Here is the first one. Its quite easy.
Comment has been collapsed.
Hot Shots 2!
Awesome movie! :D
I suppose it was my favorite film from my childhood VHS collection.
Comment has been collapsed.
Sorry for getting a nomination for golden shovel award with this post but I promised myself I'll come back here one day...
And look what I found! :D
Comment has been collapsed.
The next one. Still quite easy.
Comment has been collapsed.
Correct. Volstead is gone, everything else is still there.
Comment has been collapsed.
You guys are faster as i thought.
I guess i skip some levels and create some little harder challenges.
But i'll be back ;)
Comment has been collapsed.
Argh... I was just doing nothing waiting for the 3rd image for a while.... Should have announced that sooner. :p
Do you have an ETA?
Comment has been collapsed.
I will def. post at least two more today.
It depends on how far they are solved, and how far can i code.
Comment has been collapsed.
First of all, "today" is just 1 hour left in my time zone. But whatever. :p
Also now you are skipping to some coding puzzles? Ah well, I'll try a bit but I'm expecting them to be either beyond something I can do, or simply feel too lazy. The above 2 were easy for me though. Should have seen this thread a few minutes faster. :p
Fun thread though. :)
Comment has been collapsed.
Another mor or less "tutorial like".
edit sry: something went wrong with uploading. It is still solveable, but somehow the gif won't move.
Comment has been collapsed.
I'd like to go with Dead Space 2 -- although its steam store page is "not available in Germany". Don't know if I could even activate it.
... guess I'll spare the hassle and go with Psychonauts.
Comment has been collapsed.
Interesting, i got Dead Space from the HB store as bonus somewhen.
Added you on steam.
Comment has been collapsed.
No idea how this whole coding works, but I'd rather learn for the future instead of winning a game I'll never play. Any chance you can explain to me over steam? xD
Comment has been collapsed.
I am hiding passwords in gifs. (At the moment) not in what you see when you look at the image in your browser, but in the data of the images itself.
GIFs support different interesting "data-blocks".
Additionally as the challenges are getting harder i will throw some (easy) cryptography and maybe steganography and and no clue what in the mix for good measurement.
To learn more about the gif format i suggest the two links i posted in my first post
Comment has been collapsed.
I'm always late %(
No, wait, I don't yet get the last one... Hmmm
Comment has been collapsed.
Me trying to solve these like
Comment has been collapsed.
What a neat idea for a puzzle - can't wait to see the next one!
Comment has been collapsed.
I had problems with hosters removing some blocks, so till i figured that out, here a more gag like one.
It may still be harder as the previous ones.
Last one from me for today. Have fun :)
Comment has been collapsed.
are the answers always full words or something else too?
Comment has been collapsed.
The answer will always be some word or sentence, and (in most cases) there is some text in front of it like "The password is..".
But, to find the answer you might need to do different stuff (decoding/decrypting/understand what the data is you see....)
Just to clarify this: The prepending text like "The password is" will in most cases not be in clear text in the file"
Comment has been collapsed.
Correct. Grats. I added you on steam.
Do you already know which game you want ?
Comment has been collapsed.
Explanation please? I found a PNG in the GIF's comment section but couldn't make any sense of it.
Comment has been collapsed.
Yes, I opened the GIF in a Hex Editor, deleted everything before the PNG magic bytes (89 50 4E 47), deleted everything after the IEND ASCII tag, and saved as a PNG.
This is what I ended up with:
Comment has been collapsed.
You might want to read a bit about how the comment data (and all other data of variable size) is saved in gifs.
See http://www.onicos.com/staff/iz/formats/gif.html
Comment has been collapsed.
The PNG data is broken into blocks of comment data, so you have to remove the block length byte at the beginning of each block.
Comment has been collapsed.
Was the comment a PNG code that we had to decode and turn into an image?
Comment has been collapsed.
Yes, and the yo dawg meme was used with a reason XD
Comment has been collapsed.
First two were relatively easy, but I don't see how "brutus" was found for the third at all... I got rot13 too, nothing else even hinted towards the actual answer.
And this fourth one? Maybe its just me, but something seems kinda off about it. I mean, over a 100 comment blocks, and certain programs register it as a .png rather than .gif
Comment has been collapsed.
About brutus: Application extension blocks (see links) not only have an version and a signature, but another field, too.
Google what rot13 is if you don't know it already.
About the forth one i can't really tell something without to spoil it.
Comment has been collapsed.
Is it swordfish? It should be swordfish. Please say it's swordfish.
Comment has been collapsed.
Ok, that was it for me today. Sorry, More tomorrow :)
Comment has been collapsed.
This is too complicated for me. Will never be able to understand unless someone actually shows me. :/
Comment has been collapsed.
Is not too complicated (with the right tools), you need to save the gif to your computer, and then open it with an editor, a look for the password, and you'll see something like
Comment has been collapsed.
Another one. Maybe a hex editor isn't enough anymore, but it is still easy.
I'll need some time till the next is done, but i will post at least two more in the next 12 hours.
Comment has been collapsed.
I'm missing something, I got the hex message, but when I converted to ascii, it gave me some giberish, like
"Whfg fb lbh qbag'g svaq vg ol qhzcvat nyy fgevatf jr rapbqr vg. Gur cj vf 'JulQbrfAbguvatHfrGuvfNjrfbzrSrngher???'"
Comment has been collapsed.
Maybe try to solve the previous ones first. It should give you a clue.
Comment has been collapsed.
_It was in front of my eyes the whole time, let's ope I'll get it faster next time :D
Comment has been collapsed.
A question... in the first plain text extension, we have
↓12► ◄ ??↓67►
21 01>0C>00 00 00 00 00 C8 00 C8 00 14 14 01>02!43>49 73 6E 27 74 20 74 68 69 73 20 66 65 61 74 75 72 65 20 61 77 65 73 6F 6D 65 20 3F 57 68 79 20 74 68 65 20 68 65 63 6B 20 64 6F 65 73 20 6E 6F 62 6F 64 79 20 73 75 70 70 6F 72 74 20 74 68 69 73 20 3F>00>21 F9>04.....Why the size of the first sub block is declared as 0C and then the block is 13 bytes long? Am I missing something?
Comment has been collapsed.
isn't it counting byte 0? I mean, as any array that goes from 0 to 0c, and the length is 13?
Comment has been collapsed.
No. That 0c is simply "size" and not "last index of a zero-based array and, yeah, the size of that array, that's the number you actually want".
Comment has been collapsed.
It looks like a bug in my code. mandrill also noticed this.
Per specs the blocksize should be always 0c but somehow my encoder added a byte which doesn't belong there.
Sorry and thanks for notifying me about it.
Comment has been collapsed.
Wait, is this related to the image above? Why do I get the 21 01 B3 in there?
Confused as I am about every task in this thread
Comment has been collapsed.
Aehm, could someone suggest a good free hex editor for windows.
Normally i do such stuff under linux, but with my current PC i can't really set up virtual machines (main system is win).
Comment has been collapsed.
Do we get a free game if we suggest a good editor? :p
Just kidding, I would if I knew any, I'll ask my community though
Comment has been collapsed.
Yes, but only freebies and only if you are fast enough.
hxxp://www.indiegala.com/game?game_id=492cd22b316e11e5b11a919862d23embed
remove the em from embed
Comment has been collapsed.
I hope Indiegala changes their system soon... It's sad finding almost 3k email addresses with a simple search in google, some of them with the Steam name included T_T
Comment has been collapsed.
If you redeem a game your email system is shown for other (and the gifter) when visiting the link.
If you use google to search for similair urls you should find a lot of emails (never tested it, but it should work)
Comment has been collapsed.
True. Should have posted the key i guess, but i am not sure if IG always gives the key or send it to your account like HB sometimes does.
Comment has been collapsed.
It's not your fault, it's Indiegala's fault. Surely dropping just the key is against their ToS and they would deny any kind of support to the person who redeemed the key. The correct way is what you did.
Comment has been collapsed.
Thanks, it looks pretty nice, maybe it will replace notepad++ for me. Will give it a try.
Comment has been collapsed.
But I think notepad++ has better plugins by the community
Comment has been collapsed.
The hex plugin for notepad++ is really shitty. I'm not sure, I think it's not even actively supported anymore.
Comment has been collapsed.
Well, I was talking in general. Notepad++ has some good plugins I have heard (I never used it).
Some time ago Sublime Text was the fashion, dunno if it is yet (never used it either)
Comment has been collapsed.
Atom is getting some hype, specially because it's developed by github.
Under windows, npp it's still my default editor, and Sublime when on my linux machine
Comment has been collapsed.
Thanks for the suggestion.
The editor looks pretty nice and the template thingy is just awesome.
Comment has been collapsed.
did you try using the hex plugin for npp? or installing vim for windows?
Comment has been collapsed.
Sublime Text 2 + HexEditor atm. SLT is what I use for anything. :o Also a nice tool to know if mobile.
http://www.onlinehexeditor.com/
Comment has been collapsed.
edit: Both are solved
Ok, i need to learn a bit about stuff first, so for now i hide some password files on two warboxes ( kind of hacking challenges ).
The goal is to find passwords for each level.
I hid the password file on both boxes with the level4 user, meaning you have to solve all levels before this to be able to read the file.
Sorry to everyone for which this is to hard, i'll be back with easier stuff.
Level 4 in http://blackbox.smashthestack.org:85/
-r-------- 1 level4 gamers 87 Jul 23 20:42 /tmp/steamgifts/PASS
Level 4 in http://overthewire.org/wargames/behemoth/
Connect to the first level like:
ssh behemoth0@behemoth.labs.overthewire.org
-r-------- 1 behemoth4 behemoth4 102 Jul 23 20:55 /tmp/steamgifts/PASS
edit: If you managed to get the required user privs and the file is gone, please leave a message here.
Comment has been collapsed.
Password on BlackBox is ZeroCool.
That really was fun :)
Comment has been collapsed.
No more asm!!! ´T_T´ Arghh why is it pursuing me??!!
Also... the solutions HowTo's are on google lol
Comment has been collapsed.
I feared this was the case, anyway lets hope the first one submitting the correct password at least looked a bit at what to do ;)
Comment has been collapsed.
Yeah I hoped I could do without, but I actually had to google a howto for level 2 ... still don't know why my solution wouldn't work, but I learned a new trick that way (shellcode in env instead of buffer).
I actually found level 3 far easier than 2.
Comment has been collapsed.
Does behemoth4 counts as the second prize? if so I have the password
Comment has been collapsed.
Sure, there is a price for both boxes. mandrill will get one for blackbox and you one for behemoth (if you post the password i hid ofc ;))
Comment has been collapsed.
Correct.
I already added you on steam, but i will wait for mandrill to choose his game first as he handed in the first password..
Ofc you could already look though the games, the chances you two pick the same aren't that high anyway i guess.
Comment has been collapsed.
Sorry for the delay, I posted the solution right before going to bed :) Shattered Planet looks nice.
I'm at work now, will be online later; just didn't want to keep marcelo waiting
Comment has been collapsed.
Well there goes getting a copy of OldCityLeviathan :'D
Comment has been collapsed.
I finally finished another one. This might be a little harder (again depending on your tools of choice).
Have fun.
I can hand out the award tomorow (in max 14h i guess/hope), but the first one posting the pass in here will get one of the games.
Comment has been collapsed.
So i read a bit about the gif format and decided i will do some "puzzles" using gifs.
Warning: For this puzzles you need to be able to code or now how to use the correct tool for the job.
It will be quite easy at the beginning, but will get harder over time.
Rules
I will post images, which will lead to an password in one way or another.
I will (from now on) always post two images with data stored in a similar kind.
There is a game for both solved images, but it have to be two different people.
Kind of like a first and second price, but both can choose a game.
To get your game post the hidden password in this thread.
After both puzzles are solved feel free to post the solution, hints and whatever in this thread.
Before both are solved, little hints are welcome, but please don't spoil the fun.
All tips and writeups have to be inside spoilers (Between two ~ symbols like this)
All games are steam redeamable and almost all are leftovers from bundles.
For the later (and maybe earlier, too) puzzles you may want to read this and maybe this too. Or if you want a more technical view here
List of games
140 [HB]
18 Wheels of Steel: Extreme Trucker [KEY]
A Valley Without Wind [CARDS] [KEY]
Aaru's Awakening [IG]
About Love, Hate and the other ones [CARDS] [IG]
Alchemy Mysteries: Prague Legends [CARDS] [IG]
Alchemy Mysteries: Prague Legends [CARDS] [IG]
APOX [IG]
Atonement: Scourge of Time [KEY]
Avencast: Rise of the Mage [KEY]
Aveyond: Lord of Twilight [HB]
Battlepaths [CARDS] [KEY]
Bermuda [CARDS] [IG]
Biodrone Battle [KEY]
BlazeRush [CARDS] [IG]
BloodNet [IG]
Build 'n Bump [KEY]
Canyon Capers [CARDS] [KEY]
Canyon Capers [CARDS] [KEY]
Cargo Commander [CARDS] [IG]
Cargo Commander [CARDS] [IG]
Clickr [CARDS] [KEY]
Cobi Treasure Deluxe [KEY]
Company of Heroes [HB]
Crab Cakes Rescue [KEY]
Crayon Chronicles [CARDS] [IG]
Crayon Chronicles [CARDS] [KEY]
Crazy Cars - Hit the Road [IG]
Crimzon Clover WORLD IGNITION [CARDS] [HB]
Crystals of Time [CARDS] [KEY]
Damnation City of Death [IG]
Damnation City of Death [IG]
Dark Shadows - Army of Evil [KEY]
Dark Shadows - Army of Evil [KEY]
DarkBase 01 [CARDS] [IG]
David. [CARDS] [IG]
Dead Space™ 2 [HB]
Divekick [CARDS] [IG]
DogFighter [IG]
Down To One [IG]
Dragon Age: Origins [HB]
Drew and the Floating Labyrinth [IG]
Eidolon [IG]
Eleusis [IG]
Escape Machines [IG]
Final Dusk [CARDS] [IG]
Final Dusk [CARDS] [KEY]
Final Dusk [CARDS] [KEY]
Flix The Flea [CARDS] [KEY]
Frozen Synapse Prime [CARDS] [HB]
Global Ops: Commando Libya [IG]
Goats On A Bridge [CARDS] [HB]
God Mode [CARDS] [HB]
Gunship! [IG]
Home [IG]
Home [IG]
Hypt [IG]
Imperial Glory [IG]
Insecticide Part 1 [IG]
Ionball 2: Ionstorm [KEY]
Ionball 2: Ionstorm [KEY]
Jamsouls [CARDS] [KEY]
Jones On Fire [KEY]
Knights of Pen and Paper +1 Edition [CARDS] [HB]
Knock-knock [CARDS] [IG]
Labyrinthine Dreams [CARDS] [HB]
Last Knight: Rogue Rider Edition [CARDS] [IG]
Legendary [IG]
Legendary [IG]
Leona's Tricky Adventures [IG]
Leona's Tricky Adventures [KEY]
Lightfish [KEY]
Lilly and Sasha: Curse of the Immortals [CARDS] [KEY]
Lilly and Sasha: Curse of the Immortals [CARDS] [KEY]
Lilly and Sasha: Curse of the Immortals [CARDS] [KEY]
Lumino City [HB]
Magicka [CARDS] [HB]
Magicka: Horror Props Item Pack [HB]
Magicka: The Other Side of the Coin [HB]
Magnetic By Nature [CARDS] [IG]
Majestic Nights [CARDS] [IG]
Make it indie! [CARDS] [IG]
Make it indie! [CARDS] [KEY]
Metrocide [HB]
Motorama [IG]
Munin [CARDS] [KEY]
Mushroom Men: Truffle Trouble [CARDS] [IG]
NaissanceE [IG]
Ninja Guy [IG]
Numba Deluxe [KEY]
Obludia [CARDS] [KEY]
OCEAN CITY RACING [KEY]
Orborun [KEY]
Paranautical Activity: Deluxe Atonement Edition [CARDS] [IG]
PeriAreion [IG]
Pid [KEY]
Pixel Piracy [CARDS] [IG]
Plazma Being [CARDS] [IG]
Praetorians [IG]
Primal Carnage [CARDS] [HB]
Project Green Beat [KEY]
Project Night [CARDS] [KEY]
Project Night [CARDS] [KEY]
Proxy Blade Zero [IG]
QuestEvent [IG]
QuestRun [KEY]
R.O.O.T.S [KEY]
R.O.O.T.S [KEY]
Rabbit Hole 3D: Steam Edition [CARDS] [KEY]
Racer 8 [CARDS] [KEY]
Racer 8 [CARDS] [KEY]
Real Boxing™ [CARDS] [IG]
Real Boxing™ [CARDS] [IG]
Remnants Of Isolation [CARDS] [HB]
Restaurant Empire II [IG]
Retro/Grade [CARDS] [IG]
Rex Nebular and the Cosmic Gender Bender [IG]
Rooks Keep [CARDS] [IG]
Rooms: The Main Building [CARDS] [KEY]
Rotieer [IG]
Runaway, A Road Adventure [IG]
Runaway, The Dream of The Turtle [IG]
Runaway: A Twist of Fate [IG]
Rush Bros. [CARDS] [KEY]
Rush Bros. [CARDS] [KEY]
Rush Bros. [CARDS] [IG]
samurai_jazz [IG]
Savant - Ascent [IG]
SCHAR: Blue Shield Alliance [CARDS] [IG]
Shadow Ops: Red Mercury [IG]
Shadows of War [CARDS] [IG]
Shattered Haven [KEY]
SickBrick [CARDS] [KEY]
Siege of Inaolia [KEY]
Siege of Turtle Enclave [IG]
Sinister City [CARDS] [IG]
Sinister City [CARDS] [IG]
Slave Zero [IG]
Space Station Alpha [IG]
Speedball 2 HD [CARDS] [KEY]
Stacking [HB]
Starlaxis Supernova Edition [CARDS] [IG]
Steel Storm: Burning Retribution [KEY]
Stonerid [CARDS] [KEY]
Super Furball [IG]
Super Splatters [CARDS] [HB]
Supreme League of Patriots - Episode 2: Patriot Frames [CARDS] [KEY]
Survivor Squad [CARDS] [IG]
Sword of Asumi [CARDS] [KEY]
Tales From Space: Mutant Blobs Attack [CARDS] [IG]
Terra Incognita ~ Chapter One: The Descendant [CARDS] [IG]
Terrian Saga: KR-17 [CARDS] [IG]
The Culling Of The Cows [CARDS] [KEY]
The Culling Of The Cows [CARDS] [KEY]
The Defenders: The Second Wave [CARDS] [IG]
The Detail [CARDS] [IG]
The Joylancer: Legendary Motor Knight [IG]
The Language Game [KEY]
The Lost City Of Malathedra [KEY]
The Novelist [CARDS] [HB]
The Old City: Leviathan [IG]
The Original Strife: Veteran Edition [CARDS] [KEY]
The Undying Plague [CARDS] [IG]
Tidalis [KEY]
Trauma [IG]
Treeker: The Lost Glasses [CARDS] [IG]
Trine 2: Complete Story [CARDS] [HB]
Tryst [IG]
Turba [IG]
Ubinota [KEY]
Velvet Assassin [IG]
Velvet Assassin [IG]
Vessel [IG]
Victim of Xen [CARDS] [KEY]
Viscera Cleanup Detail: Santa's Rampage [IG]
Volstead [KEY]
Volt [CARDS] [KEY]
VVVVVV [HB]
War of the Roses: Kingmaker [CARDS] [HB]
Warhammer® 40,000: Dawn of War® - Game of the Year Edition [IG]
Warhammer® 40,000™: Dawn of War® II [IG]
Woolfe - The Red Hood Diaries [CARDS] [IG]
X-COM: Enforcer [KEY]
X-COM: Interceptor [KEY]
Yury [CARDS] [KEY]
Zack Zero [CARDS] [KEY]
Other stuff and packs:
Skara Starter Package
Company of Heroes Complete Pack I am not 100% sure. HB says it is "Company of Heroes™ Complete Edition"
Company of Heroes™ 2 - The Western Front Armies Oberkommando West This is a DLC, but can be played as a standalone version, too.
thanks Jagdtiger for the info
Also i have a whole lot of Desura games. If there is any interest i could generate a list of them.
Comment has been collapsed.