Scratch

any idea how it's encrypted?

to be honest i have no idea, thhis is some kind of event on "dota 2 " forum, and one person has key to this game, i will send you his message:

The challenge is for one key.

Instructions:

    this is the file holding the data: [image removed by moderator]

    There is a *.txt file hidden in the image (google should tell you how to decrypt that). The password to decrypt the image file is the 8th word of the first paragraph of a wikipedia page (hint hint).

    Inside the text file there is an encryption hash (very common, unsalted). Decrypt that there is my email address. First response in my inbox with the subject "I cracked it" gets the key.

    Time limit is 48 hours. If nobody gets it then both this key and the other one I have will be regifted.

    Have fun.

It really isn't hard. I was toying with something actually brute forceable and not just follow the breadcrumbs.

1st warning: Attempting to reset my reddit password, whilst novel, won't work. Next time I get a message informing me its being attempted both keys are being withdrawn. What it does however do is give me your IP address. Unless you want to find yourself neck high in donkey * I suggest you reset your router.

2nd Warning: Y halo thar 10.215.206.177. Managed to reset before I got my BackTrack VM up and running. Last warning. Its not fair that you are spoiling it for other people. All the information you need is in this thread. Whilst social engineering is novel and at least shows you are thinking its not cool. Also think when was the last time you saw a password reset form that actually told you the email address of the place it was sending the request?

Edit: This... this is getting complex. Keys are still available. Everything you need up to and including decoding the email address is available in the thread below. One person has at least got to the final decryption stage but has not submitted an entry. You are making this far more difficult than it needs to be (considering I spelt out the process). Thank you for stopping the password reset attempts.

Double Edit: If I was going to try an crack, for example, an MD5 hash, I would use John the Ripper. And I would supply it with some characters, for example athotmaildotcom. Some kind of dictionary attack based on T3ppic would be cool. Like Teppic or T3pp1c or some mixture of Teppic and my country of origin like someone managed to social engineer (British or lowercase abbreviated synonym there of).

Honestly now guys that last edit practically gave you the answer. ********athotmaildotcom 8031810176 possible hashes which for even the slowest computer is about 10 seconds of work. And you know how to narrow the list down.

Triple Edit: To make it fair Krayons gets the 2nd key because he managed to get from start to finish and got stuck due to a slow computer. So Krayons if you still want a key PM me your email. For everyone else one more key is still available. The hash to decrypt is "858ff3e88ae4cd1b9c55bebd031d2a95"

Last edited by sparks (2012-07-15 16:52:01)

can you do it for me? i dont know how work this programs ;/

ok no problem ;p
maybe can you tell me full name of this program? i will try do smth with it 

dremath wrote:

ok no problem ;p
maybe can you tell me full name of this program? i will try do smth with it 

My personal favourite is ighashgpu