Web Game: Deception

[Alex Pelan]

You may or may not be familiar with Greg Marra, a member of 177 who posts on here. Greg has developed a new web game for all of our enjoyment, called deception. Leave comments for Greg or help each other figure out what to do. I haven't quite had the time to finish it yet...it looks like it might be tough.

The Game

[Josh Hambright]

pretty interesting, a great display of web skills. Very well done, atleast what i have seen so far, i'll have to play more when i have time!

[Mike]

Hmm, i'm at the DOS prompt but all the normal file access stuff doesn't work...

EDIT: Somethings weird... there's no ACTION reference in that form tag

[Josh Hambright]

Originally Posted by MikeWasHere05

Hmm, i'm at the DOS prompt but all the normal file access stuff doesn't work...

EDIT: Somethings weird... there's no ACTION reference in that form tag

I'm assuming the lack of action is due to the fact its not an html document but rather a php scripting that you interact with.

explore the prompt further, some stuff is there, its just weird.

[Mike]

Originally Posted by oneangrydwarf

I'm assuming the lack of action is due to the fact its not an html document but rather a php scripting that you interact with.

explore the prompt further, some stuff is there, its just weird.

Yeah, somehow he's hiding it in the source. When I click Display Form Details in the web developer toolbar it spits out
<form id="" name="cprompt" method="" action="">

It's using javascript to submit itself. The fact that its a PHP document doesn't matter, all form data is handled client side (html or javascript) and then processed server side (PHP). There's no way PHP can detect if I entered something into the forum without some kind of client side code submitting that form.

EDIT: Somethings weird about that AUTOCOMPLETE="off" code...
EDIT 2: Has anybody gotten past this part yet? Just wanting to know if its at all possible.

[Josh Hambright]

i have not gotten past the dos part. the fsck command is taking forever to run,
it has been running since last night...i dont know what happens when its done, but i'll see soon. did u find /dir?

[Mike]

Originally Posted by oneangrydwarf

i have not gotten past the dos part. the fsck command is taking forever to run,
it has been running since last night...i dont know what happens when its done, but i'll see soon. did u find /dir?

Yeah I got there
SPOILER
I just ran a fsck and i'm pretty sure your not supposed to just let it run, but it might be a gateway to something
/SPOILER

[Greg Marra]

Hmm, did anyone notice when fsck had negative thirty thousands seconds left? hehe.

The form is a regular old form that posts information using GET, rather than POST. A bit of javascript autofocuses it when you load, and then hitting enter submits the form. PHP can pull the information out of the GET (it would be able to out of a POST to, but I wasn't sure how that all worked when I started making this and I like to keep things simple). I'm not sure if it's using javascript to submit itself, but I think it's just normal HTML form submission. Autocomplete is off because it destroys the illusion.

And duh fsck takes forever, it's a PII 200mhz...

[Alex Pelan]

Here's my progress so far:

Got to fsck, couldn't figure out what to do.

Got to oracle, found that nothing could be found due to a corrupted hard drive. Any ideas?

[Mike]

Yeah fsck started up again, I don't think thats how you fix it...

[Alex Pelan]

Hmm....civmsg seems to be something that we have all ignored, but I'm not quite sure what to do with it. I have found a list of handles to log in, but no passwords...I have already tried a bunch of Greg's inside jokes, but none of them seem to work. Any hints elsewhere where we could grab this password?