Hack The Web

$ vim tmp.lua
print(string.char(35, 97, 117, 114, 97))

$ lua tmp.lua

➤ python
>>> bin(7)

➤ date -d @817876800
1995-12-02 12:00:00

➤ factor 1337
1337: 7 191
09:56:08 ~
➤ factor 191
191: 191
09:56:15 ~
➤ factor 190
190: 2 5 19
09:57:16 ~
➤ factor 18
18: 2 3 3

<p>
<!-- noinspection SpellCheckingInspection -->
<em>
<strong>T</strong>he hours stretch before the glowing screen.<br>
<strong>H</strong>uman language is so imprecise.<br>
<strong>E</strong>verything depends on clarity.<br>
<strong>A</strong>nd clarity emerges through code's decree.<br>
<br>
<strong>N</strong>ow is the moment, a canvas to create,<br>
<strong>s</strong>culpting worlds in the digital state.<br>
<strong>W</strong>ith every line, a universe unfurls.<br>
<strong>E</strong>ager minds contemplate the code's weight.<br>
<br>
<strong>R</strong>evealing secrets in each algorithm's dance,<br>
<strong>i</strong>n the binary, we find our cosmic trance. <br>
<strong>S</strong>ynchronizing bytes in a digital romance: <br>
<br>
<strong>S</strong>eeking clarity, as we advance.<br>
<strong>T</strong>apping keys, we're bound to transcend,<br>
<strong>e</strong>levating thought, in this realm we intend,<br>
<strong>n</strong>urturing ideas, our journey won't end,<br>
<strong>o</strong>ffline is good, but online is better.
</em>
</p>

                  const d = [68,
             105,               101,
         32,                         65,
      110,                             116,
    119,                                 111,
  114,        116,            32,         108,
 97,          117,            116,         101,
116,           32,            75,           111,
114,                                         111,
115,                                         101,
110,     115                          ,      101,
 105      ,46                        ];     const
  e        = d                   .map(       (x
   )=>       String.fromCharCode(x))      .join
    (''                                    )
      /*                                 x
        x                             x
           xxxxx                xxx*/
                 window.alert(e)

➤ python
Python 3.13.5 (main, Jun 21 2025, 09:35:00) [GCC 15.1.1 20250425] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> bin(45)
'0b101101'

<p class="print-only">The answer is ????????????.</p>

<p><img src="/chals/chal62_placeholder.png" style="background:white; max-width: 200px" alt="placeholder"/></p>

#!/bin/bash

recursive_unzip() {
    for file in "$1"/*; do
        if [ -f "$file" ]; then
            case "$file" in
                *.7z|*.zip|*.rar|*.tar|*.gz|*.bz2)
                    dir="${file%.*}"
                    mkdir -p "$dir"
                    7z x -o"$dir" "$file" > /dev/null
                    recursive_unzip "$dir"
                    ;;
            esac
        fi
    done
}

recursive_unzip "."

24
Nicht blinzeln

37
Emoji

30
UNIX Zeitstempel

68
Gemälde

84
Inception

58
Elemente

31
Röhre

9   8   19   2   7   16   11
18   12   13   1   14   20   3
10   6   17   5   4   15   21
23   22   26   29   24   2   27
25   30   42   33   35   34   21
43   52   45   17   47   33   49
50   11   25   45   54   27   56
23   22   26   29   24   28   27

s/ \t/+/g
and
s/\n/+/g
then calc

➤ calc
C-style arbitrary precision calculator (version 2.15.1.1)
Calc is open software. For license details type:  help copyright
[Type "exit" to exit, or "help" for help.]

; 9+8+19+2+7+16+11+18+12+13+1+14+20+3+10+6+17+5+4+15+21+23+22+26+29+24+2+27+25+30+42+33+35+34+21+43+52+45+17+47+33+49+50+11+25+45+54+27+56+23+22+26+29+24+28+27

import hashlib

def find_n():
    n = 1
    target = "000000"
    while True:
        s = "hacktheweb" + str(n)
        hash_value = hashlib.md5(s.encode()).hexdigest()
        if hash_value.startswith(target):
            print(hash_value)
            print(n)
            return n
        n += 1

if __name__ == "__main__":
    result_n = find_n()

Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko

bu7 07h3r p30pl3 w4n7 70 m4k3 7h31r 5k1ll5 v151bl3 - 4nd 7h3r3f0r3 wr173 7h31r m3554635 1n l337.

7|-|3|23 4|23 |)!|=|=3|23|\|7 |_3\/3|_5 4|\||) \/4|2!4|\|75 0|= |_337 - |=|20/\/\ 345!|_`/ |234|)4|3|_3 70 7074|_|_`/ (|2`/|D7!(.

`/0|_||2 4|\|5\|/3|2 !5 |_|1+!|\/|4+!\/.

but other people want to make their skills visible - and therefore write their messages in leet.

t|-|e|2e a|2e |)!|=|=e|2e||t |_e/e|_s a|||) /a|2!a||ts o|= |_eet - |=|2o// eas!|_`/ |2ea|)a|e|_e to tota|_|_`/ (|2`/|Dt!(.

`/o|_||2 a||s|/e|2 !s |_|i+!|/|a+!/.

bu7 o7her people wan7 7o make 7helr skllls vlslble - and 7herefore wrl7e 7helr messages ln lee7.

7here are di|=|=ere||7 |_e/e|_s a||d /aria||7s o|= |_ee7 - |=ro// easi|_y reada|e|_e 7o 7o7au_y cry|D7ic.

your a||s|/er is ulti|/|ati/.

1 'or 1=1 --

Accept-Language: fr-FR, fr

1337ia<esc>

➤ factor 864186418888888888802470247
??????????????????????????????????????????????????????????

function update() {
    let gold = parseInt(document.getElementById('gold-span').innerHTML);
    gold = gold + 1
    document.getElementById('gold-span').innerHTML = gold.toString()
    document.getElementById('score').innerHTML = btoa(JSON.stringify({gold:gold}))
}

gold=999999

btoa(JSON.stringify({gold:gold}))

for (let i = 0; i <100000; i++) {
    work(true);
}

answer=Klamauk

a = "6d45454e0a4045480b0a7e424f0a4b44595d4f580a43590a6b6f7904"
b = bytes.fromhex(a)
c = [byte ^42 for byte in b]
print(bytes(c).decode())

#!/bin/bash

URL="https://hack.arrrg.de/chal/orakel"
LOG_FILE="orakel_monitor.log"
touch "$LOG_FILE"

while true; do
    TIMESTAMP=$(date +"%Y-%m-%d %H:%M:%S")
    echo "[$TIMESTAMP] $URL" >> "$LOG_FILE"
    curl -s "$URL" 2>&1 | tee -a "$LOG_FILE"
    sleep 900
done

a = "4c314c205f37542d4c3819345c274f2c01781d79072a44205d38502f0266183556344d600c631d7f1e661f7716624f3159374f30587b56137b046c46381561037b0429452658224a35022f70146a0e680a29"
b = bytes.fromhex(a)

for key in range(0,255):
    previousOutput = 0
    output_bytes = []
    for d in b:
        current_key = previousOutput ^ key
        decrypted_byte = d ^ current_key
        previousOutput = d
        output_bytes.append(decrypted_byte)
        s = bytes(output_bytes).decode()
    if "answer" in s.lower():
        print(f"{key}, {s}")
        break

# The byte in b equals xor_byte in the source.
# Thus previousOutput = byte.

➤ python tmp.py
13, Apparently, even this cipher is not absolutely secure. Here's your answer: ??????.

a="59176f2b4e4f377f1a5f7427431631306d294b066e2749062d7f1d523d3c55187226010051056d27491a317901547f2de578b00e29285619767715573435591d74301b5b2562474609412f2e642b540266354a4b2c6c1247297c5736030f2925101c3a36030f2925"
b=bytes.fromhex(a)

def cipher_iii(key1,key2,input_bytes):
    previousOutput = 0
    output_bytes = []
    for i, d in enumerate(input_bytes):
        k = key1 if i % 2 == 0 else key2
        current_key = previousOutput ^ k
        xor_byte = d ^ current_key
        output_bytes.append(xor_byte)
        previousOutput = d
    s = bytes(output_bytes).decode(errors='ignore')
    if "antwort" in s.lower():
        print(s.lower())

for key1 in range(0,255):
    for key2 in range(0,255):
         cipher_iii(key1,key2,b)

from http.server import HTTPServer, BaseHTTPRequestHandler as Handler
USERNAME = "your_username_here"
Handler.do_GET = lambda self: [self.send_response(200),
                               self.end_headers(),
                               self.wfile.write(USERNAME.encode())]
HTTPServer(('', 8000), Handler).serve_forever()

137 80 78 71 13 10 26 10 0 0 0 13 73 72 68 82 0 0 0 30 0 0 0 12 8 2 0 0 0 250 76
154 101 0 0 1 111 105 67 67 80 105 99 99 0 0 40 145 117 145 59 75 3 65 20 133
191 108 148 136 70 82 40 40 98 145 66 197 34 130 40 136 165 198 194 38 136 68 5
163 54 201 102 147 8 217 100 217 77 16 177 21 108 44 4 11 209 198 87 225 63 208
86 176 85 16 4 69 16 177 242 7 248 106 36 172 119 92 33 65 146 89 102 239 199
153 57 151 153 51 160 197 242 186 233 52 13 131 89 40 217 241 233 104 120 49 177
20 14 188 162 17 32 72 23 254 164 238 88 147 179 179 49 26 142 175 123 124 170
222 13 169 94 141 247 213 29 109 105 195 209 193 215 34 60 166 91 118 73 120 66
56 182 86 178 20 111 11 119 234 185 100 90 248 72 56 98 203 1 133 175 149 158
242 248 69 113 214 227 15 197 246 124 124 10 52 213 51 156 173 225 84 13 235 57
219 20 30 20 238 51 243 101 253 239 60 234 38 65 163 176 48 39 181 71 102 47 14
113 166 137 18 38 69 153 85 242 148 24 146 90 144 204 234 251 134 127 125 51 20
197 163 203 223 98 29 91 28 89 114 226 141 136 90 150 174 134 212 140 232 134
124 121 214 85 238 255 243 116 50 163 35 94 247 96 20 154 159 93 247 189 31 2
187 80 217 113 221 239 99 215 173 156 128 255 9 46 11 85 127 81 114 26 255 20
125 167 170 245 29 66 104 19 206 175 170 90 106 15 46 182 160 251 209 74 218 201
95 201 47 83 203 100 224 237 12 218 19 208 113 11 173 203 94 86 127 235 156 62
192 252 134 60 209 13 236 31 192 128 236 15 173 252 0 114 238 103 201 164 67 205
207 0 0 0 9 112 72 89 115 0 0 46 35 0 0 46 35 1 120 165 63 118 0 0 3 121 73 68
65 84 56 203 85 83 75 139 29 69 20 62 245 234 238 219 247 61 119 94 241 206 196
33 collapsed lines
113 92 68 133 68 9 4 21 87 130 75 23 66 208 31 144 133 110 140 16 17 18 55 34
186 208 197 44 116 16 84 92 185 16 252 5 46 3 130 196 100 80 209 40 145 144 48
153 151 51 115 239 220 103 223 190 125 187 187 170 206 177 58 217 232 89 20 95
125 117 234 84 157 239 171 98 191 199 239 231 34 106 140 128 238 144 236 81 169
15 81 4 119 12 87 107 149 245 151 130 106 69 134 147 160 38 207 202 242 10 29
220 55 199 29 19 103 51 202 204 114 62 171 39 106 88 126 208 138 14 231 237 4
144 199 172 149 73 133 216 190 13 254 33 101 90 200 125 53 137 193 176 10 59 174
251 185 135 75 104 143 42 44 79 196 217 85 171 203 152 112 237 79 108 118 247 86
90 255 165 180 160 152 36 212 72 42 151 76 151 6 164 167 217 252 152 245 82 76
22 73 19 77 185 225 129 24 46 224 226 17 101 100 229 88 155 8 73 39 216 210 70
14 196 78 75 25 195 22 140 154 91 17 70 217 12 153 57 140 163 125 211 126 99 51
254 241 106 73 202 82 77 154 0 35 129 152 17 76 243 167 95 255 4 30 198 167 127
95 153 105 4 13 163 6 219 62 7 141 61 46 89 66 0 164 53 216 17 94 232 8 255 113
198 115 238 46 199 60 158 42 75 51 232 119 181 1 116 155 37 71 24 219 145 129
158 128 100 66 251 117 227 77 139 162 91 95 94 235 215 205 189 30 78 20 104 77
65 238 137 161 109 97 200 110 116 222 100 37 122 177 246 205 15 63 191 189 230
151 65 27 239 8 3 139 43 23 63 223 74 222 163 158 121 254 244 103 240 159 184
181 245 238 34 103 179 93 246 204 197 13 248 127 108 252 116 181 170 131 249 172
238 119 77 107 162 100 77 0 216 98 161 217 14 120 88 45 39 185 55 76 104 154 59
166 148 100 73 31 110 126 251 214 236 21 120 185 253 245 7 183 47 175 107 160
166 117 45 101 17 255 254 187 119 158 170 195 115 175 110 254 182 121 205 227
190 173 201 30 199 149 64 84 187 193 201 56 117 150 112 161 92 251 174 60 48 89
141 41 92 61 253 81 247 201 202 94 187 96 162 220 199 145 231 63 225 229 42 116
83 227 68 171 64 191 74 59 53 58 114 229 207 96 122 78 57 94 61 38 120 136 1 225
18 137 100 77 79 253 97 60 138 163 105 34 157 105 126 33 183 211 219 70 193 216
129 147 176 116 88 47 152 177 80 44 48 188 21 158 120 230 97 2 204 128 117 138
14 121 88 231 105 83 222 171 20 55 216 59 163 91 127 81 121 38 213 121 38 233 68
118 150 204 131 102 198 52 8 144 114 110 219 25 88 164 119 104 144 83 201 129
157 44 30 167 204 129 63 199 125 191 230 149 173 63 155 21 54 106 208 195 152 50
159 121 178 52 109 130 31 132 58 47 248 253 229 204 140 169 189 99 74 49 111 221
197 110 106 18 159 149 211 80 6 26 248 164 200 120 109 237 139 71 110 92 90 255
248 17 56 56 38 161 140 80 86 218 226 164 141 23 190 114 227 135 127 92 242 171
10 153 82 238 41 219 162 155 153 197 227 54 150 7 86 198 16 78 216 179 8 120 138
9 36 118 163 123 121 245 166 238 117 233 250 10 91 62 31 236 222 23 209 152 165
152 163 50 232 33 10 4 238 4 32 198 109 62 69 219 135 90 69 54 78 85 68 160 40
87 232 229 40 116 99 64 231 83 59 96 148 100 172 61 97 115 41 180 84 32 52 201
95 133 119 189 169 178 26 201 114 233 159 93 197 50 12 57 15 69 133 124 147 170
52 161 212 73 76 41 186 191 44 172 112 223 32 80 141 192 148 29 70 11 89 228 139
169 165 92 31 172 154 3 79 15 7 180 13 108 157 139 11 146 120 150 255 11 71 102
248 173 20 167 222 145 0 0 0 14 101 88 73 102 77 77 0 42 0 0 0 8 0 0 0 0 0 0 0
210 83 147 0 0 0 0 73 69 78 68 174 66 96 13O