Hey everyone !
With so many people stuck at 200 points on the board, I’m wondering if the chapter 2 isn’t too “abstract” ?
The Cyb3r Hunt is meant to be challenging, but it shouldn’t discourage players because they can’t figure out what to do.
For those that went past it, did you find the solution sketchy ? Did it all make sense, or you went past it without really understanding what all these files were for ?
For those stuck, where are you stuck at (please use a spoiler tag) ?
I’m considering removing some files I consider “optional”, and changing the hint to make it less like a guessing game as to what to do.
Any opinions on this ?
Hi, I’m at 300 points (SIV). Chapter 2 was challenging, there’s no denying. The most difficult part, for me was
spoiler
to fetch the files from the gopherhole because torbrowser would not manage .onion URI even tough I had installed OverbiteWX addon. And I didn’t find how to use gopher(1) to access an .onion URI. So my solution was to use curl over torsocks. Maybe there was a simplier solution.
Then understanding the reason to be for the files took me some time but I got it in a few hours. The other difficult thing, for me, was
spoiler
to understand how to configure Yggdrasil: at first, I thought I had to add the address provided by the nmap file to Yggdrasil’s conf file. Documentation on the web is scarce and it took me some time to get it: I had to use a public IPV6 address to connect to the Yggdrasil network in order to connect to the farm server.
I would not remove any file, if I were you: the difficulty laid in using Yggdrasil, not understanding what to do.
But now, I’ve been stuck for several days at chapter 3 by
spoiler
the puzzle… I think a found a relevant clue I hadn’t given much attention: “chisel”. I hope I’m in the right direction, because I don’t really understand if I’m supposed to get that key to setup a SOCK5 proxy, and then access the MINE, or if getting that key requires the SOCK5 proxy before. Documentation in the wiki and on Chapter 3 page does not help: it tells me I need this proxy to access any ressource from the mine. Is the git puzzle one of them or the key I need to setup the proxy, which means I should get it without the proxy? It’s a kind of ouroboros thing to me.
Well, this game is one of the most challenging ones I’ve ever played and I enjoy every moment of it. Thanks.
Thanks for this very detailed answer !
chapter 0x02
You did right with curl. Though there are other gopher clients that could have worked this way (but not all of them support torsocks).
The Ygg part is what I want to make more clear, because when you’re at the gopher hole, you shouldn’t really care about the nmap/passwd/wtmp file. Your only goal should be to setup Ygg and proceed with the info from the wiki. And that’s definitely not clear enough from the feedbacks I got from this chapter.
Now regarding your current problem on chapt.3:
chapter 0x03
“chisel” is only there because I couldn’t find a better rhyme haha. Now to get you onto the correct direction: there are 2 socks5 proxies. One that you can use right away to only let you fetch the puzzle, and one that you’ll use later on to get full access to the mine. Perhaps I should look into making the hint more explicit at this stage too. I’ll look into it ;)
Thanks for your feedback, I’m glad you’re enjoying it and hope you’ll get through it, because the funniest part remains !
Thanks a lot for your help!
spoiler
My next move was to try and install https://github.com/jpillora/chisel to fetch the content via git protocol through the proxy because I cannot force git(1) to use the SOCKS5 proxy (no option seems to work: it’s only with https or http). So, maybe chisel was just there for the rhyme. Still trying…
Oh wow I had no idea this existed, but yeah at first glance, this looks like a dead-end. That’s definitely not how you’re supposed to do it (and it doesn’t look like it could work anyway).
::: spoiler You were on the right track at first, except it’s not http. Look for other proxy settings in
git-config(1):::