Welcome

Welcome to my security testing game! See how far you can get. The levels start pretty easy but they do get harder. Espcially as I add more levels ;). The game is designed to show you some of the security flaws that are common on the internet (though no serious site would use these methods).

This is NOT a hacking game. For legal reasons really. However none of the pages are actually protected. You just don't know where they are. And to find out where they are you need to bipass the security I added. If you really get stuck then I will add a guide soon either here or on the forums.

Proceed to level 1

Discuss it on the Fallen Nation Forums - you can also ask for help if you get stuck...

How to do it
Are you really stuck? Well here is how to do it all...

Level 1: Easy. On the file menu goto View > Source and it will bring up the souce code. As its client side JavaScript the password must be in the page code somewhere.

Level 2: There is no password on this one. You just have to find the next page URL. At first glance it does not appear to be in the souce code however it has one thing other over pages do not - an extra CSS stylesheet link just approve the </head> tag. This file does not actually contain any styles. Just one comment telling you where the next page is.

Level 3: This is just a normal password script. Only this time the password is encrypted. All you have to do is to work out the pattern and that will enable you to find out what the password is. It has 6 letters hense the code for 0, 1, 2, 3, 4, 5 in the source code. Ok, I admit I didn't mean for this one to be as hard as it was. The encription was better than expected. The password is: 000398.

Level 4: This one is straight forward. All you have to do is get hold of the source code. However the page keeps redirecting you back. It should do anyway. Stopping this is cheating! Though I guess thats what its all about. The "offical" way is to create a link in a blank HTML page on your computer for intance go into Notepad and type in <a href="http://www.example.com">Click here</a>. Then save it as anything.htm and open it up in your browser. Now, right click on the link and click "save target as" you can then save the souce code, open it up in notepad and edit it. Though on writing this I relise you could just use the link on the level 4 main page ;).

Level 5: This another one that is easy if you relise what is going on, especially if you are a webmaster. The form you click proceed on has a hidden variable called "grantaccess" which has the value "false". When you click go it is sent to a server side validation script which if this variable grantaccess = false it will not give you access. The solution? Save the page on your computer, modify the form to give the full url of the page its going to and switch the hidden value to something different or even remove it all together.