Saturday, February 28, 2009

notpr0n - Level Ten

Level Ten
'he was impatient'

Fun! Our clues are 'he was impatient' in the title, 'operator woman said it' in the password window and ones in the source code. These latter are especially important. We have
!-- quick quick, don't let me wait -->

right under the code embedding the background sound into the page, which for this level has changed from all previous levels and
!--%SystemRoot%\System32\sndrec32.exe can capture "what u hear"-->

which opens a windows program for editing audio files.

'Operator woman said it', so download the music file, speed it up ('he was impatient') and reverse it (!) in the recommended program. This gives the level name and password - grey world

One easter egg: changing 'wrong' to 'right' in the URL gives a webpage with words 'its not that easy, fool'. This sort of message will become quite common as we progress. Maybe I won't record them after the n-th occurence, but for now I consider it a valid easter egg :)

On to Level Eleven
Until then

notpr0n - Level Nine

Level Nine
'revolution'

There's a Beatles song called 'Revolution Nine' and most of the hints on this level tie into this. Our hints are 'colorful' in the password window, 'paul is dead' in the URL and the lines

'tears under john's mad notes of pain
did he answer demon's call now'

under the image.

There are no hints in the source code this time, but the 'tears under...' lines are formatted in a weird way. Picking out the letters surrounded by tags
span class="not", Get 'turnmeon' and 'deadman'. Click on the 9 in the top left corner and enter these as the name and pass. On to Level 10

I'm sure there is a ton of Beatles-related easter eggs to be found here, but I have found just one:

http://www.deathball.net/notpron/luv2music/paulisalive.htm gives a webpage with words 'yeah i know he is alive, but don't waste your time with the Mc!' (his last name is McCartney :))

Until then

notpr0n - Level Eight

Level Eight
'say it loudly and proudly'

Tricky! Notice first that the image file is called 'screen8a.jpg'. Changing the a to b leads to the following image:
http://www.deathball.net/notpron/sdrawkcab/screen8b.jpg

and screen8.jpg is not found. I couldn't come up with any other creative things to get another image.

The text below the image is 'JAY should PACK his stuff' and the hint in the password window is "mom, he formated my second song". Consulting the source code, we get the hint
!-- water became wine -->

And also notice that the page has two background music sounds, with the HTML markup of the embedding of the second one into the page being wrong. Tying this back to the 'second song' hint above, try to download it, which gives a file that is just ~20kB big, which is too small for a music file. JAY PACK sounds sort of like jpeg and 'water became wine' ties into this idea. Converting the file from mus2.mp3 to mus2.jpg (or just opening it in paint) gives an image saying

name: inverted password: levelten

:)

Until then
Level Seven
'he went to the old school'

This is a Twix candy bar! I eat them all the time and could recognize the gold wrapper and the font of the 'x'. Unfortunately, if you couldn't recognize one, you would have no way to get past this level. On to the clues. In the source code we have

!--what candy wrapper is it?-->
!-- times have changed in deutschland -->

The URL of the page is /sdrawkcab/tieman.htm which looks unintelligible at first glance, but read backwards is /backwards/nameit.htm. Change nameit.htm to twix.htm! We get a web page saying 'wenoot' (changing nameit.htm to xiwt.htm gives a page saying 'too new' :)). Well...the level has a very handy search bar. Looking up twix online, we find that it is actually called 'raider' in germany among other countries until quite recently (times have changed in Deutschland). Changing the URL to THIS gives a page saying 'dnuorayawrehto', which is 'other way around' other way around. Of course! Change the URL one last time to rediar.htm and on to Level Eight

Until then

notpr0n - Level Six

Level Six
'...the source code might help...'


The prominent text below the image reads 'An ALTernative?' and the title of the level points to the source code. Looking at the source code reveals

!--ascii is an alternative-->
ASCII is a coding standard for information, including letters and so on. In DOS (!) to enter one of the ASCII characters you need to hold the Alt key and enter the character's code. So 'An ALTernative' might also have something to do with ASCII

Also we find an imbedded frame of the following page

http://deathball.net/notpron/stuff/mine.htm

(its the same thing you get scrolling down)

Highlighting the contents of the frame, we get the numbers
108 105 108 107
117 111 114 104

Which look like ASCII encodings. Searching online (for decimal encodings -a priori they could be in base-9, or worse, but they aren't!) we get
l i l k
r o t h

Clicking in the lower left corner of the photo and entering these lines, they doesn't work as the name and password. But we notice the hint 'anagram' and unscramble to get
kill
hour

Changing the url to

http://www.deathball.net/notpron/all/hesgotitall.htm we get a web page with text saying 'This is the wrong alternative! go back!'

Didn't find any other easter eggs or ways to go about it :) On to Level Seven

Until then

notpr0n - Level Five

Level Five
'Light your torch...'


Big Bad Voodoo Daddy! So that's what 'Voodoo Power' was all about.

Another 'google' level. The START/STOP button on the remote asks for a name and a password and gives a hint 'live'. The URL instructs to "google" 'She's the one for me'. Very faintly across the bottom of the screen is written 'eyes like an angel smiles like a devil' and more prominently 'What was the name of this song again?' Big Bad Voodoo Daddy is a band, in case you didn't know. All these clues are 'in line' and the only thing left is to search for the lyrics 'Eyes like an angel Smiles like a devil She's the one for me' by 'Big Bad Voodoo Daddy', which gives song title 'Simple songs' which was included on the album 'Live'. This is our username and password

Really simple, isn't it? They will get more fun soon :)

Until then

notpr0n - Level Four

Level Four
'Look in the dark...'


This is the first level that encourages you to use google and for good reason - on the left ('in the dark') we have two words in morse code so we'll (possibly :)) need google to translate them. Why bother? Clicking on the flashlight asks for a username/password combination to proceed and the encoded words are a good candidate.

By the way, often the password box will contain a hint and it is a good habit to check it. But in this instance the hint is 'LightThisPlaceNow', which isn't very useful. In any case,

...- --- --- -.. --- --- = voodoo
.--. --- .-- . .-. = power

Until then