this post was submitted on 11 Nov 2023
2 points (100.0% liked)

CYBFARM

56 readers
1 users here now

An epochalyptic dystopia.

This is the official Lemmy community for the CYB3R HUNT, an online adventure of which you are the hero!

Rules

  1. No spoilers.
  2. No disclosure of hunt assets (files, cookies, passwords, ...)
  3. Respect other hunters
  4. No spoilers.

Help

To ask for help, team up with other hunters, or report eventual bugs, use the official IRC channel, or contact the admin directly via email.

founded 1 year ago
MODERATORS
 

Hey everyone !

With so many people stuck at 200 points on the board, I'm wondering if the chapter 2 isn't too "abstract" ?

The Cyb3r Hunt is meant to be challenging, but it shouldn't discourage players because they can't figure out what to do.

For those that went past it, did you find the solution sketchy ? Did it all make sense, or you went past it without really understanding what all these files were for ?

For those stuck, where are you stuck at (please use a spoiler tag) ?

I'm considering removing some files I consider "optional", and changing the hint to make it less like a guessing game as to what to do.

Any opinions on this ?

you are viewing a single comment's thread
view the rest of the comments
[–] sivanataraja 1 points 1 year ago (1 children)

Hi, I’m at 300 points (SIV). Chapter 2 was challenging, there’s no denying. The most difficult part, for me was

spoilerto fetch the files from the gopherhole because torbrowser would not manage .onion URI even tough I had installed OverbiteWX addon. And I didn’t find how to use gopher(1) to access an .onion URI. So my solution was to use curl over torsocks. Maybe there was a simplier solution.
Then understanding the reason to be for the files took me some time but I got it in a few hours. The other difficult thing, for me, was

spoilerto understand how to configure Yggdrasil: at first, I thought I had to add the address provided by the nmap file to Yggdrasil’s conf file. Documentation on the web is scarce and it took me some time to get it: I had to use a public IPV6 address to connect to the Yggdrasil network in order to connect to the farm server.

I would not remove any file, if I were you: the difficulty laid in using Yggdrasil, not understanding what to do.

But now, I’ve been stuck for several days at chapter 3 by

spoilerthe puzzle… I think a found a relevant clue I hadn’t given much attention: "chisel". I hope I’m in the right direction, because I don’t really understand if I’m supposed to get that key to setup a SOCK5 proxy, and then access the MINE, or if getting that key requires the SOCK5 proxy before. Documentation in the wiki and on Chapter 3 page does not help: it tells me I need this proxy to access any ressource from the mine. Is the git puzzle one of them or the key I need to setup the proxy, which means I should get it without the proxy? It’s a kind of ouroboros thing to me. 

Well, this game is one of the most challenging ones I’ve ever played and I enjoy every moment of it. Thanks.

[–] [email protected] 2 points 1 year ago (1 children)

Thanks for this very detailed answer !

chapter 0x02You did right with curl. Though there are other gopher clients that could have worked this way (but not all of them support torsocks).

The Ygg part is what I want to make more clear, because when you're at the gopher hole, you shouldn't really care about the nmap/passwd/wtmp file. Your only goal should be to setup Ygg and proceed with the info from the wiki. And that's definitely not clear enough from the feedbacks I got from this chapter.

Now regarding your current problem on chapt.3:

chapter 0x03"chisel" is only there because I couldn't find a better rhyme haha. Now to get you onto the correct direction: there are 2 socks5 proxies. One that you can use right away to only let you fetch the puzzle, and one that you'll use later on to get full access to the mine. Perhaps I should look into making the hint more explicit at this stage too. I'll look into it ;)

Thanks for your feedback, I'm glad you're enjoying it and hope you'll get through it, because the funniest part remains !

[–] sivanataraja 1 points 1 year ago (1 children)

Thanks a lot for your help!

spoilerMy next move was to try and install https://github.com/jpillora/chisel to fetch the content via git protocol through the proxy because I cannot force git(1) to use the SOCKS5 proxy (no option seems to work: it’s only with https or http). So, maybe chisel was just there for the rhyme. Still trying…

[–] [email protected] 2 points 1 year ago

Oh wow I had no idea this existed, but yeah at first glance, this looks like a dead-end. That's definitely not how you're supposed to do it (and it doesn't look like it could work anyway).

::: spoiler You were on the right track at first, except it's not http. Look for other proxy settings in git-config(1) :::