Hacker Evolution
Unofficial Strategy Guide and FAQ
by Kasey Chang
released May 22, 2007
1 Introduction
This section is for "what the FAQ is about" and things like that.
Feel free to skip this section.
If you like the FAQ, please send me a dollar. :-) See [1.3]
This FAQ is about "Hacker Evolution", a "hacking simulation"
created and published by exosyphen.
1.1 A WORD FROM THE AUTHOR
This is a FAQ and guide, NOT a manual, not that you really need a
manual to play this game. Besides, all the commands are listed
when you press F1, or type HELP in the console.
This USG only covers the PC Version, since this only existed on
the PC at time of this guide's creation.
1.2 TERMS OF DISTRIBUTION
This document is copyrighted by Kuo-Sheng "Kasey" Chang (c) 2007;
all rights reserved excepted as noted above in the disclaimer
section.
This document is available FREE of charge subjected to the
following conditions:
1)This notice and author's name must accompany all copies of
this document: "Hacker Evolution Unofficial Strategy Guide and
FAQ" is copyrighted (c) 2007 by Kasey K.S. Chang, all rights
reserved except as noted in the disclaimer."
2)This document must NOT be modified in any form or manner
without prior permission of the author with the following
exception: if you wish to convert this document to a different
file format or archive format, with no change to the content,
then no permission is needed.
2a) In case you can't read, that means TXT only. No banners,
no HTML borders, no cutting up into multiple pages to get you
more banner hits, and esp. no adding your site name to the
site list. [Small exception: a "small" toolbar with no banners
embedded is okay. See IGN or Neoseeker for examples.]
3)No charge other than "reasonable" compensation should charged
for its distribution. Free is preferred, of course. Sale of
this information is expressly prohibited. If you see any one
selling this guide, contact me (see below).
4)If you used material from this, PLEASE ACKNOWLEDGE the source,
else it is plagiarism.
5)The author hereby grants all games-related website the right
to archive and link to this document to share among the game
fandom, provided that all above restrictions are followed.
Sidenote: The above conditions are known as a statutory contract.
If you meet them, then you are entitled to the rights I give you
in 5), i.e. archive and display this document on your website. If
you don't follow them, then you did not meet the statutory
contract conditions, and therefore you have no right to display
this document. If you do so, then you are infringing upon my
copyright. This section was added for any website that don't seem
to understand this.
For the gamers: You are under NO obligation to send me ANY
compensation. However, I do ask for a VOLUNTARY contribution of
one (1) US Dollar if you live in the United States, and if you
believe this guide helped your game. If you choose to do so,
please make your US$1.00 check or $1.00 worth of US stamps to
"Kuo-Sheng Chang", and send it to "2220 Turk Blvd. #6, San
Francisco, CA 94118 USA".
If you don't live in the US, please send me some local stamps. I
collect stamps too.
1.3 VOLUNTARY CONTRIBUTION
Gamers who read this guide are under NO obligation to send me ANY
compensation.
However, a VOLUNTARY contribution of one (1) US Dollar would be
very appreciated.
If you choose to do so, please make your US$1.00 check or $1.00
worth of stamps to "Kuo-Sheng Chang", and send it to "2220 Turk
Blvd. #6, San Francisco, CA 94118 USA".
If you don't live in the US, please send me some local stamps. I
collect stamps too.
For the record, out of ALL the FAQs I wrote (over 60 at last
count) over the past ten years or so, I've received exactly 35
dollars and 8 sets of stamps, as of release of this guide. So I'm
NOT making any money off these guides, folks.
1.4 HOW AND WHEN TO CONTACT ME
PLEASE let me know if there's a confusing or missing remark,
mistakes, and thereof... If you find a question about this game
that is not covered in the USG, e-mail it to me at the address
specified below. I'll try to answer it and include it in the
next update.
Please do NOT write me for technical support. That is the
publisher's job. You can find them at
http://www.exosyphenstudios.com
Please do NOT ask me to answer questions that have already
answered in this FAQ/guide. It makes you look REALLY idiotic.
I will NOT answer stupid questions like the ones above unless I'm
in a really good mood. If you send questions like that, do NOT
expect a reply.
The address below is spelled out phonetically so spammers can't
use spambots on it:
Kilo-Sierra-Charlie-Hotel-Alpha-November-Golf-Seven-Seven AT
Yankee-Alpha-Hotel-Oscar-Oscar DOT Charlie-Oscar-Mike
To decipher this, simply read the first letter off each word
except for the numbers and the punctuation. This is "military
phonetics" or "aeronautical phonetics" in case you're wondering.
This document was produced on Microsoft Word 2003. Some editing
was done with Editpad (editpadclassic.com).
1.5 THE AUTHOR
I am just a game player who decided to write my own FAQs when the
ones I find don't cover what I want to see. Lots of people like
what I did, so I kept doing it.
Previously, I've written Unofficial Strategy Guides (USGs) for
XCOM, XCOM2:TFTD, Wing Commander, Wing Commander 2, Wing
Commander 3, Wing Commander 4, Privateer, Spycraft, 688(I)
Hunter/Killer. Mechwarrior 3, MW3 Expansion Pack, Mechwarrior 4,
Mechwarrior 4: Black Knight, Need for Speed: Porsche Unleashed,
The Sting!, Terranova, Fallout Tactics, Starfleet Command Volume
II, DS9: The Fallen, DS9: Dominion War, Driver, Warlords:
Battlecry, Monopoly Tycoon, Dungeon Siege, and a few others.
To contact me, see 1.4 above.
1.6 DISCLAIMER / COPYRIGHT INFORMATION
Exosyphen is the creator and publisher of Hacker Evolution.
http://www.exosyphenstudios.com
This USG is not endorsed or authorized by exosyphen.
The information compiled in this USG has been gathered
independently through the author's efforts except where noted
otherwise.
This document is based on the V1.0.0.1 release. Please note that
new releases are available all the time and may add new features,
commands, and so on. New "levels" may also become available. This
guide covers the "initial release", which contains total of 10
levels.
1.7 HISTORY
23-MAY-2007 Initial release
2 Hacker Evolution General Info
2.1 THE MOST FREQUENTLY ASKED QUESTIONS
Q: Can you send me the game (or portions thereof)?
A: No. Download the Demo from http://www.exosyphenstudios.com or
http://www.exosyphen.com
Q: Can you send me the manual? (or portions thereof)
A: It's available on the website.
Q: Can you tell me how to play the game?
A: Read the manual please, and hit F1 for help.
Q: How big is the install?
A: About 87 megs total
Q: Is there a patch?
A: Use the auto-update tool. As of this release, it's V1.00.0084
Q: What about some cheat codes?
A: Check the last section
2.2 HACKER EVOLUTION HISTORY
Exosyphen is a game studio based on Romania that specialized in
"hacking sims", basically puzzles that simulates hacking into
other computers in order to accomplish several objectives.
2.3 HARDWARE REQUIREMENTS
From official website:
* Windows ME/XP/2000/2003 or Vista
* Microsoft DirectX 8.0 (http://www.microsoft.com/directx/)
installed
* Pentiumr 1 GHz processor or faster, 512Mb RAM, 200Mb free
disk space
* DirectX 8.0 compatible videocard w/ 16 MB video memory
* Microsoft compatible keyboard and mouse
2.4 HOW DOES THIS GAME PLAY?
It's basically a puzzle game wrapped in a "shell" of simulated
hacking. The console involves typing, but you can use the TAB
key to auto-complete many commands and parameters.
2.5 BUGS AND FIXES
The game is very stable and never crashed even once on my test
computer.
You should get the latest patch via the auto-update tool, and
close any extra programs such as virus checker, firewall (unless
you're going online), and such before starting the game. That
seems to help.
2.6 EXPANSION PACKS? SEQUELS? RELATED TITLES?
Exosyphen have many expansion packs planned, many will free to
registered users. However, none has been released at this time.
2.7 SOME COMMON SUPPORT ISSUES
None at this time.
There are some reported incompatibilities with WinVista, but none
has yet been confirmed.
3 Interface
3.1 PLAY SCREEN
Upper right is a "control panel" with the "mission clock", as
well as diagram of your computer, progress of a certain task such
as decrypt, crack, or download / upload. It also shows predicted
trace time, if any, and how many bounces are you using.
Lower right is the message pane, where "e-mails" and other
messages will appear.
Upper left is the main view window, which shows you all the
servers visible so far (which is probably NOT all of them) and
your current bounce configuration, if any. Click on a host to
toggle bounce on-off.
Lower left is the console, where you can type in commands to
execute various hacks, upgrade your PC, and so on. Please type in
HELP or hit F1 to see the help screen.
3.2 CONSOLE COMMANDS
Please check the downloadable manual from exosyphen.com for full
documentation. This is a quick summary only
Help displays help screen
Scan checks if host is active. If yes, displays stats
about the host
Connect connects to the host specified, default port is 80,
or specify other ports
Logout closes the connection
Ls also "dir", shows what's on the server at this port
Cat displays the file on the console, even binary stuff.
Download downloads file to your local server. Must have
enough space
Upload uploads file from your localhost to connected server
Exec used to run a program, usually exploit,
Clear clear the console screen
Decrypt break the encryption of the server, depends on CPU
speed
Crack break the password of the server service, depends
on CPU speed
Transfer transfers $$$ to your computer. Server must be fully
hacked (every port) as well as decrypted to give money
Abort use abort to stop transfer, upload, download, decrypt,
or crack attempts, usually before the trace completes
Config displays your computer config and affected "factors"
Upgrade displays upgrade info. Add one of the part codes to
actually perform the upgrade
Delete delete the file on the current machine (localhost
if you're not logged into anyone)
NOTE: 1.00.0084 adds a few commands, namely DOWNGRADE, BOUNCE and
UNBOUNCE. You may wish to consult the README file for that
version. They are not necessary to finish, but they sure add a
certain flavor to it.
3.3 GENERAL GAMEPLAY FAQS
Q: How do you save a game?
A: You don't. Game is automatically saved. Each level should last
no more than 1 hour, usually 20 minutes or so.
Q: I think I did something really wrong. How do I restart a level?
A: Hit ESC and quit out of the current level. Load your profile
again and it'll restart at the current "level".
4 Hints and Game Mechanics
4.1 GENERAL HINTS
* As a "hacker" you must learn to look for EVERY last bit of
information, in the most unlikely places.
* Every host is valuable. So acquiring hosts to break and serve
as bounce points is of the utmost importance.
* Many hosts also have $$$, which are required for killtrace runs
and equipment improvements.
* Browsing files not only can locate you more host names, it can
also reveal passwords, (or hints to some passwords), even
instructions on how to use certain exploits, commands, and bin
files. Thus CAT every file you come across, encrypted or not,
binary or not. In the files lie the clues, be it passwords or
host names.
* Most servers will give you a line or two of text, sometimes a
full screen, when you login. That often tells you about other
hosts.
* e-mail address contains a domain name, don't forget this!
* Dot-hackers.net is a good place to find exploits... if you can
get in.
* You want to minimize the number of "crack" attempts, as those
raise your trace level by 15% each run. So every 2 crack attempts
you run, you need to run killtrace 3 times. Use exploits or any
other method before using a crack.
* Study what's protecting what, then consider the attack-plan. Go
through the weak spots. Use the minimum amount of bounce(s)
needed for enough time.
* Spread out your bounce attempts among multiple bounce hosts
whenever possible. If you use one up you can't do a "double
bounce" later.
* Do NOT crack servers and services that you do NOT need. Money
is a FINITE asset in this game.
* Do NOT over-upgrade your hardware. That money may be needed to
run killtrace before end of mission.
* If you see a mission objective that says to reduce trace level
below a percentage, save your $$$. You can always upgrade at the
beginning of next mission.
* RESET LEVEL: If you ever gotten into a situation where you are
at a DEAD END, there's no money to be had, but you need to reduce
your trace level, or your level's so high you can't do anything,
clearly something went wrong. It's time to "reset" the level and
start over. Hit ESC and quit the level, then load your profile
again. There are exceptions: a) use a cheat code, or b) use the
V.084's "downgrade" commands to sell off some hardware and raise
some capital
4.2 FINISHING HARDWARE
I finished the game without the V0.84 update, so it is quite
possible. Here's the equipment I finished level 9 with:
* 2 x 2 GHz CPU
* 3 GB of RAM
* standard 1 MBit modem
* Level 1 firewall
Thus, again, do NOT spend too much money on upgrades.
4.3 HARDWARE TECHNICAL DATA
Every GHz of CPU will reduce the amount time needed for
decryption or password cracking. Two separate 2 GHz CPU is same
as a single 4 GHz CPU for this purpose. We'll just call it 4 GHz
of CPU power. 4 GHz of CPU power will do things 4 times faster
than 1 GHz of CPU Power.
RAM is needed to store things. It does not affect speed. There
are some files in the higher levels levels that need 3 GB of QRAM
to store. You'll know when you see it.
Firewall multiplies the trace time by a set factor. I think level
1 multiplies it by 1.5, and level 2 multiplies it by 2.0, though
it could be 2.0 and 3.0 respectively. So essentially it gives you
more time to complete your crack or decryptions, and transfers.
Use the CONFIG command to see your current "hardware
multipliers".
NOTE: V84 or later of H-Evo have a "downgrade" command that
allows you to trade-in older CPU and RAM and such for 90% value
back. It is not really needed, but it is very much appreciated as
it allows you to recover from a "dead-end" situation.
4.4 TRACE TIME
Trace time is calculated by number of bounces and firewall
levels. Base time is about 14 seconds (no firewall). Additional
bounces will gain you extra 14 seconds or so per bounce. Multiply
that by the firewall factor, and you get the overall trace time.
(Estimated, not real formula)
4.5 TRACE LEVEL
Trace level is a set value that depends on your actions.
* Successful crack 15%
* Successful decrypt 5%
* Scan host that doesn't exist 1%
* Exec exploit 1%
* You have been traced 50%
If your trace level reaches 100% you lose the level and must
start over.
It costs $500 to reduce your trace level by 10% by the KILLTRACE
command.
Thus, you should NEVER allow yourself to be traced. Abort out of
traceable processes if you see that it's NOT going to finish in
time. You may waste the bounce count, but it's better than
getting traced and lose the entire level soon after.
Watch time limits carefully. Even if your process finishes just
0.2 seconds before the trace, you are still safe.
4.6 SCORING
Score is computed by following:
* # of passwords cracked
* # of servers decrypted
* # of servers taken over (i.e. full access)
* Amount of money transferred
* Time left on clock (bonus amount of 300 decreases at 10 pts
per minute) EX: If you finished at 20 minutes, your bonus is 100
pts (300 - 20*10 = 100)
* Bonus conditions, including 0% trace level (extra 500 pts),
found all hosts (extra 500 pts), dynamic difficulty, and more.
5 Level Hints
5.1 TUTORIAL
Please just follow the on-screen instructions.
Remember to grab ALL the money you can, not just that $1000 as
required.
However, there is a way to get maximum amount of money, and that
means you can't follow the instructions step by step, but
instead, finish the objectives a bit OUT of order.
Q: What do you mean by "out of order?"
A: Do the 2nd objective first. Host name is already given. Use
that host to crack the first one w/o getting traced.
5.2 LEVEL 1: THE BEGINNING
Please follow the walkthrough in the manual, which can be
downloaded from http://www.exosyphen.com
Q: Where are the other hosts? How do I find them?
A: Host names can be hidden in the most innocuous places: inside
files (even binary files), in the login / welcome prompts, on the
homepage, and so on and so forth.
Q: Can you be more specific?
A: Explore the unprotected ports, surf around, and look for
domain names. Once you found a few, see that they lead you.
Q: So what do I do with the connection.log file?
A: Read it, then upload it to the FSA server. Follow the e-mail's
instructions!
5.3 LEVEL 2: XENTI SPACE STATION
Q: What is a trojan?
A: A trojan, in the computer world, is a program that looks
innocent and harmless, but actually does bad things behind the
scenes.
Q: I can't crack / decrypt fast enough! Help?
A: Time for a hardware upgrade, I guess. Or use more bounces.
Q: Should I accept the trade offer from dot-hackers.net?
A: Absolutely. You can use the money, always.
Q: But which terminal hacked us?
A: Read connection.log very carefully, check each and every host.
How do you know if one exists, or not?
Q: How do you get rid of the trojan?
A: Just "DEL" it.
5.4 LEVEL 3: CHECKPOINT
Q: What does the first objective really mean?
A: "Scan sec.interlink.net", then you should understand.
Q: Now what?
A: Do you accept the offer from dot-hackers.net?
Q: Let's say that I do?
A: You miss out on some money, but you get a shortcut to the
source.
Q: And if I don't?
A: You'll need to crack a host to get more clues, but you arrive
at the same spot, albeit via longer route, and a wee bit more
money.
Q: I got the machine used to crack. Now what?
A: CAT everything, you should find the bank statement and thus
the account number.
Q: How do I stop the trojan and restore connectivity?
A: You did try to CAT the .BIN files, right? It tells you so in
one of them.
5.5 LEVEL 4: NOTHING IS RANDOM
Q: How do I crack that atm? I can't crack that 8-char password
w/o getting traced!
A: Instead of attacking the link, why not attack the atm
directly?
Q: I found the transaction.log, but I can't download it! I don't
have enough space!
A: Time to upgrade your hardware! (Or delete some stuff on
localhost)
Q: So where is this account transaction server?
A: Perhaps the objective is a bit too literal. Example: if
account is ab12345, then server is ab12345.bank.com
Q: So how do I get rid of this trojan?
A: Delete the file. That's it, really.
Q: Where is that extra host on this level?
A: Log into the bank server and look around carefully. You may
notice something.
5.6 LEVEL 5: RUNDOWN
Q: Uh. which firewall should I start with?
A: The one with the lowest payoff, probably. It's likely the
easiest to crack.
Q: Argh! I can't even crack that one! Help!
A: Maybe it's time for another CPU upgrade.
Q: Help! I ran out of bounce hosts!
A: *Sigh* start the level over. Spread out the bounce uses so you
always have two hosts remaining in case you need a double-bounce.
Q: Where is the serverfreeze.code?
A: It's in a firewall server.
Q: But I checked all four of them! What are you talking about?
A: Perhaps you should read the welcome prompts again, this time
VERY carefully.
Q: I still don't get it. There are MORE than four firewall
servers?
A: There are actually 5.
Q: Where's the backup server?
A: Read some code and you'll find it.
Q: What code?
A: That code you're supposed to delete.
Q: But I deleted it already! Help?
A: Too bad. Restart the level!
Q: Where can I find more money?
A: In the "other" firewall server. The "other" way to find it is
by reading some code.
5.7 LEVEL 6: THE CHASE
Q: I found the wi-fi node he used. Where is he now?
A: Perhaps, you should check for travel arrangements.
Q: I found the airline, but they don't seem to have wi-fi. Now
what?
A: Appearances *can* be deceiving.
Q: How do I cancel the flight reservation?
A: Read the INFO file.
Q: I found his IP address. Now what?
A: Scan it.
Q: But there's nothing there!
A: Are you at the CORRECT wifi node?
Q: His file is too big! How do I download it?
A: Upgrade your RAM to 3 GB
Q: What is the monitor trojan?
A: It's that monitor.bin you've used before.
Q: Where can I find monitor.bin?
A: There are at least TWO hosts that have it.
5.8 LEVEL 7: D‚J… VU
Q: Where is dot-hackers.net?
A: Look at that e-mail you got.
Q: Where can I get some money?
A: See previous hint.
Q: Why doesn't the x-filemanager.exploit work?
A: You got the wrong version of it. CAT it. Look for another
one.
Q: I checked auth.nphone.com and it leads me nowhere. Help?
A: You forgot to check the files in that place you were at.
5.9 LEVEL 8: THE MAZE
Q: Uh, where do I start?
A: At the email from "John Davis"
Q: I don't get it. Please explain?
A: E-mail has a domain name too.
Q: I got that. Now what?
A: Let's just say it must start at the leftmost side, and is the
easiest to hack. The other hint is. you should have started
YESTERDAY, as the e-mail says!
Q: Huh? What about yesterday?
A: Today is the December 29th, in the game. So yesterday is __
Q: Got that, but I don't understand the first hint.
A: Download the hint, and you'll see.
Q: You mean the constant?
A: Yes, the constant is the hint.
Q: Same at the next hint?
A: Yes, the constant is the hint.
Q: Next is largest and smallest. Is it that simple?
A: Yes, it really IS that simple.
Q: I don't get the assembly language hint. Help?
A: Just take a piece of paper, make 2 columns. A, and B. And try
to follow the instructions, and do it.
Q: Is the last hint as easy as I thought it was?
A: Yes it is.
Q: Ack! I made a wrong turn and hacked the wrong server! What do
I do now?
A: Reset the level. There's very little extra money and you must
make the right decision every step of the way.
5.10 LEVEL 9: END
Q: Uh, where do I start?
A: Same as last level. with the e-mail.
Q: But, there's nothing really there.
A: Look again, VERY carefully. VERY similar name.
Q: Okay found it. Where are the firewalls?
A: Look CLOSER at the second one.
Q: Got that. Where's the AI core server though?
A: You didn't pay attention, did you? Check each firewall again.
Q: What order should I assemble the strings for the password?
A: What order did you see the stuff listed?
Q: I tried that order and it doesn't work! Help?
A: Reverse the hierachy
6 Level Walkthrus
6.1 TUTORIAL
6.1.1 Full objectives list
NOTE: Objectives need NOT be completed in order given.
1) Hack into the [core.hacker-evolution.com] server. The server
has one open port(80) on which you must gain access. (Tip : use
the CRACK command)
2) Obtain $1000 in your money balance. Money can be obtained, by
transferring it from hosts that have a positive money balance.
3) Download the connection configuration file from [atm.hacker-
evolution.com]
4) Hack into the [hacker-evolution.com] server ftp service. Note
: Follow the instructions on how to do this with an exploit,
rather then cracking it.
5) Hack into the [ssl.hacker-evolution.com] server. The server
has one open port(80) on which you must gain access. (Tip : use a
bounced link, to avoid getting traced.)
6) Hack into the [user.hacker-evolution.com] server. The server
has one open port(80) on which you must gain access. (Tip : you
must find the password and use the LOGIN command.)
7) Reduce your trace level below 50%. You can achieve this by
using the KILLTRACE command.
6.1.2 General Strategy
You don't need one for the TUTORIAL level, do you?
Keep in mind that if you follow the instructions to the letter,
you WILL be traced. This spikes your "global trace level" by 50%.
When it reaches 100%, you are "caught" and it's game over. This
is supposed to teach you that it's NOT always "game over" if you
got traced.
If you rather NOT get traced, then follow walkthrough, which will
give you max money and minimum trace levels.
6.1.3 Walkthru
You don't need one for the TUTORIAL level, do you? However, to
get the most money and least trace amount, you'll need to do
something slightly different from the script.
From now on, the main commands are listed first, followed by ##
for comments. Example
type these in up to the ## do not type these, as these are just
explanations
The only exceptions are the BOUNCE commands. Not all versions
support console bounce commands, so please grab your mouse and
select the bounce servers on the map if your version does NOT.
Unbounce all means remove all bounce points.
Scan atm.hacker-evolution.com ## this is NOT cheating since
## the hostname was given as an objective
Decrypt atm.hacker-evolution.com
Connect atm.hacker-evolution.com
Transfer 1000 ## Objective 2 complete
## NOTE: Repeat transfer money until you get ALL the money
Ls ## check which files are here
Download connect.config ## Objective 3 complete
Logout
Bounce 1 ## add any valid bounce so you have 1 bounce
##(right now, just atm.hacker-evolution.com)
Crack core.hacker-evolution.com ## now you can crack
## the server w/o traced
Unbounce all
Connect core.hacker-evolution.com ## objective 1 complete
Ls
Download heftpd.exploit ## any exploit is worth downloading
Cat autoexec ## nothing important
Cat passwd ## remember this password, pass945
Scan user.hacker-evolution.com
Exec heftpd.exploit hacker-evolution.com ## objective 4
Logout
Login user.hacker-evolution.com pass945 ## objective 6
Bounce 2 ## add any 2 hosts for bounce
Crack ssl.hacker-evolution.com ## objective 5
Killtrace ## repeat as needed to complete objective 7
6.1.4 Full server list
core.hacker-evolution.com
atm.hacker-evolution.com
hacker-evolution.com
ssl.hacker-evolution.com
user.hacker-evolution.com
6.2 LEVEL 1: THE BEGINNING
Please follow the walkthrough in the manual.
6.2.1 Full Objectives List
1) Retrieve the connection log file from the New York Exchange
server, in order to be able to identify the source of the attack.
2) Identify the server used to remotely connect to the New York
Exchange server. You can do this by investigating the
[connection.log] file
3) Upload a copy of the [connection.log] file to the FSA
fileserver.
4) Retrieve the users log file from the server that was used to
remotely connect to the New York Exchange server.
5) After identifying the user from the log file from above,
download his/her profile file from xenti.com, and upload a copy
to the FSA fileserver.
6.2.2 General Strategy
We will investigate the ny-exchange.com server a bit, to locate
any clues to external servers. Once we located some more hosts,
we can use those as bounce hosts to crack ny-exchange and get
inside.
You may want to buy Firewall level 1 before you embark on actual
hacking. It slows down traces.
6.2.3 Walkthru
connect ny-exchange ## let's see what's there now.
## notice there's a "designed by xenti-design,com" sig?
ls ## notice the index.new?
cat index.new ## notice the bottom, that says
## "defaced by dot-hackers.net"?
logout
scan xenti-design.com ## on the map, and unprotected!
connect xenti-design.com ## that will "take it over",
##so to
Logout
Scan dot-hackers.net ## they're now on the map!
decrypt dot-hackers.net
crack dot-hackers.net
connect dot-hackers.net
ls ## let's see what they have.
download x-filemanager.exploit ## very useful, as
##ny-exchange.com runs x-filemanager!
transfer 2000 ## transfer enough NOT to trigger the
## full trace, repeat until you get all the money
logout
exec x-filemanager.exploit ny-exchange.com ## that breaks
the other service on server
connect ny-exchange.com 99
download connection.log ## objective 1 complete!
logout
connect files.fsa.gov 81
upload connection.log ## objective 3 complete
logout
cat connection.log ## read it, and scan the various
terminal names. Only one exists. terminal-83
scan terminal-83.xenti.com ## objective 2 complete!
bounce 1 ## add hosts so you have 2 valid bounces
decrypt terminal-83.xenti.com ## terminal-83 has hefty
encryption and you need two bounces to prevent getting
traced.
unbounce all
crack terminal-83.xenti.com ## leave a bounce point if your
CPU can't handle it
del connection.log ## we don't need the local copy any more,
and we need the space
connect terminal-83.xenti.com
download users.log ## objective 4 complete
logout
cat user.log ## if you study the timing of the attack vs.
the users.log, tjohn is the culprit.
bounce 2 ## any two bounces
decrypt xenti.com ## again, big encryption needs two
bounces at least
unbounce all
bounce 1 ## just 1 bounce needed to crack password
crack xenti.com 210 ## leave one bounce to crack the
password
unbounce all
connect xenti.com 210
download tjohn.profile
logout
killtrace ## repeat until satisfied
connect files.fsa.gov 81
upload tjohn.profile
killtrace ## repeat until you use it all up or reach 0%,
whichever you prefer
6.2.4 Full Server List
ny-exchange.com
dot-hackers.net
xenti-design.com
terminal-83.xenti.com
files.fsa.gov
xenti.com
6.3 LEVEL 2: XENTI SPACE STATION
Control Center to all satellites and space station was lost. Must
restore connection and find culprit.
6.3.1 Objectives
1) Retrieve the connection log file from the Xenti Corporation
Control Center, in order to be able to identify the source of the
attack.
2) Find the trojan that has been injected in the kernel services,
on the Xenti Corporation Control Center, and delete it.
3) Go back to xenti.com. There should be a log file to show who
made the last changes there. Retrieve a copy of that logfile and
upload it to our server (files.fsa.gov)
4) Identify the server used to connect to xenti.com, to create
the new employee profile.
6.3.2 General Strategy
Control center itself is protected. We need to find many outside
hosts for bounce and such before starting our actual attack.
6.3.3 Walkthru
## There may be sections that I forgot to include a bounce.
By now you should be able to tell if
## a task needs a bounce, or not. You be the judge. It can
probably be done with lower CPU by
## bouncing more often, but I prefer to use a faster CPU
instead.
Scan dot-hackers.net ## check on our old friends
Upgrade cpu0 ## let's add a 1GHz CPU to help us crack
passwords faster
Crack dot-hackers.net ## they always store the exploits
in the port 80 server
Connect dot-hackers.net
Ls
Download x-filemanager.exploit
Logout
Decrypt xenti.com ## nothing else to do, may as well start
on xenti.com
Crack xenti.com 210
Killtrace ## repeat until comfortable with the level
Connect xenti.com 210
Ls
Cat history.log
Download history.log
Logout
Connect files.fsa.gov 81
Upload history.log
Logout ## objective 3 is complete
Exec x-filemanager.exploit control-center.xenti.com
## let's see where this leads.
Connect control-center.xenti.com 99
Ls
Download connection.log
Cat connection.log ## should have gotten the offer from dot-
hackers.net
Logout ## objective 1 is also done
Connect dot-hackers.net 99
Upload connection.log
Logout ## got the host atm.ce-bank.com
Scan atm.ce-bank.com
Decrypt atm.ce-bank.com
Crack atm.ce-bank.com
Connect atm.ce-bank.com
Ls ## always LS a server and CAT all the files. Nothing
interesting in this one, but you'd never know!
Transfer 2300 ## with a level 1 firewall, it takes 24
seconds to complete a trace, so you can transfer 2300 and have 1
second to spare.
Logout ## repeat transfer until done
Killtrace ## spend a bit of that money, repeat until
satisfied
Cat connection.log ## study this very carefully. SCAN each
of the terminals available.
Scan terminal-83.xenti.com ## we know this one is there.
Scan terminal-84.xenti.com ## aha! Objective 4 complete
Crack control-center.xenti.com 200
Connect control-center.xenti.com 200
Ls
Delete tj.bin ## the only file here, nothing interesting in
it either if you CAT it
Logout ## as you delete it, you've completed objective 2!
Killtrace ## repeat as needed to end the level, or just wait
6.3.4 Full Server List
control-center.xenti.com
dot-hackers.net
atm.ce-bank.com
terminal-83.xenti.com
terminal-84.xenti.com
xenti.com
files.fsa.gov
6.3.5 Bonus items
If you had hacked into the dot-hackers.net email port, and
checked their email, you'll find that perhaps who you thought was
working for the FSA, is not who you think it is.
6.4 LEVEL 3: CHECKPOINT
You have reasons to suspect that perhaps this John Davis at the
FSA was not who says he is. Are there clues out there?
6.4.1 Objectives
1) Retrieve the connection log file from the Interlink server,
(Note : cracking won't work. Try to get the password from their
secure authorization server)
2) Find the bank account number of John Davis. (Contained in a
bank document). (Note : There is an easy way, and a more
difficult and rewarding way as well.) [Download the statement!]
3) Retrieve a copy of the kernel monitoring program used by John
Davis
4) Reestablish the links on the interlink server (step 1 of the
objective)
5) Reestablish the links on the interlink server (step 2 of the
objective)
6.4.2 General Strategy
All depends on interlink.com. Once we break that, the rest will
fall in easily enough.
The trick here is to use the bare minimal way to locate what
needs to be done. Though there are alternate ways available.
There may be sections that I forgot to include a bounce. By now
you should be able to tell if a task needs a bounce, or not. You
be the judge. It can probably be done with lower CPU by bouncing
more often, but I prefer to use a faster CPU instead.
6.4.3 Walkthru (the easy way)
NOTE: If you do it this way, you will miss one of the servers
available. However, it is faster and has less hassles.
Scan interlink.net
Scan sec.interlink.net
Scan dot-hackers.net
Decrypt sec.interlink.net
Crack sec.interlink.net 55
Connect sec.interlink.net 55
Ls
Cat passwd ## aha, password!
Transfer 1500
Transfer 1500
Logout
Login interlink.net twde3546mfrg
Decrypt interlink.net
Connect interlink.net 150
Ls
Cat connection.log ## hmmm. terminal-83 again!
Download connection.log ## that's objective 1!
Scan terminal-83.xenti.com
Logout
Killtrace ## repeat as needed
Connect dot-hackers.net 99
Upload connection.log
Scan xterm.xenti.com
Logout
Crack dot-hackers.net
Connect dot-hackers.net
Ls
Download x-filemanager.exploit
Logout
Ls
Del connection.log ## we need the space
Decrypt xterm.xenti.com
Crack xterm.xenti.com 23
Connect xterm.xenti.com 23
Ls
Cat activity.log
Cat e-recript.doc ## hmmm. that's an account number!
Cat host.id
Download e-receipt.doc ## that's objective 2!
Logout
Crack xterm.xenti.com 151
Connect xterm.xenti.com 151
Transfer 2000
Upgrade mem0 ## we can use the extra capacity now for more
stuff
Ls
Cat monitor.bin
Download monitor.bin ## objective 3!
Cat xconmanager.bin ## aha! So to restore, just delete this
and put in the other file, eh?
Cat conmanager.bin
Download conmanager.bin ## we need this to restore function
Logout
Crack interlink.net 152
Connect interlink.net 152
Ls ## as expected, xconmanager.bin is here!
Del xconmanager.bin ## objective 4!
Upload conmanager.bin ## objective 5!
Killtrace ## repeat until mission ends
6.4.4 Walkthru (the rewarding way)
Scan interlink.net ## note the 2nd port open
Scan sec.interlink.net
Decrypt sec.interlink.net
Crack sec.interlink.net 55
Connect sec.interlink.net 55
Ls
Cat passwd ## aha, password!
Transfer 1500
Transfer 1500
Logout
Login interlink.net twde3546mfrg
Decrypt interlink.net
Connect interlink.net 150
Ls
Cat connection.log # hmmm. terminal-83 again!
Download connection.log ## get notice from dot-hackers.net,
still around!
Scan dot-hackers.net ## just to check on an old
friend
Scan terminal-83.xenti.com ## that's in the log
Logout
Killtrace ## repeat as needed
Connect dot-hackers.net 99 ## consider NOT do it, it's up
to you.
Upload connection.log ## when it's done, you get
xterm.xenti.com back
Scan xterm.xenti.com
Logout
Crack dot-hackers.net
Connect dot-hackers.net
Ls
Download x-filemanager.exploit
Logout
Ls
Del connection.log ## we need the space
## note, this is where the path diverges. We don't need the
stuff in the xterm.xenti.com to proceed
Decrypt terminal-83.xenti.com
Crack terminal-83.xenti.com
Connect terminal-83.xenti.com
Ls
Cat users.log
Cat remote.log ## new host found!
Scan ns1.sdb.com
Logout
Decrypt ns1.sdb.com
Crack ns1.sdb.com 79
Connect ns1.sdb.com 79
Ls
Cat incoming.log ## hmmm. xterm.xenti.com
Transfer 2200 ## repeat until you drain the money!
Killtrace ## repeat until you're satisfied!
Logout
Scan xterm.xenti.com
Decrypt xterm.xenti.com
crack xterm.xenti.com 23
connect xterm.xenti.com 23
ls
cat activity.log ## wow, access from here, and the
destination is crippled. There's a bank too. Why?
Cat e-receipt.doc ## the account number!
Download e-receipt.doc
Cat host.id ## nothing here
Logout
Crack xterm.xenti.com 151
Connect xterm.xenti.com 151
Transfer 2000
Upgrade mem0 ## we can use the extra capacity now for more
stuff
Ls
Cat monitor.bin
Download monitor.bin ## objective 3!
Cat xconmanager.bin ## aha! So to restore, just delete this
and put in the other file, eh?
Cat conmanager.bin
Download conmanager.bin ## we need this to restore function
Logout
Crack interlink.net 152
Connect interlink.net 152
Ls ## as expected, xconmanager.bin is here!
Del xconmanager.bin ## objective 4!
Upload conmanager.bin ## objective 5!
Killtrace ## repeat until mission ends
6.4.5 Server List
interlink.net
sec.interlink.net
terminal-83.xenti.com
dot-hackers.net
xterm.xenti.com
ns1.sdb.com
6.5 LEVEL 4: NOTHING IS RANDOM
Latest server to crash is Central Bank of Asia. Investigate the
crash. It's all related, but how?
6.5.1 Objectives
1) Retrieve the connection log file from the Central Bank of Asia
server.
2) Retrieve the transaction log file from the Central Bank of
Asia server.
NOTE: There are two ways to gets this, and the way suggested in
the Objectives is NOT the best way!
3) Use the corresponding account number to identify the bank
account interface server from a suspicious transaction. The
server name format is : [ACCOUNT].bank.com EX: if account is
ab12345, then server is ab12345.bank.com
4) Find the trojan that has been injected in the kernel services,
on the Central Bank of Asia, and delete it.
6.5.2 General Strategy
First we shall check what connections are available from cb-
asia.com itself, then we'll explore some old friends and see
where they lead, and then see if their paths cross.
I recommend CPU upgrade now, if you didn't get one in level 3.
There are two ways to get the transaction log. 1) If you got the
connection log, and upload it to dot-hackers.net, you'll get a
hit about hacking into the hash server and download the hash,
which contains pieces of the password into the transaction
server, which would contain the transaction log. 2) Or you can
just grab the transaction_server.exploit from dot-hackers.net
(you'll need to crack their port 80 first) and use that on the
transaction server. I prefer the latter, as it also leads you to
the black-haxors.com sidequest, though you're welcome to use
whichever you find convenient.
6.5.3 Walkthru
## There may be sections that I forgot to include a bounce.
By now you should be able to tell if
## a task needs a bounce, or not. You be the judge. It can
probably be done with lower CPU by
## bouncing more often, but I prefer to use a faster CPU
instead.
Scan cb-asia.com ## notice one of the entries is a link
to atm? That's $$$
Scan atm.au-bank.com.au
Decrypt atm.au-bank.com.au
Crack atm.au-bank.com.au
Connect atm.au-bank.com.au
Transfer 2000
Transfer 2000
Logout ## you should have plenty of money now, so
let's spend a little
Upgrade cpu0 ## 2 GHz of CPU will help us crack passwords
and decrypt things faster
Scan dot-hackers.net ## our friends are still around
Crack dot-hackers.net ## our faster CPU now comes in
handy
Connect dot-hackers.net ## let's see what they got.
Ls
Cat news.txt ## free money at the other place, who can
resist?
Scan black-haxors.com ## now they're on the map, worry
about them later
Download x-filemanager.exploit ## every exploit is
needed somewhere
Download transaction-manager.exploit
Logout
Decrypt black-haxors.com
Crack black-haxors.com ## this cracks the port 80, 1 more
to go
Exec x-filemanager.exploit black-haxors.com
Connect black-haxors.com
Transfer 2000
Logout
Killtrace ## repeat as necessary to reduce trace level to
reasonable levels
Decrypt cb-asia.com ## back to target
Scan cb-asia.com ## didn't we see transaction-manager
somewhere before? Aha!
Exec transaction-manager.exploit cb-asia.com
Connect cb-asia.com 100
Ls ## there's the log file, but it's HUGE!
Upgrade mem0 ## don't overupgrade, we may need the $$$
later this level
Download transaction.log ## completes objective 2
Logout ## you'll get an e-mail message
Connect dot-hackers.net 99
Upload transaction.log ## may as well see what they have
to say about it
Logout ## got another message, let's login and read
their analysis
Login dot-hackers.net tsdf2324nfdf3233
Cat report.doc ## interesting analysis. No need to
download it though.
Logout
Crack cb-asia.com ## default is port 80
Connect cb-asia.com ## note that they have a "contact us"
address of ns.cb-asia.com as well
Ls ## and there's objective 1!
Download connection.log ## objective 1 complete!
Cat connection.log ## spot any new hosts? Dot-hackers want
a copy too
Scan ns.cb-asia.com
Scan terminal-83.xenti.com ## note that you do NOT have
to crack this host
Logout
Connect dot-hackers.net 99
Upload connection.log
Logout ## you should get the instructions on how to
get the password from hacking the hash port
## but we already have the transaction log, so no need to
hack the hash server at all.
Cat transaction.log ## look at the huge amount of one
transaction. check if that account server exists.
Scan ch548755.bank.com # objective 3 complete!
Decrypt ns.cb-asia.com ## let's get some more $$$, but
this is technically optional
Crack ns.cb-asia.com
Ls
Transfer 2000
Transfer 2000
Logout ## one last item remains.
Crack cb-asia.com 200 ## we need to get into
kernel_services
Connect cb-asia.com 200
Ls ## only one file there, tj.bin, which makes sense,
according to connection.log
Del tj.bin ## objective 4 complete!
Killtrace ## repeat as necessary
6.5.4 Alternate Walkthru
Once you've retrieved the connection.log and uploaded it to
dot-hackers.net, you will get e-mail hint about how to
retrieve the password from the hash server.
I personally find it better to crack dot-hackers.net,
retrieve their exploits, and use them on whatever servers I
find convenient, thus avoiding the need for the hash server
at all. However, should you choose NOT to crack dot-
hackers.net (and miss out on a sidequest) here's the
solution given. Basically, hack the hash server on the bank,
and you'll get a file "hash", which contains this:
sdsd 3434 ddfd dasd
txty dsdd xcef 3342
edcv qwsa 4322 dssd
sads dwed 1324 dedx
fdsz dsds ewwe sdsd
Apply the hint given to you in the e-mail, you highlight [ ]
the hash you need to assemble.
sdsd 3434 ddfd dasd
[txty] dsdd xcef 3342
edcv [qwsa] 4322 dssd
sads dwed [1324] dedx
[fdsz] dsds ewwe sdsd
Voila! The password is `txtyqwsa1324fdsz'
6.5.5 Full Server List
cb-asia.com
ns.cb-asia.com
terminal-83.xenti.com
dot-hackers.net
ch548755.bank.com
black-haxors.com
atm.au-bank.com.au
6.6 LEVEL 5: RUNDOWN
Time to hack the Xenti AI server, and destroy it. However, it's
protected by 4 firewall servers. We need to crack all four. Each
spits out a part of the password when cracked. Assemble the
password and we can get into the server. We'll need to find the
serverfreeze.code as well, and hack the backup to make sure they
don't have any.
6.6.1 Objectives
1) Hack into the Xenti Corporation's central server
2) Delete the core code file from the Xenti Corporation central
server
3) Find and upload the serverfreeze.code file to the Xenti
Corporation central server
4) Hack into the Xenti Core backup server
5) Reduce your trace level below 20%. You can achieve this by
using the KILLTRACE command.
6.6.2 General Strategy
Please note objective 5. save your money for this specifically.
Remember, URLs can be hidden in the most innocuous of places.
Of the four firewalls, one is the easiest, so start with that
one. Then use that to attack the others.
Remember to transfer the money!
You MAY want to get a CPU upgrade to 3 GHz total now. 3 GHz /
FWL1 is good for cracking 16 char w/o bounce, or 512 bit
encryption keys. Any more than that and you'll need bounces.
6.6.3 Walkthru
## There may be sections that I forgot to include a bounce.
By now you should be able to tell if
## a task needs a bounce, or not. You be the judge. It can
probably be done with lower CPU by
## bouncing more often, but I prefer to use a faster CPU
instead.
## you may want to upgrade CPU now, as money should be
plentiful from previous mission
Decrypt firewall-2.xenti.com ## we start on firewall-2
because it's only 512 bit encryption
Crack firewall-2.xenti.com 399
Connect firewall-2.xenti.com 399
Transfer 500
Logout
Bounce 1 # add bounce to decrypt 1024-bit encryption
Decrypt firewall-1.xenti.com
Unbounce all
Crack firewall-1.xenti.com 399
Connect firewall-1.xenti.com 399 ## note that the login
says firewall.xenti.com!!!!
Transfer 1000
Logout
Killtrace ## as necessary
Scan firewall.xenti.com ## aha! Extra money!!!! Worry
about it later!
Bounce 1
Decrypt firewall-4.xenti.com
Unbounce all
Crack firewall-4.xenti.com 399
Connect firewall-4.xenti.com 399
Transfer 1500
Logout
Killtrace ## as desired
Bounce 2 ## this requires 2 bounces, as it's 2048-bit
encryption
Decrypt firewall-3.xenti.com
Unbounce all
Crack firewall-3.xenti.com 399
Connect firewall-3.xenti.com 399
Transfer 2000
Logout
Bounce 2
Decrypt core.xenti.com
Unbounce all
## assemble the password in the order it was given
Login core.xenti.com 11111111999999992222222277777777
Connect core.xenti.com 401
Ls
Logout ## nothing here, we need money to continue, hack
firewall.xenti.com
Scan firewall.xenti.com
Decrypt firewall.xenti.com
Crack firewall.xenti.com
Ls
Download serverfreeze.code
Transfer 2000
Transfer 2000
Logout
Bounce 1 ## crack 32-char password
Crack core.xenti.com 402 ## objective 1 complete
Cat core.code ##note that there's a reference to
firewall.xenti.com if you didn't see it earlier
## as well as a reference to nessie.core-
xenti.com
Scan nessie.core-xenti.com
Upload serverfreeze.code ##objective 3 complete
Delete core.code ## objective 2 complete
Logout
Bounce 2
Decrypt nessie.core-xenti.com
Unbounce all
Bounce 1 ## make sure the 32-char password is hacked
Crack nessie-core-xenti.com 210 ## objective 4!
Connect nessie.core-xenti.com 210
Transfer 1000
Logout
Killtrace ## repeat as needed to go below 20%, perhaps
even 0%
### You win when you go below 20% which is objective 5
6.6.4 Server list
firewall-1.xenti.com
firewall-2.xenti.com
firewall-3.xenti.com
firewall-4.xenti.com
core.xenti.com
firewall.xenti.com
nessie.core-xenti.com
6.7 LEVEL 6: THE CHASE
We need to find John Davis. Figure out how he's connecting to the
net, and see if it's possible track him down.
6.7.1 Objectives
1) Find the wireless router which John Davis uses to connect his
laptop to the Xenti network. Retrieve the DHCP table from it, to
identify the name of his notebook.
2) Find John Davis's laptop, hack into it and retrieve the
archive containing his files. Upload a copy of it, to the dot-
hackers.net server
3) Inject the monitoring trojan into John Davis's laptop. There
isn't a copy of it available at hand, so you must find one.
4) Cancel John Davis's flight reservation.
5) Reduce your trace level below 20%. You can achieve this by
using the KILLTRACE command.
6.7.2 General Strategy
You knew which hosts he used to hacked. There must be a trail
somewhere. So chase those down, and see where they lead. They
should lead in all sorts of directions.
Remember, one of the requirements is reduce trace level, so only
upgrade when it MUST be done!
6.7.3 Walkthru
## There may be sections that I forgot to include a bounce.
By now you should be able to tell if
## a task needs a bounce, or not. You be the judge. It can
probably be done with lower CPU by
## bouncing more often, but I prefer to use a faster CPU
instead.
Scan dot-hackers.net
Decrypt xterm.xenti.com ## 3 GHz CPU should have no problem
with 512 bit encryption cracking
Crack xterm.xenti.com 23 ## crack all three services
Crack xterm.xenti.com 115
Crack xterm.xenti.com 151
Connect xterm.xenti.com 23
Transfer 2000
Transfer 500 ## empty the server
Ls
Cat activity.log ## note first entry is wi-fi.jd.xenti.com
Scan wi-fi.jd.xenti.com
Cat e-receipt.doc ## see atm-5.sdb.ch
Scan atm-5.sdb.ch ## woohoo! $10000!
Cat host.id
Logout
Connect xterm.xenti.com 115
Ls
Cat mail ## note flyblue-air.com and reservation number!
Scan flyblue-air.com ##aha!
Logout
Connect xterm.xenti.com 151
Ls ## so that's where the bin files are.
Logout
Crack dot-hackers.net ## we need whatever they got in
that port 80 service.
Killtrace ## as needed to reduce to manageable levels,
preferably just below 50%
Connect dot-hackers.net
Ls ## lots of stuff! Grab them!
Download k-filemanager.exploit
Download transaction_manager.exploit
Download x-filemanager.exploit
Cat news.txt ## old news, as we've got the money from last
time.
Logout
Decrypt atm-5.sdb.ch ## let's get some money!
Crack atm-5.sdb.ch 443
Connect atm-5.sdb.ch 443
Ls
Transfer 2300 ## repeat transfer until all money gone, 2300
gives you 1 sec margin on the trace.
##Consider upgrading CPU now, or beginning of next level.
Logout ## we're done here, but remember there's
monitor.bin here too
Decrypt wi-fi.jd.xenti.com ## let's do the wi-fi server
then
Crack wi-fi.jd.xenti.com 808
Connect wi-fi.jd.xenti.com 808
Ls
Download dhcptable
Cat dhcptable
Logout
Decrypt flyblue-air.com
Killtrace ## repeat until below 50%
Exec x-filemanager.exploit flyblue-air.com
Connect flyblue-air.com ## nothing in 80
Logout ## nothing about wifi in homepage at all
Connect flyblue-air.com 99 ## used exploit
Ls
Cat index.old ## aha! So there's the wifi server
address!!!!
Scan wifi.flyblue-air.com
Logout
Ls
Del dhcptable ## we need the space
Crack flyblue-air.com 100 ## the reservations server
Ls
Cat info ## this tells you how to create and remove
reservations
Del 34723 ## objective complete!
Logout
Killtrace ## as needed
Decrypt wifi.flyblue-air.com
Crack wifi.flyblue-air.com 808
Connect wifi.flyblue-air.com 808
Ls
Download dhcptable1
Cat dhcptable1 ## see your target? Someone w/ very familiar
name
Logout
Scan 192.168.1.120
Decrypt 192.168.1.120
Exec k-filemanager.exploit 192.168.1.120
Ls ## May be good time to upgrade memory as you need 3 GB
to download the archive
Connect 192.168.1.120 102
Ls
Download archive.bin ## I hope you have 3 GB!
Cat archive.bin ## hey, there's an URL in this archive!
Scan backup.flyblue-air.com ## no time to hack it, no
need to either
Logout
Connect dot-hackers.net 99
Upload archive.bin
Logout
Delete archive.bin
Connect atm-5.sdb.ch 443
Download monitor.bin
Logout
Connect 192.168.1.120 102
Upload monitor.bin ## objectives are complete except last
one
Killtrace ## repeat until we can satisfy the objective, and
we should JUST have enough money
6.7.4 Server List
xterm.xenti.com
flyblue-air.com
backup.flyblue-air.com
wifi.flyblue-air.com
wi-fi.jd.xenti.com
dot-hackers.net
192.168.1.120
atm-5.sdb.ch
6.8 LEVEL 7: DEJA VU
The World Med center was hacked. Their computer system went down
for 30 minutes, then just came back up. What was copied or moved
and who did it?
6.8.1 Objectives
1) Identify the origin point, from where connection was
established, in order to penetrate the WorldMed main server
2) Retrieve a copy of the file that has been stolen from the
WorldMed central server.
3) Delete the stolen file from the host on which you have found
it.
4) Reduce your trace level below 10%. You can achieve this by
using the KILLTRACE command.
5) Keep at least $1600 in your money balance.
6.8.2 General Strategy
Instead of attacking WorldMed immediately, attack ancillary
targets for a while, as we need to find some bounce hosts first.
THEN get into WorldMed with the appropriate access tools, and
let's see where it leads us.
6.8.3 Walkthru
## There may be sections that I forgot to include a bounce.
By now you should be able to tell if
## a task needs a bounce, or not. You be the judge. It can
probably be done with lower CPU by
## bouncing more often, but I prefer to use a faster CPU
instead.
Scan ns.dot-hackers.net
Crack ns.dot-hackers.net 53
Connect ns.dot-hackers.net 53
Ls
Cat cache
Cat named.conf ## aha! Atm-3.sdb.ch!
Scan atm-3.sdb.ch
Cat x-filemanager.exploit ## this is on port 99.
Cat zone
Logout
Decrypt atm-3.sdb.ch ## let's get some money!!!!
Crack atm-3.sdb.ch 443
Connect atm-3.sdb.ch 443
Ls ## hmmm. another x-filemanager.exploit?
Cat x-filemanager.exploit ## aha, this runs on port 181,
not 99, so grab it
Download x-filemanager.exploit
Transfer 2300 ## repeat transfer until you empty this ATM!
Killtrace ## repeat until your trace level is under 50%, and
keep it under 50%
logout
decrypt c-core.worldmed.com ## time to do the WorldMed
server!
Exec x-filemanager.exploit c-core-worldmed.com ##
WorldMed's x-filemanager runs on port 181!!!!
Connect c-core.worldmed.com 181
Ls ## just one file
Cat call-config ## phones are in the format xxx-xxxx-
xxxx.nphone.com were xxx are numbers.
## however, we need the actual LOG to backtrack the hacker.
must hack call manager
logout
crack c-core.worldmed.com 180
connect c-core.worldmed.com 180
ls
cat call-records ## let's see which call lasted exactly
30 minutes.
scan 555-3234-1122.nphone.com ## voila!
logout
decrypt 555-3234-1122.nphone.com
crack 555-3234-1122.nphone.com 743
connect 555-3234-1122.nphone.com 743 ## just tells us
about auth.nphone.com
scan auth.nphone.com ## it has $4000 you can `borrow'
ls
cat modem.conf ## this tells us about xenti.nphone.com
instead!
Scan xenti.nphone.com
Logout
Decrypt auth.nphone.com
Crack auth.nphone.com
Connect auth.nphone.com
Transfer 2000
Transfer 2000
Killtrace ## repeat as needed
Logout
decrypt xenti.nphone.com
crack xenti.nphone.com 743
connect xenti.nphone.com 743
ls ## auth.log, and worldmed-dna.seq
download worldmed-dna.seq # objective complete!
Cat auth.log #hmmm.
Del worldmed-dna.seq
logout
killtrace ## until you fulfill mission objective
6.8.4 Server List
c-core.worldmed.com
ns.dot-hackers.net
atm-3.sdb.ch
555-3234-1122.nphone.com
auth.nphone.com
xenti.nphone.com
6.9 LEVEL 8: THE MAZE
6.9.1 Objectives
1) Hack into the first host on the maze path.
2) Hack into the second host on the maze path.
3) Hack into the third host on the maze path.
4) Hack into the fourth host on the maze path.
5) Hack into the fifth host on the maze path.
6) Download the DNS reconstruction map from the last server on
the path.
6.9.2 General Strategy
Money is limited on this level. Be very careful in using the
cracks and decrypts, make sure you got the right server.
6.9.3 Walkthru
## NOTE this walkthrough assumes you have 4 GHz CPU, 3 GB of
RAM, and level 1 firewall.
## There may be sections that I forgot to include a bounce.
By now you should be able to tell if
## a task needs a bounce, or not. You be the judge. It can
probably be done with lower CPU by
## bouncing more often, but I prefer to use a faster CPU
instead.
## 4 GHz CPU means you can decrypt 1024 bit key directly,
and need 1 bounce to do 2048 bit key.
Scan xmaze.net
Decrypt xmaze.net
Crack xmaze.net
Connect xmaze.net
Transfer 2000
Transfer 500
Logout ## scans show 28 is easiest, 512 cipher only
## it's also 28 because the e-mail you got says you should
have started YESTERDAY, and today is 12/29
Crack 28.xmaze.net 901
Decrypt 28.xmaze.net
Connect 28.xmaze.net
Ls
Download dnaseq-28
Cat hint-28
Download hint-28 ## you'll get e-mail with hint, points
to 24
Logout
Killtrace ## repeat as necessary
Decrypt 24.xmaze.net
Crack 24.xmaze.net 901
Connect 24.xmaze.net 901
Ls
Download dnaseq-24
Cat hint ## points to 26
Logout
Killtrace ## repeat as needed
Decrypt 26.xmaze.net
Crack 26.xmaze.net 901
Connect 26.xmaze.net 901
Ls
Download dnaseq-26
Cat hint ## hint points to 27
Logout
Killtrace ## repeat as necessr
decrypt 27.xmaze.net
crack 27.xmaze.net 901
connect 27.xmaze.net 901
ls
cat log ## points back to xmaze.net
download dnaseq-27
cat hint ## this hint takes a bit of patience, but
it'll lead us to 22
transfer 500
logout
decrypt 22.xmaze.net
crack 22.xmaze.net 901
connect 22.xmaze.net 901
ls
download dnaseq-22
cat hint ## 16 servers, so must add up to 8, which
means. 35.
Logout
Killtrace ## as necessary
decrypt 35.xmaze.net
crack 35.xmaze.net 901
connect 35.xmaze.net 901
ls
download dnaseq-35
cat hint ## no hint, we're done!
Logout ## wait for level to end
6.9.4 Server List
20.xmaze.net
21.xmaze.net
22.xmaze.net
23.xmaze.net
24.xmaze.net
25.xmaze.net
26.xmaze.net
27.xmaze.net
28.xmaze.net
29.xmaze.net
31.xmaze.net
32.xmaze.net
33.xmaze.net
34.xmaze.net
35.xmaze.net
37.xmaze.net
xmaze.net
6.10 LEVEL 9: END
This is the end. We need to wipe out the Xenti AI server
6.10.1 Objectives
1) Retrieve a copy of the AI kernel file from the Xenti
Corporation server.
2) Delete the AI kernel file from the Xenti Corporation server.
3) Reduce your trace level below 30%. You can achieve this by
using the KILLTRACE command.
6.10.2 General Strategy
Note that you don't even know the AI server's name, or the
firewall servers' names, so pay attention!
6.10.3 Walkthru
## NOTE this walkthrough assumes you have 4 GHz CPU, 3 GB of
RAM, and level 1 firewall.
## There may be sections that I forgot to include a bounce.
By now you should be able to tell if
## a task needs a bounce, or not. You be the judge. It can
probably be done with lower CPU by
## bouncing more often, but I prefer to use a faster CPU
instead.
Scan ns.dot-hackers.net ## yes, e-mail contains server
address!
Decrypt ns.dot-hackers.net
Connect ns.dot-hackers.net
ls
Download namedserver_service.exploit
Cat named.conf ##hmmm. ns2?
Scan ns2.dot-hackers.net ## aha!
Cat zone
Transfer 2300 ## repeat until you drain all the money
Logout
Decrypt ns2.dot-hackers.net
Crack ns2.dot-hackers.net
Exec nameserver_service.exploit ns2.dot-hackers.net
Connect ns2.dot-hackers.net
Ls ##nothing
Transfer 2000 ## all it's got
Logout
Killtrace ## repeat as needed!
Connect ns2.dot-hackers.net 53
Ls
Cat cache ## aha! There's the firewall server names!
Scan fwall-34.xenti.com
Scan fwall-23.xenti.com
Scan fwall-64.xenti.com
Scan fwall-00.xenti.com
Cat named.conf
Cat zone
Logout
## remember the order listed, Let's start hacking!
Decrypt fwall-00.xenti.com
Crack fwall-00.xenti.com 88 ## got the "message"
Connect fwall-00.xenti.com 88
Transfer 500
Logout
Decrypt fwall-64.xenti.com
Crack fwall-64.xenti.com 88 ## got the "message"
Connect fwall-64.xenti.com 88
Transfer 500
Logout
Decrypt fwall-23.xenti.com
Crack fwall-23.xenti.com 88 ## got the "message"
Connect fwall-23.xenti.com 88
Transfer 500
Logout
Decrypt fwall-34.xenti.com
Crack fwall-34.xenti.com 88 ## got the "message"
Connect fwall-34.xenti.com 88 ## wait. it says.
aicore.xenti.com!
Scan aicore.xenti.com ## voila!!!!
Transfer 500
Logout
Decrypt aicore.xenti.com
## so what's the password? It's the pieces you got, in the
order
Login aicore.xenti.com ttyy3322xxzz4455uupp8888kkcc7777
Connect aicore.xenti.com
Ls ## you see 4 bin files, one of which is correct
Download ttyy3322xxzz4455uupp8888kkcc7777.bin
Killtrace ## repeat killtrace while we wait for download to
finish
Killtrace ## keep going until you go below 30%
Del ttyy3322xxzz4455uupp8888kkcc7777.bin
Logout #### You win!!!!
6.10.4 Server List
ns.dot-hackers.net
ns2.dot-hackers.net
aicore.xenti.com
fwall-34.xenti.com
fwall-23.xenti.com
fwall-64.xenti.com
fwall-00.xenti.com
7 Miscellaneous
7.1 MODS
Some user mods which changes interface colors are available in
the support forum, see official website.
7.2 CHEAT CODES
There are exclusive cheatcodes. They are NOT guaranteed to work
at all. Try it for yourself. How to use? Type them in the
"console".
exosyphen: identifies the maker of this fine sim
xskiplevel : ends current level and go to next one, but resets
your score to zero
xmoney: gives you $10000, but resets your score to zero
xshowhosts: reveals all the hosts on the map, but resets your
score to zero
xsubmit: hmmm.
7.3 TRIVIA
Blue Sky Airline in the game is actually named after one of
Exosyphen's previous games, "Blue Sky".
--THE END--
