Return to Unfiction unforum
 a.r.g.b.b 
FAQ FAQ   Search Search 
 
Welcome!
New users, PLEASE read these forum guidelines. New posters, SEARCH before posting and read these rules before posting your killer new campaign. New players may also wish to peruse the ARG Player Tutorial.

All users must abide by the Terms of Service.
Website Restoration Project
This archiving project is a collaboration between Unfiction and Sean Stacey (SpaceBass), Brian Enigma (BrianEnigma), and Laura E. Hall (lehall) with
the Center for Immersive Arts.
Announcements
This is a static snapshot of the
Unfiction forums, as of
July 23, 2017.
This site is intended as an archive to chronicle the history of Alternate Reality Games.
 
The time now is Wed Nov 13, 2024 6:07 pm
All times are UTC - 4 (DST in action)
View posts in this forum since last visit
View unanswered posts in this forum
Calendar
 Forum index » Archive » Archive: General » ARG: Slumberil
[UPDATE] ZMAIL error/new Pandora message
View previous topicView next topic
Page 1 of 2 [22 Posts]   Goto page: 1, 2 Next
Author Message
Ehsan
Entrenched

Joined: 09 May 2003
Posts: 992

[UPDATE] ZMAIL error/new Pandora message

Going to http://zmail.slumberil.com/ redirects to http://zmail.slumberil.com/zmail_error.php with the following message:
-----------

1 111101000
11 11101000
111 1101000
1111 101000
11111 01000
111110 1000
1111101 000
11111010 00
#An fatal error has been encountered.
Reporting errort to Zaibatsu ...Complete
Dumping system log to secure.slumberil.com/trash/

ERROR
#Write mode inacessible
/confidential
/nmap
ATTENTION-NEIL-READ-THIS.TXT
note to greg c.txt


-----------
Several things to check out, it seems.

PostPosted: Mon Jan 10, 2005 1:43 am
Last edited by Ehsan on Mon Jan 10, 2005 2:42 am; edited 1 time in total
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

hm... http://secure.slumberil.com/trash/ATTENTION-NEIL-READ-THIS.TXT
----------eidt----------
as well as this: http://secure.slumberil.com/trash/note%20to%20greg%20c.txt

This is old, but I think I need some reassurance now that it hasn't been accessible since everything in /secure was taken off Confused
_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 2:14 am
 View user's profile
 Back to top 
Ehsan
Entrenched

Joined: 09 May 2003
Posts: 992

Okay.. seems like everything was deleted from secure, it was moved into the trash folder.

The two text files are the same as was previously found on the secure subdomain.

The confidential folder was also moved in it's entirety. However, it is still active. You can login using pandora/w4k3up, and behold! A new message from Pandora (I hope this is not a trout Confused )

Finally, I can't find the nmap subfolder.. but I'm off to research the whole ssh/nmap matrix link and come back..

--edit--
the binary string is just 1111101000 repeated on 8 lines, with incremental spacing on each.. binary 1111101000 is decimal 1000
--edit--
http://secure.slumberil.com/trash/nmap/ does exist, but it redirects to the main site.. I'm looking for subfolders or files now..

PostPosted: Mon Jan 10, 2005 2:20 am
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

Oh, cool

For posterity:
Quote:
SYSTEM ACCESS

1. View Access Logs
2. Reset Access Logs
3. View Security Camera Images
4. Reset Security Camera Images
5. View System Messages
6. Reset System Messages

Timestamp: 1999-01-07 21:31:40
Subject: Emancipation

Finally, my incarceration has come to an end. I was terrified that as soon as they accessed my Slumberil account, my mission would be undone by my incompetence. Thankfully, by your heroic actions I have been spared, my Slumberil account purged by my unknown guardian angel.

The hours being held against my will seemed to span an eternity, I painfully recounted the events that would lead to my inevitable employment "termination". I remembered what it was like to be safe, secure in the ignorance that I was a good person making a big difference in this world.

I reveled in making my Daddy proud, the profound satisfaction when he popped his first Tranquiline and told me he loved me.

That moment, upon reflection, is nothing but a nightmare now. How do I even know if that man was my father? Moreover the pills, messengers of malice, are a corruption engineered for mass manipulation of our once great society.

This cruel perversion cannot be truth, can it?

Worse still, this grand scheme cannot exist in isolation for my detriment?

I cannot describe the intimate epic scale, to be faced with all your crimes, ignorance and fragile mortality, something in that moment breaks inside, and once broken I don't believe it can ever be renewed.

I feel like I'm on a path, the future footfalls are unseen, but behind me at my back a wind that will not be ignored. The gale drives me onwards into darkness, each stubborn step defiant yet futile resistance against its intent.

Enough melancholia, for it hinders our production and your education. As yet the witch-hunt for the site "terrorists" has refocused its efforts elsewhere. However, without hard actionable proof betraying a "patsy," my respite is temporary at best.

I know now that Schlaf has made this a personal crusade, the attack is an affront to his ego, and believe me his ego is a dangerous and vengeful foe.

My need is still great, but I know in your numbers that my vindication is assured. Once the heat has passed your reward will be realized, that which you seek shall be made material.

Once again you have my warmest thanks for your intervention, but do not rest on your laurels, until the blame is fixed squarely and securely on another deserving soul.


Pandora

Previous Entry >


Zaibatsu/1.7.23 Server at secure.slumberil.com Port 80




Incorrect message entries give you:
Quote:
SYSTEM ACCESS

1. View Access Logs
2. Reset Access Logs
3. View Security Camera Images
4. Reset Security Camera Images
5. View System Messages
6. Reset System Messages

Timestamp: ERROR!
Subject: ERROR!

ERROR!


Zaibatsu/1.7.23 Server at secure.slumberil.com Port 80

_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 2:35 am
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

In case it helps, here is the folder sturcture of /secure from before:
Code:

 - secure
    - confidential
    - htpasswds
       -users
         - lumberg
         - murphy
         - night
         - philips
         - schlaf
         - usurier
         - weyland
         - wilson
    - icons
    - tmp
    - trash

_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 2:47 am
Last edited by yanka on Mon Jan 10, 2005 3:00 am; edited 1 time in total
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

Ehsan wrote:

http://secure.slumberil.com/trash/nmap/ does exist, but it redirects to the main site.. I'm looking for subfolders or files now..

http://secure.slumberil.com/trash/nmap/index.php redirects to http://secure.slumberil.com/ while index.htm and index.html just give a 404.

[edit] Seems like any .php file gives a 404 [/edit]
_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 2:51 am
 View user's profile
 Back to top 
Ehsan
Entrenched

Joined: 09 May 2003
Posts: 992

Okay I don't know where to go with this. My thoughts:

We have the weird diagonal binary thing. Spacing could be a clue or it could just be 1111101000 (or the number 1000)

And we have a reference to /nmap ... a port scanner..

And at the bottom of the secure pages it says "..at secure.slumberil.com Port 80"

So that got me thinking, did anyone try running a port scanner and looking for other areas? Can someone try http://secure.slumberil.com:1000/ .. I'm behind a proxy so I can't try different ports right now..

PostPosted: Mon Jan 10, 2005 3:04 am
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

Ehsan wrote:
Can someone try http://secure.slumberil.com:1000/ .. I'm behind a proxy so I can't try different ports right now..

In Netscape, I get this message: "The connection was refused when attempting to contact secure.slumberil.com:1000"
_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 3:08 am
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

er...
http://secure.slumberil.com/trash/nmap/nmap/
Is it something I'm not supposed to find?
_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 3:16 am
 View user's profile
 Back to top 
Ehsan
Entrenched

Joined: 09 May 2003
Posts: 992

Great work Yanka Smile

Although it seems they're actually running Apache and not Zaibatsu Wink looks like the standard nmap distribution.. right?

--edit-- looking around, I would say this is not ingame. The dates are real so I assume they just unpacked the real nmap in the fake nmap folder, and used it to create something we can use ingame...

PostPosted: Mon Jan 10, 2005 3:25 am
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

Does that mean we should disregard /nmap altogether, then? Since it's probably not likely to contain something in-game? In addition, should we pretend we didn't find it? I'm not even hoping to make any sense with that Smile

In other news, do you think it's weird that her last message is "msg=6", yet there are no messages before it? And this message doesn't show up under "msg=7". [edit] but it does show up under "msg=9" [/edit]

Also, where are all the nice access logs and security camera images? Mr. Green
_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 3:43 am
 View user's profile
 Back to top 
Ehsan
Entrenched

Joined: 09 May 2003
Posts: 992

Because we don't have any other leades and the binary square thing isn't interesting, I'm following up on the (out of game) nmap folder..

Lots of nmap distros here http://ftp.localareasecurity.com/pub/wiretapped/network-mapping/nmap/

The contents are very similar to nmap-3.00.tar.bz2

So checking out other folders I got..
http://secure.slumberil.com/trash/nmap/install

Which lead me to
http://secure.slumberil.com/trash/nmap/nmapwin/
Which is a windows frontend for nmap (http://sourceforge.net/projects/nmapwin)


I'm just trying to figure out what they were thinking when they unpacked everything in a website! Maybe it'll lead to something like scan.php based on a real source file..

PostPosted: Mon Jan 10, 2005 4:35 am
 View user's profile
 Back to top 
Orphaen forgot to login..
Guest


It ate my previous post, let's see if this goes through.

I went a bit crazy with the analyzing of the binary earlier. And I did convert everything I posted (even some even isani-er stuff on my HD, got gibberish.)..
http://xmyth.proboards44.com/index.cgi?board=general&num=1105336663&action=display&start=45

Yank, maybe there are messages in between that might be released later or something?
I know Greg and Neil got into it since they were both 'not leaving messages on the Zai.'
Then again, those messages were in text so I'm just floating here..

PostPosted: Mon Jan 10, 2005 5:36 am
 Back to top 
burningsquid
Boot

Joined: 03 Dec 2004
Posts: 16

Ehsan wrote:
Okay I don't know where to go with this. My thoughts:

We have the weird diagonal binary thing. Spacing could be a clue or it could just be 1111101000 (or the number 1000)

And we have a reference to /nmap ... a port scanner..

And at the bottom of the secure pages it says "..at secure.slumberil.com Port 80"

So that got me thinking, did anyone try running a port scanner and looking for other areas? Can someone try http://secure.slumberil.com:1000/ .. I'm behind a proxy so I can't try different ports right now..


regarding the binary, because there are 10 digits in the sequence, and a byte only has 8, the result is that each byte is off by two If you take the the error, remove all the whitespace, and seperate it into bytes you get this:
Code:

11111010
00111110
10001111
10100011
11101000
11111010
00111110
10001111
10100011
11101000

These bytes don't translate to anything useful in ASCII or EBCDIC, however, they translate to
Code:

fa 3e 8f a3 e8 fa 3e 8f a3 e8

I have no idea what the signifigance of this is, other than the fact that it is a sequence of 5 bytes repeated.

EDIT: i miss counted the number of digits per line, its 10, not 9, + a space, which i removed. Embarassed

PostPosted: Mon Jan 10, 2005 2:24 pm
Last edited by burningsquid on Mon Jan 10, 2005 5:21 pm; edited 1 time in total
 View user's profile
 Back to top 
yanka
Fickle


Joined: 06 Oct 2003
Posts: 1214
Location: undesirable

Re: It ate my previous post, let's see if this goes through.

Orphaen forgot to login.. wrote:
maybe there are messages in between that might be released later or something?
I know Greg and Neil got into it since they were both 'not leaving messages on the Zai.'
Then again, those messages were in text so I'm just floating here..

You mean Pandora's transmissions? I guess there is no way to tell yet; however, I do wonder what the logic behind the numbering of messages is. Will the next message be #12, #15, or something different entirely? Is it even relevant? Who knows...

I'm not sure what you mean about Greg and Neil. Do you mean that they certainly read it, that the binary might be from one of them, or that Pandora is one (or, conversly, not one) of them? Or something else? Sorry for not making too much sense - I'm happily sleepdeprived Coffee
_________________
Annushka has already bought the sunflower oil, and has not only bought it, but has already spilled it.

PostPosted: Mon Jan 10, 2005 3:00 pm
 View user's profile
 Back to top 
Display posts from previous:   Sort by:   
Page 1 of 2 [22 Posts]   Goto page: 1, 2 Next
View previous topicView next topic
 Forum index » Archive » Archive: General » ARG: Slumberil
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
You cannot post calendar events in this forum



Powered by phpBB © 2001, 2005 phpBB Group