HTS Basic Missions 1-6

BASIC MISSION 1

I can call you a pretty dumb as per you are now viewing the walkthrough for clearing the mission 1.Have you checked the source code it’s written there. View the source and search for “password”, you will get similar like this

<!-- the first few levels are extremely easy: password is abshdgu21 -->

BASIC MISSION 2

I can again call you a pretty dumb as per you are now again viewing the walkthrough for clearing the mission 2 without reading the instructions correctly. Have you checked that - what is written there? “” He neglected to upload the password file”” .So it means “No Password”. Just click “Submit”

BASIC MISSION 3

<form action="/missions/basic/3/index.php" method="post">                                  <input type="hidden" name="file" value="password.php" />                                  <input type="password" name="password" /><br /><br />                                  <input type="submit" value="submit" /></form>

Have you noticed the area of form in HTML? It means the password is stored in password.php. Hence just simply navigate to www.hackthissite.org/missions/basic/3/password.php

BASIC MISSION 4

<form action="/missions/basic/4/level4.php" method="post"> <input type="hidden" name="to" value="webmaster@hulla-balloo.com" /><input type="submit" value="Send password to Sam" /></form></center><br /><br /><center><b>Password:</b><br />                          <form action="/missions/basic/4/index.php" method="post">                          <input type="password" name="password" /><br /><br />                          <input type="submit" value="submit" /></form>

Have you noticed the area of form in HTML? It means the password being sent to webmaster@hulla-balloo.com and changing the email to your email will increase your inbox by one email carrying the password.

PS: Ok I am sure that you are having a problem as it is read only. So copy all and open a notepad file .Paste there and edit and then save the file with extension "html" (like"amit.html") .Now open it and click on "Send message" and you are done....Otherwise If you are using Mozilla Firefox you can use firebug and do the modification and you can also use “Inspect Element” in other browser like Google Chrome

BASIC MISSION 5

This mission is similar like the previous one but for this mission you need javascript injection, because it now checks the referrer. You need to change the 'to' email address to your own. To do this, you need to paste this into your address bar while at the Basic 5 page:

javascript:void(document.forms[0].elements[0].value="titanium009@gmail.com");

Now change” titanium009@gmail.com “ to your email address and it will work in similar way like the previous.

BASIC MISSION 6

So as per the mission You have recovered his encrypted password now just to find the algorithm to decrypt it.  You'll notice that if you encrypt "aaaaa" it gives you "abcde". This encryption simply adds the character number to the character, starting at 0.
You can use http://www.asciitable.com/ to find the progression of symbols. Ex. if your encrypted password is "968d<56>" you need to subtract 1 from the second letter, 2 from the third, and three from the fourth, producing "956a". It isn't obvious what < goes to, so use the link to find out that it is "8". Continuing, you end up with "956a8007", which correctly "encrypts" to "968d<56>".

A little tool made to decrypt the password: http://www.2shared.com/file/Gslp58co/HackThisSite_DecryptME_Basic_6.html