Obelix and asterix give it to me. But how i can decode ?

so you have not found the key if you can decode it

Can you explain the "when you see what you can't see" part?

HINT: in very simple cryptography often something is not ON the photo. but its IN the photo... so you see it, but you cant see it...




i read your PM. so now you are the most close person! very good job!

i give now the LAST HINT for this hackathon:

"the biggest enemy of asterix/obelix knows how to decode the key, only go back to the roots and tell him what he need to know"

you mean rot5 ?

/* back:to:the:roots:rot5 */

i tried a lot of way with rot but didnt work..

Do i need to download a different app to calculate this?

you need to look for the privkey. and the key is a alphanumerical string (=text)...

ca333, help me with level 4, I still don't get this :(

i said before: tell me a TRUE story...
read the hints under:

i dont understand the level 5 :( i have spend two days for let it go the btc, maybe is because i am not a web developer or i dont know the relation with the vikings... i have to edit/add something after the .php  ?

no. only look IN the photo.

#NOTHING with the .php
the solution is infront you. but you can not see it. you must look it!

Can you give me some clue about the final part ? Asterix and Obelix what relevance ? and if the answer will be rot5 or rot47 ?

the final answer is a private key you can import in your wallet. Asterix and Obelix have a big enemey. This enemy KNOW HOW to decode the final answer. But before you can decode, you must find the key. And aster/obelix HAVE the key.....

in the movies of that vikings they have a enemy? damn

copyright (C) 2000 Editions Albert Rene Goscinny Uderzo is all I can find.







Rhymes with Rock, Paper, ________

Just a longggg e and singular..


Seefur. And remember five.

So... I found the key

Tried to decode it in many different ways and nothing worked, can you give any hint on the "translation" of the key?

is a consecuence for dont watch that cartoon :/

Work on the hint I gave. (above post)

Seefur = Cipher.

Find the rest of it. It is quite simple. You already have rot5 that is quite enough ;)

asterix's and Obelix's biggest enemy was roman empire, caesar. they used rot algorithms to encrypt important messages. so the key must be decode with rot algorithm. anyway, i tried all variants of it, but the key was always wrong.

Same here

a small hint: https://en.bitcoin.it/wiki/Private_key#Base58_Wallet_Import_format

the encryptionj type/algorythm is the easy to find and check it, the hard is find the sentence for me because i dont understand well the english

this is so funny,
raise the bounty lol.

I feel like an idiot, when this is all over it will be so obvious... :-[

Anyone making progress?

IT S SOLVED. https://blockchain.info/address/1hackxBzktVKWn1FnkSBFoWQC1tWL9nFa

winner please post here. so you get the place in Hall of Fame + 500.000 QoraCoins.

 ::) what a pity me

I am the winner!
:D

Thanks for the hackathon, ca333. Looking forward to more in the future ;)

can you post the solution? now the wallet its empty so we can check it

Congratz to the winner :D

So what is the small piece I was missing? ;)

Congratz dude, I was sleeping and woke up new ;D

I was looking for Steganographic answers. What's your solution?

Congratz to winner

It was fun, looking forward to a next time

LEVEL 1: the secret code is hided in the second JS-function. You MUST SCROLL DOWN.
LEVEL 2: The URL passes variable to PHP. You must change the variable "68934a3e9455fa72420237eb05902327" which is md5("false") and make it md5("true") = "b326b5062b2f0e69046810717534cb09". in example: http://www.md5-hash.com/md5-text-encrypt
LEVEL3: "<!--%67%6F%6F%64%6A%6F%62%0A%09%09%09-->" is hided in sourcecode. This is URL encoded string. You make the url-decoding: http://meyerweb.com/eric/tools/dencoder/ and it give you: "goodjob"

LEVEL 4: this is again a md5 hash of the value true. 1 can also be true. so md5(1) = "c4ca4238a0b923820dcc509a6f75849b"

LEVEL 5: The key is hided IN the photo. You open the photo in ANY texteditor or with cat/nano/vi/vim and you see on the end of the file:
"5OEDrG8yU1ortreRJXeyVed24BDOatCGvok8PQDthB9M5wVBvChn". so we now from level 1 the hint ROT5. This mean ROT5(originalkey) ="5OEDrG8yU1ortreRJXeyVed24BDOatCGvok8PQDthB9M5wVBvCh". the "n" is one character too much because private keys associated with uncompressed public keys are 51 characters and always start with the number 5 on mainnet.
so you only do it reverse ROT26-ROT5 = ROT21: i.e with: http://planetcalc.com/1434/ and you get real privkey: "5JZYmB8tP1jmomzMESztQzy24WYJvoXBqjf8KLYocW9H5rQWqXc"

it had been very easy  ;D

Congratulations! Post/Send me your QORA-address and i send you 500K Qora. also suggest hodl the qora. We work on it and price is already +20% in some day. It will make + many % in next weeks...

The next hackathon start next week because i find the sponsor now will fund new hackathon!

THANK YOU ALL FOR PARTICIAPTE!!! I hope you have fund in it and it make the brain hot! Next week i make similar difficulty. So come back!

private keys associated with uncompressed public keys are 51 characters and ALWAYS start with 5. and we know that ROT5 is only on alphabetical chars! so then you know it start with 5. So only this option (51 chars) is left...

So what is the relation with rot26 ? how we will know that and relate it

how should we know to delete the "n" letter at the end of key? also i deleted it and tried with rot5, but didn't. because you say rot21 know. where rot26 comes from?

also; "Private keys associated with compressed public keys are 52 characters and start with a capital L or K on mainnet (c on testnet)" i

what about  rot26 ?

rot26 is total number of possible shift.. and ROT5 is the hint in level 1. and it say back to the roots (revert it).

ROT5(originalkey) = key in photo. i also say often you must DECRYPT it. so its logical that is encrypted format....
so when you revert you have ONLY THIS OPTION: ROT26-ROT5 = ROT 21.

and it even have internetsites with it make it automatically (http://planetcalc.com/1434/).
#edit: so only google for caesar cipher bring you to the solution....
 
so ALSO WHEN YOU NOT SURE YOU CAN TRY IT BOTH. ROT5(key) or ROT21(key) when original key is encoded with ROT5


#EDIT: in IT we start COUNT ON ZERO. so ROT0 is also possible. we have maximum 26 shifts WITH ROT0..
so ROT 25 is max. i count 26 FOR POSSIBLY SHIFTS.

ah that is the problem, your alphabet have 26 chars lol, well i did my best

lol i was stuck there too, thanks for the game ca333 so you will post a hackaton every 2 weeks? that is not much time?

no sorry i make wrong explanation. i mean not alphabetical signs. i mean its maximal shifts is 26 from latin. so ZERO (ROT0) is also option when shift = ZERO.

so in the example we have. the ROT0(keyFromPhoto) you must make a ROT21(keyFromPhoto) for DECODE. because we have a ROT5 from ORIGINAL KEY.

EXAMPLE: I say ROT5 is hint. Now you take the CODE FROM IMAGE AND EVERY ALPHABETICAL SIGN YOU GO BACK 5 positions. So example:
5OEDrG8yU1ortreRJXeyVed24BDOatCGvok8PQDthB9M5wVBvCh
5JZYmB8tP1jmomzMESztQzy24WYJvoXBqjf8KLYocW9H5rQWqXc

thank you i am happy you like it!

i make a new hackathon NEXT weekend. so i have one sponsor for one more hackathon. And in 2 weeks i make a bigger hackathon with bigger price and little more difficult.

i let the hackathon online. so when you want play again you can always.


and when you have general questions you can ask me here: https://bitcointalk.org/index.php?topic=993678
or in IRC: #satoshihack

THANK YOU ALL AGAIN FOR COME IN THE HACKATHON!

congratulations to the winner, i have tried and i was stuck on the level 4

Yeah - I was stuck @ lvl4 also. But it was tremendous fun, and I'm looking forward to the next one!  ;D

so did anyone got a chance to solve the site?

yes injust solved it successfully and won the prize 0.1 btc. i would participate in the coming competition, when is the next competition/hackathon?

From next time, OP should request a signed message from the winner to confirm that he is really the winner, before sending the Qora.

Just a little advice. ;) Don't know if you already did it. :P

you can see the next competition countdown on www.satoshihack.com.
its coming weekend.


no still not sent. but its the confirmed winner. He sended me also PMs.

-----BEGIN BITCOIN SIGNED MESSAGE-----
I, Injust of Bitcoin Forum, verify that I am the winner of the 1st SatoshiHack hackathon.
I also would like to collect the 500k QORA, which should be sent to QgWfhvQJuYSGXTEq5g7zrr5SWZgFSt5cGw.
-----BEGIN SIGNATURE-----
15eiAnGmwGVKSGjSKowcDw7N6CmhG7jfoo
HNncjff3u8GK8yxLuPx7c02Yqys4yWtKgXhP7jHv/QaLb7DzWifWAc9isEI9hp3seOmvyW65lXBrhKzxBtOre2c=
-----END BITCOIN SIGNED MESSAGE-----

lol, Congratz again ;)

Contratz to the winner!!!


Also many thanx to OP for providing this interesting and beautiful challenge! Keep it up!

3ShEKLHK7Z1HKjpwGp3XzijKe9sxHWkL5VdxBAT1Jq4wHd3zAtMgN17qQagQhTt8TLKpoQoRsLiTmmd 45vRFLHjh

sended 500.000 QORA to QgWfhvQJuYSGXTEq5g7zrr5SWZgFSt5cGw
Thank you for participating in the hackathon!

next hackathon countdown is running! www.satoshihack.com



THANK YOU soo much! next hackathon is this weekend. i hope you come here too. its same difficulty level this time!
so not so hard when already solved hackme #1.

congrats to the winner and waiting new event :)

Congrats to the genius who solved this.