hey dude ..

thanks for the thanks!!

yeah .. it took me a while .. but got their in the end!

it was the discovery of using proxyhunter in a focusssed way that really got me moving on the challenge .. i run NT and have not found a way of effectively spoofing, so of course went for the easy route!

only after realising that if i use proxy hunter .. but also search only ranges with *.su* in the hostname that i find loads of usable proxies! to the envy of most of the ltkers!

so . .how i did it

1) found the shiftZ link to the zeb.pl
2) used proxy hunter on focused ranges to get su proxy
3) after a while worked out that it was the tones in secure.mp3 that was the password .. i had previously tried modifed version of whisker to detect for exploits but with no luck
4) once i had worked out the DTMF tones, using a really nifty website where you can just upload the wav, and it gives you the tones! i got the halfxor.z
5) this bit was a bit of a bitch i obviously worked out you need to convert from b64
6) then i had a tough time working out the encryption method. i tried xoring the file using vcrack, but it came up with shit, so i wrote an app in VB to try and bruteforce the code using words such as zebulun etc to find patterns. this kinda worked, but i could not get the whole file looking good, so ... i finally worked out that it seemed like 2chars xored, then 2chars not, i modified my app to split the file xor one half then recombine.
i then saw a chunk inside which was again b64, decoded .. and got a groovy ascii art file saying boomerang .. used the proxy again and submitted it in the top one of the swirly graphics.

i used many proxies, so im not sure exactly of the one used to complete, but heres a list attached of all my proxies and passwords i tried etc.. might as well blcok em all! 

ps good bloody redherrings like joshua and play games helped keep me off the scent for a while!

pps up until now i havent really been able to be actively involved in the CA, outside the challenges and #ltkernel channel, i am not a member of a group etc. however if you need my resources .. developer with VB / COM / ASP / C++ / Java / and some experience in the iDTV arena, please get back to me, i would like to join the many active participants in CA development and maintenenace

Look forward to hearing back from you

Daniel





 --- pengo <pengo@cyberarmy.com> wrote: > Hello,
> 
> Congrats with your new rank ! I'm sorry that i mail
> you 6 days after your promotion, but i'm a very
> bussy man.
> I'm not sure if you know this, but from the rank of
> Ker. you
> need to mail me how you did the challenge and whith
> which
> proxy (or none if you didn't use one), so that we
> can update
> our proxy-database. But we also ask this because
> there have
> been found some cheating pages on the net. Please do
> not
> reply to me at this mail adress, because i have
> almost an 
> overload at ca :-) If you didn't know already, my
> real name is
> Nick, mail me at Nickvangreenling@hotmail.com
> (please do NOT
> spread this e-mail around because it's my personal
> one ! ).
> Please reply within 3 days.
> 
> Cheers,
> - pengo