Return to Unfiction unforum
 a.r.g.b.b 
FAQ FAQ   Search Search 
 
Welcome!
New users, PLEASE read these forum guidelines. New posters, SEARCH before posting and read these rules before posting your killer new campaign. New players may also wish to peruse the ARG Player Tutorial.

All users must abide by the Terms of Service.
Website Restoration Project
This archiving project is a collaboration between Unfiction and Sean Stacey (SpaceBass), Brian Enigma (BrianEnigma), and Laura E. Hall (lehall) with
the Center for Immersive Arts.
Announcements
This is a static snapshot of the
Unfiction forums, as of
July 23, 2017.
This site is intended as an archive to chronicle the history of Alternate Reality Games.
 
The time now is Mon Nov 11, 2024 3:45 pm
All times are UTC - 4 (DST in action)
View posts in this forum since last visit
View unanswered posts in this forum
Calendar
 Forum index » Updates » News & Rumors
US Army Cyber Command Puzzle
Moderators: Administrators, Moderators, ndemeter, Varin
View previous topicView next topic
Page 1 of 1 [5 Posts]  
Author Message
bambusar
Unfettered


Joined: 02 May 2012
Posts: 684

US Army Cyber Command Puzzle
GOARMY.COM

I found this puzzle in this article:
http://motherboard.vice.com/read/watch-the-fbis-hilariously-overacted-cybersecurity-psas

Link to puzzle comes from (at 0:17)


YouTube: Link


Puzzle link:

http://recruitahacker.net/

Rolling Eyes To be able to type "?" in terminal you have to set your keyborad to English(US) keyset.

Three more links found in source:
http://recruitahacker.net/Home/VigenereTest
http://recruitahacker.net/Home/XOREncryptionTest
http://recruitahacker.net/Puzzle


Ciphertext to solve:
Code:

The following text has been encrypted using a simple cipher algorithm. Crack the key and click on the decrypt button to reveal our message.
Cipher Text:

WSJZHHYXUMTANJRDSQHMHODIAJDLXBNLURLMEHRPZMCWMWMGT
BHHEGQTCAUQBXJJAFGPWKFHEIGIIBCJQTKYLHZUDNIHCWKI


PostPosted: Fri Oct 28, 2016 4:01 pm
 View user's profile
 Back to top 
redderherring
Kilroy

Joined: 29 Oct 2016
Posts: 1

hm.

I found the URL in a Navy commercial during the Florida / Georgia football game just now. Changing my keyboard input to US doesn't seem to help me get around the site's javascript that turns all of my ?s into ¿s. How exactly did you
Quote:
set your keyborad to English(US) keyset
? Tried disabling various things in the browser (site-specific hacks/CSS/images/java, which obviously doesn't help), and I can't seem to get a ? to appear in their in-browser "terminal." Effing frustrating that I can't figure this out, given that the whole site is a lame US military ad... Help?

PostPosted: Sat Oct 29, 2016 6:30 pm
 View user's profile
 Back to top 
bambusar
Unfettered


Joined: 02 May 2012
Posts: 684

For windows

You can try with onscreen keyboard Start->Run...->osk.exe
Location of it is: c:\windows\system32\osk.exe

To change keyboard layout you should have button on your taskbar on the right.
Or Start->Control Panel->Region or Laguage->Keyboard and Languages->Change Keyboards

For me it works with English (United States)-United States International
That is the layout that has ? and / left of Right Shift button.



If you cant get "?" to work you can click here to see list of commands.


Also last night some found solution. It involves looking into javascript and you need to allow cookies to be able to find solution. Important cookie that was sent was named: "psess" it changed each time you deleted it and refreshed the page. Here are two version of it:

Code:
d05ZZVVGZWZqaHlUQXJWWlpNS2djVUhpU0ZHSkpRdnBsaWJ2Y3ViR2FvcUh4bXlGWUtZalZQQ
0JmcGxwWnV2c01qSFJwWlhFbERGb0VBTEdIQWx6c011d0d6cU5JbUhHU1lWb0ZnUHlOVHlSSm
5YZmVGaVlqdmFB!dWV3dHFoZmRqbWFzend6dm5zdHNmb3Fyd2phc3F0dm5neGVtamR2aXp0dW
R0d2NjYml0eXF5ZGZpamJtYmxsdmd5Z3Vza3FxcXd5cWFvd2V3YXFoaGxyYnducmZldmdy

T0ZTZ0tPbHZZUlZOTXRmblNwRmxyaWxkeW9yR0l6WWFpZ21YaGdod3RZTmJPQ1lHa05VcEZwR
kd1cEhWd0VuenR2RkZHaEZMaGpTc1VKT3ZRbHZ1ZWlVc0JnZHN5TFpvbG9pdHhTWmNpaWl3eG
1sa0FtRkxJc1VL!dWV3dHFoZmRqbWFzend6dm5zdHNmb3Fyd2phc3F0dm5neGVtamR2aXp0dW
R0d2NjYml0eXF5ZGZpamJtYmxsdmd5Z3Vza3FxcXd5cWFvd2V3YXFoaGxyYnducmZldmdy


I am posting this "psess" cookie values, so you can solve the ciphertext from initial post. From what I can tell this is not usable to solve ciphertext that is currently on page.
In case anything changes I am posting source code and all 4 javascript files of http://recruitahacker.net/puzzle here.
Spoiler (Rollover to View):
You need only last javascript (http://recruitahacker.net/bundles/angularjs?v=1ILb4I6zyhEIaDe641nw5w0-KV0GGu8AP9_gto2U0ik1) to solve it the old way.


Not important: Yesterday I got some 2 other cookies too, but I deleted them and didnt copy their names or value, now I am not getting them anymore. (I remember one included "vimeo" in name)

Exclamation Last night at cca 10:00 PM GMT site started to behave differently, puzzle ciphertext changed to longer string (old one 96char new one 122 char) and cookie that is saved to browser is now different. Cookies that are served now is named "ARRAffinity" with same value each time: c21174bea1faf39492858f37dabeb4ba4c612b42eecfafbf4420e68963926b67
And two other cookies that change each time you delete them and refresh the page named: ai_session and ai_user.
I am not sure if ai_session and ai_user cookies were sent before page changed since my Addblocker blocked them.

Question Now Problem is that javascript files are still the same as were yesterday. And since cookies and ciphertext are different; method we used yesterday cant be applied to new ciphertext. We dont know if change was intentional and new ciphertext is new puzzle or site somehow got broken and isnt working properly.


Spoiler (Rollover to View):
For solution of yesterdays ciphertext any kind of bruteforcing or guessing the key is futile, key is as long as ciphertext string, containing random characters; so only way to get it is by observing what javascript does when you press Decrypt button.
Solution was just decrypted sentence. When inputting correct key under decrypted text, you get link that opens email client and fills address and subject.


PostPosted: Sat Oct 29, 2016 8:32 pm
 View user's profile
 Back to top 
bambusar
Unfettered


Joined: 02 May 2012
Posts: 684

Site changed again. It appears it was broken in previous version (with ciphertext: WSSXTABEOWTEHQBEBDWQEGEONWMPQYHPODNVHWITJTGNVAKZWSMPZPIYWRTGDANUVHZMPENRQPXCMQUCESEDQYFVKYASPNVEEINOJEPNIUFXIBHTLCLAYZJTVU)

ARRAFinity cookie is related to Microsoft Azure and it is not served anymore. Site changed three days ago again trying to hide generic ASP.NET 404 screen.

Exclamation Sometimes in past 12 hours site changed again and ciphertext was updated!

Javascript on /puzzle page has slight change (last two key:n.key were replaced with key:this.key)

New ciphertext is:
Code:
Eexl fmoi! Jabnh gsl'ze decbjrx lvtv, gsl uak hctf xyw gvltpj inp mqrjzrlwzq bs awiz tjc Bvdq hpdu! Pvirz mqpf esgie bwyi xofeprjec xiexzi nqtt ATAZFVJ.


Spoiler (Rollover to View):
This one can be solved the old fashioned way. No coding knowledge necessary.


PostPosted: Wed Nov 02, 2016 8:38 am
 View user's profile
 Back to top 
Talon
Boot


Joined: 06 May 2006
Posts: 54
Location: Washington, USA

Alright, I finally got one. They just had to dumb the puzzle down a bit for me. I was hoping the email would lead to more puzzles, but it kind of sounds like it leads to an Army recruiter instead.

PostPosted: Wed Nov 02, 2016 1:07 pm
 View user's profile
 Back to top 
Display posts from previous:   Sort by:   
Page 1 of 1 [5 Posts]  
View previous topicView next topic
 Forum index » Updates » News & Rumors
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
You cannot post calendar events in this forum



Powered by phpBB © 2001, 2005 phpBB Group