Hacker Evolution Guide

Hacker Evolution Guide
                                
                        Hacker Evolution
                                
                Unofficial Strategy Guide and FAQ
                                
                         by Kasey Chang
                                
                      released May 22, 2007


1    Introduction
   
This section is for "what the FAQ is about" and things like that.
Feel free to skip this section.

If you like the FAQ, please send me a dollar. :-)  See [1.3]

This FAQ is about "Hacker Evolution", a "hacking simulation"
created and published by exosyphen.


1.1   A WORD FROM THE AUTHOR
    
This is a FAQ and guide, NOT a manual, not that you really need a
manual to play this game. Besides, all the commands are listed
when you press F1, or type HELP in the console.

This USG only covers the PC Version, since this only existed on
the PC at time of this guide's creation.


1.2   TERMS OF DISTRIBUTION
    
This document is copyrighted by Kuo-Sheng "Kasey" Chang (c) 2007;
all rights reserved excepted as noted above in the disclaimer
section.

This document is available FREE of charge subjected to the
following conditions:

1)This notice and author's name must accompany all copies of
  this document: "Hacker Evolution Unofficial Strategy Guide and
  FAQ" is copyrighted (c) 2007 by Kasey K.S. Chang, all rights
  reserved except as noted in the disclaimer."
  
2)This document must NOT be modified in any form or manner
  without prior permission of the author with the following
  exception: if you wish to convert this document to a different
  file format or archive format, with no change to the content,
  then no permission is needed.
  
  2a) In case you can't read, that means TXT only. No banners,
  no HTML borders, no cutting up into multiple pages to get you
  more banner hits, and esp. no adding your site name to the
  site list. [Small exception: a "small" toolbar with no banners
  embedded is okay. See IGN or Neoseeker for examples.]
  
3)No charge other than "reasonable" compensation should charged
  for its distribution. Free is preferred, of course. Sale of
  this information is expressly prohibited. If you see any one
  selling this guide, contact me (see below).
  
4)If you used material from this, PLEASE ACKNOWLEDGE the source,
  else it is plagiarism.
  
5)The author hereby grants all games-related website the right
  to archive and link to this document to share among the game
  fandom, provided that all above restrictions are followed.
  
Sidenote: The above conditions are known as a statutory contract.
If you meet them, then you are entitled to the rights I give you
in 5), i.e. archive and display this document on your website. If
you don't follow them, then you did not meet the statutory
contract conditions, and therefore you have no right to display
this document. If you do so, then you are infringing upon my
copyright. This section was added for any website that don't seem
to understand this.

For the gamers: You are under NO obligation to send me ANY
compensation.  However, I do ask for a VOLUNTARY contribution of
one (1) US Dollar if you live in the United States, and if you
believe this guide helped your game. If you choose to do so,
please make your US$1.00 check or $1.00 worth of US stamps to
"Kuo-Sheng Chang", and send it to "2220 Turk Blvd. #6, San
Francisco, CA 94118 USA".

If you don't live in the US, please send me some local stamps. I
collect stamps too.

1.3   VOLUNTARY CONTRIBUTION
    
Gamers who read this guide are under NO obligation to send me ANY
compensation.

However, a VOLUNTARY contribution of one (1) US Dollar would be
very appreciated.

If you choose to do so, please make your US$1.00 check or $1.00
worth of stamps to "Kuo-Sheng Chang", and send it to "2220 Turk
Blvd. #6, San Francisco, CA 94118 USA".

If you don't live in the US, please send me some local stamps. I
collect stamps too.

For the record, out of ALL the FAQs I wrote (over 60 at last
count) over the past ten years or so, I've received exactly 35
dollars and 8 sets of stamps, as of release of this guide. So I'm
NOT making any money off these guides, folks.


1.4   HOW AND WHEN TO CONTACT ME
    
PLEASE let me know if there's a confusing or missing remark,
mistakes, and thereof... If you find a question about this game
that is not covered in the USG, e-mail it to me at the address
specified below.  I'll try to answer it and include it in the
next update.

Please do NOT write me for technical support. That is the
publisher's job. You can find them at
http://www.exosyphenstudios.com

Please do NOT ask me to answer questions that have already
answered in this FAQ/guide. It makes you look REALLY idiotic.

I will NOT answer stupid questions like the ones above unless I'm
in a really good mood. If you send questions like that, do NOT
expect a reply.

The address below is spelled out phonetically so spammers can't
use spambots on it:

Kilo-Sierra-Charlie-Hotel-Alpha-November-Golf-Seven-Seven AT
Yankee-Alpha-Hotel-Oscar-Oscar DOT Charlie-Oscar-Mike

To decipher this, simply read the first letter off each word
except for the numbers and the punctuation. This is "military
phonetics" or "aeronautical phonetics" in case you're wondering.

This document was produced on Microsoft Word 2003. Some editing
was done with Editpad (editpadclassic.com).


1.5    THE AUTHOR
    
I am just a game player who decided to write my own FAQs when the
ones I find don't cover what I want to see.  Lots of people like
what I did, so I kept doing it.

Previously, I've written Unofficial Strategy Guides (USGs) for
XCOM, XCOM2:TFTD, Wing Commander, Wing Commander 2, Wing
Commander 3, Wing Commander 4, Privateer, Spycraft, 688(I)
Hunter/Killer. Mechwarrior 3, MW3 Expansion Pack, Mechwarrior 4,
Mechwarrior 4: Black Knight, Need for Speed: Porsche Unleashed,
The Sting!, Terranova, Fallout Tactics, Starfleet Command Volume
II, DS9: The Fallen, DS9: Dominion War, Driver, Warlords:
Battlecry, Monopoly Tycoon, Dungeon Siege, and a few others.

To contact me, see 1.4 above.


1.6   DISCLAIMER / COPYRIGHT INFORMATION
    
Exosyphen is the creator and publisher of Hacker Evolution.
http://www.exosyphenstudios.com

This USG is not endorsed or authorized by exosyphen.

The information compiled in this USG has been gathered
independently through the author's efforts except where noted
otherwise.

This document is based on the V1.0.0.1 release. Please note that
new releases are available all the time and may add new features,
commands, and so on. New "levels" may also become available. This
guide covers the "initial release", which contains total of 10
levels.


1.7   HISTORY
    
23-MAY-2007    Initial release
               


2    Hacker Evolution General Info
   

2.1   THE MOST FREQUENTLY ASKED QUESTIONS
    
Q: Can you send me the game (or portions thereof)?
A: No. Download the Demo from http://www.exosyphenstudios.com or
http://www.exosyphen.com

Q: Can you send me the manual? (or portions thereof)
A: It's available on the website.

Q: Can you tell me how to play the game?
A: Read the manual please, and hit F1 for help.

Q: How big is the install?
A: About 87 megs total

Q: Is there a patch?
A: Use the auto-update tool. As of this release, it's V1.00.0084

Q: What about some cheat codes?
A: Check the last section


2.2  HACKER EVOLUTION HISTORY
    
Exosyphen is a game studio based on Romania that specialized in
"hacking sims", basically puzzles that simulates hacking into
other computers in order to accomplish several objectives.


2.3   HARDWARE REQUIREMENTS
    
From official website:

*   Windows ME/XP/2000/2003 or Vista
*   Microsoft DirectX 8.0 (http://www.microsoft.com/directx/)
installed
*   Pentiumr 1 GHz processor or faster, 512Mb RAM, 200Mb free
disk space
*   DirectX 8.0 compatible videocard w/ 16 MB video memory
*   Microsoft compatible keyboard and mouse

2.4   HOW DOES THIS GAME PLAY?
    
It's basically a puzzle game wrapped in a "shell" of simulated
hacking.  The console involves typing, but you can use the TAB
key to auto-complete many commands and parameters.


2.5   BUGS AND FIXES
    
The game is very stable and never crashed even once on my test
computer.

You should get the latest patch via the auto-update tool, and
close any extra programs such as virus checker, firewall (unless
you're going online), and such before starting the game. That
seems to help.


2.6  EXPANSION PACKS? SEQUELS? RELATED TITLES?
    
Exosyphen have many expansion packs planned, many will free to
registered users. However, none has been released at this time.


2.7  SOME COMMON SUPPORT ISSUES
    
None at this time.

There are some reported incompatibilities with WinVista, but none
has yet been confirmed.



3    Interface
   

3.1  PLAY SCREEN
    
 Upper right is a "control panel" with the "mission clock", as
well as diagram of your computer, progress of a certain task such
as decrypt, crack, or download / upload. It also shows predicted
trace time, if any, and how many bounces are you using.

Lower right is the message pane, where "e-mails" and other
messages will appear.

Upper left is the main view window, which shows you all the
servers visible so far (which is probably NOT all of them) and
your current bounce configuration, if any. Click on a host to
toggle bounce on-off.

Lower left is the console, where you can type in commands to
execute various hacks, upgrade your PC, and so on. Please type in
HELP or hit F1 to see the help screen.


3.2  CONSOLE COMMANDS
    
Please check the downloadable manual from exosyphen.com for full
documentation. This is a quick summary only

Help      displays help screen

Scan      checks if host is active. If yes, displays stats 
          about the host

Connect   connects to the host specified, default port is 80, 
          or specify other ports

Logout    closes the connection

Ls        also "dir", shows what's on the server at this port

Cat       displays the file on the console, even binary stuff.

Download  downloads file to your local server. Must have 
          enough space

Upload    uploads file from your localhost to connected server

Exec      used to run a program, usually exploit,

Clear     clear the console screen

Decrypt   break the encryption of the server, depends on CPU
          speed

Crack     break the password of the server service, depends
          on CPU speed

Transfer  transfers $$$ to your computer. Server must be fully
          hacked (every port) as well as decrypted to give money

Abort     use abort to stop transfer, upload, download, decrypt, 
          or crack attempts, usually before the trace completes

Config    displays your computer config and affected "factors"

Upgrade   displays upgrade info. Add one of the part codes to
          actually perform the upgrade

Delete    delete the file on the current machine (localhost
          if you're not logged into anyone)

NOTE: 1.00.0084 adds a few commands, namely DOWNGRADE, BOUNCE and
UNBOUNCE. You may wish to consult the README file for that
version. They are not necessary to finish, but they sure add a
certain flavor to it.


3.3  GENERAL GAMEPLAY FAQS
    
Q: How do you save a game?
A: You don't. Game is automatically saved. Each level should last
no more than 1 hour, usually 20 minutes or so.

Q: I think I did something really wrong. How do I restart a level?
A: Hit ESC and quit out of the current level. Load your profile 
again and it'll restart at the current "level". 


4    Hints and Game Mechanics
   

4.1  GENERAL HINTS
    
* As a "hacker" you must learn to look for EVERY last bit of
information, in the most unlikely places.

* Every host is valuable. So acquiring hosts to break and serve
as bounce points is of the utmost importance.

* Many hosts also have $$$, which are required for killtrace runs
and equipment improvements.

* Browsing files not only can locate you more host names, it can
also reveal passwords, (or hints to some passwords), even
instructions on how to use certain exploits, commands, and bin
files. Thus CAT every file you come across, encrypted or not,
binary or not. In the files lie the clues, be it passwords or
host names.

* Most servers will give you a line or two of text, sometimes a
full screen, when you login. That often tells you about other
hosts.

* e-mail address contains a domain name, don't forget this!

* Dot-hackers.net is a good place to find exploits... if you can
get in.

* You want to minimize the number of "crack" attempts, as those
raise your trace level by 15% each run. So every 2 crack attempts
you run, you need to run killtrace 3 times. Use exploits or any
other method before using a crack.

* Study what's protecting what, then consider the attack-plan. Go
through the weak spots. Use the minimum amount of bounce(s)
needed for enough time.

* Spread out your bounce attempts among multiple bounce hosts
whenever possible. If you use one up you can't do a "double
bounce" later.

* Do NOT crack servers and services that you do NOT need. Money
is a FINITE asset in this game.

* Do NOT over-upgrade your hardware. That money may be needed to
run killtrace before end of mission.

* If you see a mission objective that says to reduce trace level
below a percentage, save your $$$. You can always upgrade at the
beginning of next mission.

* RESET LEVEL: If you ever gotten into a situation where you are
at a DEAD END, there's no money to be had, but you need to reduce
your trace level, or your level's so high you can't do anything,
clearly something went wrong. It's time to "reset" the level and
start over. Hit ESC and quit the level, then load your profile
again. There are exceptions: a) use a cheat code, or b) use the
V.084's "downgrade" commands to sell off some hardware and raise
some capital

4.2  FINISHING HARDWARE
    
I finished the game without the V0.84 update, so it is quite
possible. Here's the equipment I finished level 9 with:

   *  2 x 2 GHz CPU
   *  3 GB of RAM
   *  standard 1 MBit modem
   *  Level 1 firewall

Thus, again, do NOT spend too much money on upgrades.


4.3  HARDWARE TECHNICAL DATA
    
Every GHz of CPU will reduce the amount time needed for
decryption or password cracking. Two separate 2 GHz CPU is same
as a single 4 GHz CPU for this purpose. We'll just call it 4 GHz
of CPU power. 4 GHz of CPU power will do things 4 times faster
than 1 GHz of CPU Power.

RAM is needed to store things. It does not affect speed. There
are some files in the higher levels levels that need 3 GB of QRAM
to store. You'll know when you see it.

Firewall multiplies the trace time by a set factor. I think level
1 multiplies it by 1.5, and level 2 multiplies it by 2.0, though
it could be 2.0 and 3.0 respectively. So essentially it gives you
more time to complete your crack or decryptions, and transfers.

Use the CONFIG command to see your current "hardware
multipliers".

NOTE: V84 or later of H-Evo have a "downgrade" command that
allows you to trade-in older CPU and RAM and such for 90% value
back. It is not really needed, but it is very much appreciated as
it allows you to recover from a "dead-end" situation.


4.4  TRACE TIME
    
Trace time is calculated by number of bounces and firewall
levels. Base time is about 14 seconds (no firewall). Additional
bounces will gain you extra 14 seconds or so per bounce. Multiply
that by the firewall factor, and you get the overall trace time.

(Estimated, not real formula)


4.5  TRACE LEVEL
    
Trace level is a set value that depends on your actions.

*    Successful crack    15%
*    Successful decrypt  5%
*    Scan host that doesn't exist  1%
*    Exec exploit   1%
*    You have been traced     50%

If your trace level reaches 100% you lose the level and must
start over.

It costs $500 to reduce your trace level by 10% by the KILLTRACE
command.

Thus, you should NEVER allow yourself to be traced. Abort out of
traceable processes if you see that it's NOT going to finish in
time. You may waste the bounce count, but it's better than
getting traced and lose the entire level soon after.

Watch time limits carefully. Even if your process finishes just
0.2 seconds before the trace, you are still safe.


4.6  SCORING
    
Score is computed by following:

*    # of passwords cracked
*    # of servers decrypted
*    # of servers taken over (i.e. full access)
*    Amount of money transferred
*    Time left on clock (bonus amount of 300 decreases at 10 pts
per minute) EX: If you finished at 20 minutes, your bonus is 100
pts (300 - 20*10 = 100)
*    Bonus conditions, including 0% trace level (extra 500 pts),
found all hosts (extra 500 pts), dynamic difficulty, and more.


5    Level Hints
   

5.1   TUTORIAL
    
Please just follow the on-screen instructions.

Remember to grab ALL the money you can, not just that $1000 as
required.

However, there is a way to get maximum amount of money, and that
means you can't follow the instructions step by step, but
instead, finish the objectives a bit OUT of order.

Q: What do you mean by "out of order?"
A: Do the 2nd objective first. Host name is already given. Use
that host to crack the first one w/o getting traced. 


5.2  LEVEL 1: THE BEGINNING
    
Please follow the walkthrough in the manual, which can be
downloaded from http://www.exosyphen.com

Q: Where are the other hosts? How do I find them?
A: Host names can be hidden in the most innocuous places: inside
files (even binary files), in the login / welcome prompts, on the
homepage, and so on and so forth.

Q: Can you be more specific?
A: Explore the unprotected ports, surf around, and look for
domain names. Once you found a few, see that they lead you.

Q: So what do I do with the connection.log file?
A: Read it, then upload it to the FSA server. Follow the e-mail's
instructions!


5.3  LEVEL 2: XENTI SPACE STATION
    
Q: What is a trojan?
A: A trojan, in the computer world, is a program that looks
innocent and harmless, but actually does bad things behind the
scenes.

Q: I can't crack / decrypt fast enough! Help?

A: Time for a hardware upgrade, I guess. Or use more bounces.

Q: Should I accept the trade offer from dot-hackers.net?
A: Absolutely. You can use the money, always. 

Q: But which terminal hacked us?
A: Read connection.log very carefully, check each and every host.
How do you know if one exists, or not?

Q: How do you get rid of the trojan?
A: Just "DEL" it.


5.4  LEVEL 3: CHECKPOINT
    
Q: What does the first objective really mean?
A: "Scan sec.interlink.net", then you should understand.

Q: Now what?
A: Do you accept the offer from dot-hackers.net?

Q: Let's say that I do?
A: You miss out on some money, but you get a shortcut to the
source.

Q: And if I don't?
A: You'll need to crack a host to get more clues, but you arrive
at the same spot, albeit via longer route, and a wee bit more
money.

Q: I got the machine used to crack. Now what?
A: CAT everything, you should find the bank statement and thus
the account number.

Q: How do I stop the trojan and restore connectivity?
A: You did try to CAT the .BIN files, right? It tells you so in
one of them.


5.5  LEVEL 4: NOTHING IS RANDOM
    
Q: How do I crack that atm? I can't crack that 8-char password
w/o getting traced!
A: Instead of attacking the link, why not attack the atm
directly?

Q: I found the transaction.log, but I can't download it! I don't
have enough space!
A: Time to upgrade your hardware!  (Or delete some stuff on
localhost)

Q: So where is this account transaction server?
A: Perhaps the objective is a bit too literal. Example: if
account is ab12345, then server is ab12345.bank.com

Q: So how do I get rid of this trojan?
A: Delete the file. That's it, really.

Q: Where is that extra host on this level?
A: Log into the bank server and look around carefully. You may
notice something.


5.6  LEVEL 5: RUNDOWN
    
Q: Uh. which firewall should I start with?
A: The one with the lowest payoff, probably. It's likely the
easiest to crack.

Q: Argh! I can't even crack that one! Help!
A: Maybe it's time for another CPU upgrade.

Q: Help! I ran out of bounce hosts!
A: *Sigh* start the level over. Spread out the bounce uses so you
always have two hosts remaining in case you need a double-bounce.

Q: Where is the serverfreeze.code?
A: It's in a firewall server.

Q: But I checked all four of them! What are you talking about?
A: Perhaps you should read the welcome prompts again, this time
VERY carefully.

Q: I still don't get it. There are MORE than four firewall
servers?
A: There are actually 5.

Q: Where's the backup server?
A: Read some code and you'll find it.

Q: What code?
A: That code you're supposed to delete.

Q: But I deleted it already! Help?
A: Too bad. Restart the level!

Q: Where can I find more money?
A: In the "other" firewall server. The "other" way to find it is
by reading some code.


5.7  LEVEL 6: THE CHASE
    
Q: I found the wi-fi node he used. Where is he now?
A: Perhaps, you should check for travel arrangements.

Q: I found the airline, but they don't seem to have wi-fi. Now
what?
A: Appearances *can* be deceiving.

Q: How do I cancel the flight reservation?
A: Read the INFO file.

Q: I found his IP address. Now what?
A: Scan it.

Q: But there's nothing there!
A: Are you at the CORRECT wifi node?

Q: His file is too big! How do I download it?
A: Upgrade your RAM to 3 GB

Q: What is the monitor trojan?
A: It's that monitor.bin you've used before.

Q: Where can I find monitor.bin?
A: There are at least TWO hosts that have it.


5.8  LEVEL 7: D‚J… VU
    
Q: Where is dot-hackers.net?
A: Look at that e-mail you got.

Q: Where can I get some money?
A: See previous hint.

Q: Why doesn't the x-filemanager.exploit work?
A: You got the wrong version of it. CAT it.  Look for another
one.

Q: I checked auth.nphone.com and it leads me nowhere. Help?
A: You forgot to check the files in that place you were at.


5.9  LEVEL 8: THE MAZE
    
Q: Uh, where do I start?
A: At the email from "John Davis"

Q: I don't get it. Please explain?
A: E-mail has a domain name too.

Q: I got that. Now what?
A: Let's just say it must start at the leftmost side, and is the
easiest to hack. The other hint is. you should have started
YESTERDAY, as the e-mail says!

Q: Huh? What about yesterday?
A: Today is the December 29th, in the game. So yesterday is __

Q: Got that, but I don't understand the first hint.
A: Download the hint, and you'll see.

Q: You mean the constant?
A: Yes, the constant is the hint.

Q: Same at the next hint?
A: Yes, the constant is the hint.

Q: Next is largest and smallest. Is it that simple?
A: Yes, it really IS that simple.

Q: I don't get the assembly language hint. Help?
A: Just take a piece of paper, make 2 columns. A, and B. And try
to follow the instructions, and do it.

Q: Is the last hint as easy as I thought it was?
A: Yes it is.

Q: Ack! I made a wrong turn and hacked the wrong server! What do
I do now?
A: Reset the level. There's very little extra money and you must
make the right decision every step of the way.


5.10 LEVEL 9: END
    
Q: Uh, where do I start?
A: Same as last level. with the e-mail.

Q: But, there's nothing really there.
A: Look again, VERY carefully. VERY similar name.

Q: Okay found it. Where are the firewalls?

A: Look CLOSER at the second one.

Q: Got that. Where's the AI core server though?
A: You didn't pay attention, did you? Check each firewall again.

Q: What order should I assemble the strings for the password?
A: What order did you see the stuff listed?

Q: I tried that order and it doesn't work! Help?
A: Reverse the hierachy



6    Level Walkthrus
   

6.1  TUTORIAL
    

6.1.1     Full objectives list
     
NOTE: Objectives need NOT be completed in order given.

1) Hack into the [core.hacker-evolution.com] server. The server
has one open port(80) on which you must gain access. (Tip : use
the CRACK command)

2) Obtain $1000 in your money balance. Money can be obtained, by
transferring it from hosts that have a positive money balance.

3) Download the connection configuration file from [atm.hacker-
evolution.com]

4) Hack into the [hacker-evolution.com] server ftp service.  Note
: Follow the instructions on how to do this with an exploit,
rather then cracking it.

5) Hack into the [ssl.hacker-evolution.com] server. The server
has one open port(80) on which you must gain access. (Tip : use a
bounced link, to avoid getting traced.)

6) Hack into the [user.hacker-evolution.com] server. The server
has one open port(80) on which you must gain access. (Tip : you
must find the password and use the LOGIN command.)

7) Reduce your trace level below 50%. You can achieve this by
using the KILLTRACE command.


6.1.2     General Strategy
     
You don't need one for the TUTORIAL level, do you?

Keep in mind that if you follow the instructions to the letter,
you WILL be traced. This spikes your "global trace level" by 50%.
When it reaches 100%, you are "caught" and it's game over. This
is supposed to teach you that it's NOT always "game over" if you
got traced.

If you rather NOT get traced, then follow walkthrough, which will
give you max money and minimum trace levels.


6.1.3     Walkthru
     
You don't need one for the TUTORIAL level, do you? However, to
get the most money and least trace amount, you'll need to do
something slightly different from the script.

From now on, the main commands are listed first, followed by ##
for comments. Example

type these in up to the ## do not type these, as these are just
explanations

The only exceptions are the BOUNCE commands. Not all versions
support console bounce commands, so please grab your mouse and
select the bounce servers on the map if your version does NOT.
Unbounce all means remove all bounce points.

     Scan atm.hacker-evolution.com  ## this is NOT cheating since
     ## the hostname was given as an objective
     
     Decrypt atm.hacker-evolution.com
     
     Connect atm.hacker-evolution.com
     
     Transfer 1000 ## Objective 2 complete
     
     ## NOTE: Repeat transfer money until you get ALL the money
     
     Ls   ## check which files are here
     
     Download connect.config ## Objective 3 complete
     
     Logout
     
     Bounce 1  ## add any valid bounce so you have 1 bounce
     ##(right now, just atm.hacker-evolution.com)
     
     Crack core.hacker-evolution.com ## now you can crack 
     ## the server w/o traced
     
     Unbounce all
     
     Connect core.hacker-evolution.com ## objective 1 complete
     
     Ls
     
     Download heftpd.exploit  ## any exploit is worth downloading
     
     Cat autoexec   ## nothing important
     
     Cat passwd     ## remember this password, pass945
     
     Scan user.hacker-evolution.com
     
     Exec heftpd.exploit hacker-evolution.com     ## objective 4
     
     Logout
     
     Login user.hacker-evolution.com pass945 ## objective 6
     
     Bounce 2 ## add any 2 hosts for bounce
     
     Crack ssl.hacker-evolution.com     ## objective 5
     
     Killtrace ## repeat as needed to complete objective 7
     

6.1.4      Full server list
     
     core.hacker-evolution.com
     
     atm.hacker-evolution.com
     
     hacker-evolution.com
     
     ssl.hacker-evolution.com
     
     user.hacker-evolution.com
     

6.2  LEVEL 1: THE BEGINNING
    
Please follow the walkthrough in the manual.


6.2.1     Full Objectives List
     
1) Retrieve the connection log file from the New York Exchange
server, in order to be able to identify the source of the attack.

2) Identify the server used to remotely connect to the New York
Exchange server. You can do this by investigating the
[connection.log] file

3) Upload a copy of the [connection.log] file to the FSA
fileserver.

4) Retrieve the users log file from the server that was used to
remotely connect to the New York Exchange server.

5) After identifying the user from the log file from above,
download his/her profile file from xenti.com, and upload a copy
to the FSA fileserver.


6.2.2     General Strategy
     
We will investigate the ny-exchange.com server a bit, to locate
any clues to external servers. Once we located some more hosts,
we can use those as bounce hosts to crack ny-exchange and get
inside.

You may want to buy Firewall level 1 before you embark on actual
hacking. It slows down traces.


6.2.3     Walkthru
     
     connect ny-exchange ## let's see what's there now.  
     ## notice there's a "designed by xenti-design,com" sig?
     
     ls   ## notice the index.new?
     
     cat index.new  ## notice the bottom, that says 
     ## "defaced by dot-hackers.net"?
     
     logout
     
     scan xenti-design.com ## on the map, and unprotected!
     
     connect xenti-design.com ## that will "take it over", 
     ##so to 
     
     Logout
     
     Scan dot-hackers.net ## they're now on the map!
     
     decrypt dot-hackers.net
     
     crack dot-hackers.net
     
     connect dot-hackers.net
     
     ls   ## let's see what they have.
     
     download x-filemanager.exploit  ## very useful, as 
     ##ny-exchange.com runs x-filemanager!
     
     transfer 2000  ## transfer enough NOT to trigger the 
     ## full trace, repeat until you get all the money
     
     logout
     
     exec x-filemanager.exploit ny-exchange.com ## that breaks
     the other service on server
     
     connect ny-exchange.com 99
     
     download connection.log  ## objective 1 complete!
     
     logout
     
     connect files.fsa.gov 81
     
     upload connection.log  ## objective 3 complete
     
     logout
     
     cat connection.log ## read it, and scan the various
     terminal names. Only one exists. terminal-83
     
     scan terminal-83.xenti.com ## objective 2 complete!
     
     bounce 1 ## add hosts so you have 2 valid bounces
     
     decrypt terminal-83.xenti.com  ## terminal-83 has hefty
     encryption and you need two bounces to prevent getting
     traced.
     
     unbounce all
     
     crack terminal-83.xenti.com ## leave a bounce point if your
     CPU can't handle it
     
     del connection.log ## we don't need the local copy any more,
     and we need the space
     
     connect terminal-83.xenti.com
     
     download users.log  ## objective 4 complete
     
     logout
     
     cat user.log  ## if you study the timing of the attack vs.
     the users.log, tjohn is the culprit.
     
     bounce 2  ## any two bounces
     
     decrypt xenti.com   ## again, big encryption needs two
     bounces at least
     
     unbounce all
     
     bounce 1  ## just 1 bounce needed to crack password
     
     crack xenti.com 210 ## leave one bounce to crack the
     password
     
     unbounce all
     
     connect xenti.com 210
     
     download tjohn.profile
     
     logout
     
     killtrace ## repeat until satisfied
     
     connect files.fsa.gov 81
     
     upload tjohn.profile
     
     killtrace ## repeat until you use it all up or reach 0%,
     whichever you prefer
     

6.2.4     Full Server List
     
     ny-exchange.com
     
     dot-hackers.net
     
     xenti-design.com
     
     terminal-83.xenti.com
     
     files.fsa.gov
     
     xenti.com
     

6.3  LEVEL 2: XENTI SPACE STATION
    
Control Center to all satellites and space station was lost. Must
restore connection and find culprit.


6.3.1     Objectives
     
1) Retrieve the connection log file from the Xenti Corporation
Control Center, in order to be able to identify the source of the
attack.

2) Find the trojan that has been injected in the kernel services,
on the Xenti Corporation Control Center, and delete it.

3) Go back to xenti.com. There should be a log file to show who
made the last changes there. Retrieve a copy of that logfile and
upload it to our server (files.fsa.gov)

4) Identify the server used to connect to xenti.com, to create
the new employee profile.


6.3.2     General Strategy
     
Control center itself is protected. We need to find many outside
hosts for bounce and such before starting our actual attack.


6.3.3     Walkthru
     
     ## There may be sections that I forgot to include a bounce.
     By now you should be able to tell if
     
     ## a task needs a bounce, or not. You be the judge. It can
     probably be done with lower CPU by
     
     ## bouncing more often, but I prefer to use a faster CPU
     instead.
     
     Scan dot-hackers.net     ## check on our old friends
     
     Upgrade cpu0   ## let's add a 1GHz CPU to help us crack
     passwords faster
     
     Crack dot-hackers.net    ## they always store the exploits
     in the port 80 server
     
     Connect dot-hackers.net
     
     Ls
     
     Download x-filemanager.exploit
     
     Logout
     
     Decrypt xenti.com   ## nothing else to do, may as well start
     on xenti.com
     
     Crack xenti.com 210
     
     Killtrace ## repeat until comfortable with the level
     
     Connect xenti.com 210
     
     Ls
     
     Cat history.log
     
     Download history.log
     
     Logout
     
     Connect files.fsa.gov 81
     
     Upload history.log
     
     Logout         ## objective 3 is complete
     
     Exec x-filemanager.exploit control-center.xenti.com
## let's see where this leads.

     Connect control-center.xenti.com 99

     Ls

     Download connection.log

     Cat connection.log  ## should have gotten the offer from dot-
hackers.net

     Logout  ## objective 1 is also done

     Connect dot-hackers.net 99

     Upload connection.log

     Logout    ## got the host atm.ce-bank.com

     Scan atm.ce-bank.com

     Decrypt atm.ce-bank.com

     Crack atm.ce-bank.com

     Connect atm.ce-bank.com

     Ls   ## always LS a server and CAT all the files. Nothing
interesting in this one, but you'd never know!

     Transfer 2300  ## with a level 1 firewall, it takes 24
seconds to complete a trace, so you can transfer 2300 and have 1
second to spare.

     Logout ## repeat transfer until done

     Killtrace ## spend a bit of that money, repeat until
satisfied

     Cat connection.log  ## study this very carefully. SCAN each
of the terminals available.

     Scan terminal-83.xenti.com  ## we know this one is there.

     Scan terminal-84.xenti.com ## aha! Objective 4 complete

     Crack control-center.xenti.com 200

     Connect control-center.xenti.com 200

     Ls

     Delete tj.bin  ## the only file here, nothing interesting in
it either if you CAT it

     Logout    ## as you delete it, you've completed objective 2!

     Killtrace ## repeat as needed to end the level, or just wait


6.3.4     Full Server List
     
     control-center.xenti.com
     
     dot-hackers.net
     
     atm.ce-bank.com
     
     terminal-83.xenti.com
     
     terminal-84.xenti.com
     
     xenti.com
     
     files.fsa.gov
     

6.3.5     Bonus items
     
If you had hacked into the dot-hackers.net email port, and
checked their email, you'll find that perhaps who you thought was
working for the FSA, is not who you think it is.


6.4  LEVEL 3: CHECKPOINT
    
You have reasons to suspect that perhaps this John Davis at the
FSA was not who says he is. Are there clues out there?


6.4.1     Objectives
     
1) Retrieve the connection log file from the Interlink server,
(Note : cracking won't work. Try to get the password from their
secure authorization server)

2) Find the bank account number of John Davis. (Contained in a
bank document). (Note : There is an easy way, and a more
difficult and rewarding way as well.)  [Download the statement!]

3) Retrieve a copy of the kernel monitoring program used by John
Davis

4) Reestablish the links on the interlink server (step 1 of the
objective)

5) Reestablish the links on the interlink server (step 2 of the
objective)


6.4.2     General Strategy
     
All depends on interlink.com. Once we break that, the rest will
fall in easily enough.

The trick here is to use the bare minimal way to locate what
needs to be done. Though there are alternate ways available.

There may be sections that I forgot to include a bounce. By now
you should be able to tell if a task needs a bounce, or not. You
be the judge. It can probably be done with lower CPU by bouncing
more often, but I prefer to use a faster CPU instead.


6.4.3     Walkthru (the easy way)
     
NOTE: If you do it this way, you will miss one of the servers
available. However, it is faster and has less hassles.

     Scan interlink.net
     
     Scan sec.interlink.net
     
     Scan dot-hackers.net
     
     Decrypt sec.interlink.net
     
     Crack sec.interlink.net 55
     
     Connect sec.interlink.net 55
     
     Ls
     
     Cat passwd     ## aha, password!
     
     Transfer 1500
     
     Transfer 1500
     
     Logout
     
     Login interlink.net twde3546mfrg
     
     Decrypt interlink.net
     
     Connect interlink.net 150
     
     Ls
     
     Cat connection.log  ## hmmm. terminal-83 again!
     
     Download connection.log  ## that's objective 1!
     
     Scan terminal-83.xenti.com
     
     Logout
     
     Killtrace ## repeat as needed
     
     Connect dot-hackers.net 99
     
     Upload connection.log
     
     Scan xterm.xenti.com
     
     Logout
     
     Crack dot-hackers.net
     
     Connect dot-hackers.net
     
     Ls
     
     Download x-filemanager.exploit
     
     Logout
     
     Ls
     
     Del connection.log ## we need the space
     
     Decrypt xterm.xenti.com
     
     Crack xterm.xenti.com 23
     
     Connect xterm.xenti.com 23
     
     Ls
     
     Cat activity.log
     
     Cat e-recript.doc   ## hmmm. that's an account number!
     
     Cat host.id
     
     Download e-receipt.doc   ## that's objective 2!
     
     Logout
     
     Crack xterm.xenti.com 151
     
     Connect xterm.xenti.com 151
     
     Transfer 2000
     
     Upgrade mem0   ## we can use the extra capacity now for more
     stuff
     
     Ls
     
     Cat monitor.bin
     
     Download monitor.bin     ## objective 3!
     
     Cat xconmanager.bin ## aha! So to restore, just delete this
     and put in the other file, eh?
     
     Cat conmanager.bin
     
     Download conmanager.bin  ## we need this to restore function
     
     Logout
     
     Crack interlink.net 152
     
     Connect interlink.net 152
     
     Ls   ## as expected, xconmanager.bin is here!
     
     Del xconmanager.bin      ## objective 4!
     
     Upload conmanager.bin         ## objective 5!
     
     Killtrace ## repeat until mission ends
     

6.4.4     Walkthru (the rewarding way)
     
     Scan interlink.net  ## note the 2nd port open
     
     Scan sec.interlink.net
     
     Decrypt sec.interlink.net
     
     Crack sec.interlink.net 55
     
     Connect sec.interlink.net 55
     
     Ls
     
     Cat passwd     ## aha, password!
     
     Transfer 1500
     
     Transfer 1500
     
     Logout
     
     Login interlink.net twde3546mfrg
     
     Decrypt interlink.net
     
     Connect interlink.net 150
     
     Ls
     
     Cat connection.log  # hmmm. terminal-83 again!
     
     Download connection.log  ## get notice from dot-hackers.net,
     still around!
     
     Scan dot-hackers.net          ## just to check on an old
     friend
     
     Scan terminal-83.xenti.com    ## that's in the log
     
     Logout
     
     Killtrace ## repeat as needed
     
     Connect dot-hackers.net 99    ## consider NOT do it, it's up
     to you.
     
     Upload connection.log  ## when it's done, you get
     xterm.xenti.com back
     
     Scan xterm.xenti.com
     
     Logout
     
     Crack dot-hackers.net
     
     Connect dot-hackers.net
     
     Ls
     
     Download x-filemanager.exploit
     
     Logout
     
     Ls
     
     Del connection.log ## we need the space
     
     ## note, this is where the path diverges. We don't need the
     stuff in the xterm.xenti.com to proceed
     
     Decrypt terminal-83.xenti.com
     
     Crack terminal-83.xenti.com
     
     Connect terminal-83.xenti.com
     
     Ls
     
     Cat users.log
     
     Cat remote.log      ## new host found!
     
     Scan ns1.sdb.com
     
     Logout
     
     Decrypt ns1.sdb.com
     
     Crack ns1.sdb.com 79
     
     Connect ns1.sdb.com 79
     
     Ls
     
     Cat incoming.log  ## hmmm. xterm.xenti.com
     
     Transfer 2200  ## repeat until you drain the money!
     
     Killtrace ## repeat until you're satisfied!
     
     Logout
     
     Scan xterm.xenti.com
     
     Decrypt xterm.xenti.com
     
     crack xterm.xenti.com 23
     
     connect xterm.xenti.com 23
     
     ls
     
     cat activity.log         ## wow, access from here, and the
     destination is crippled. There's a bank too. Why?
     
     Cat e-receipt.doc   ## the account number!
     
     Download e-receipt.doc
     
     Cat host.id         ## nothing here
     
     Logout
     
     Crack xterm.xenti.com 151
     
     Connect xterm.xenti.com 151
     
     Transfer 2000
     
     Upgrade mem0   ## we can use the extra capacity now for more
     stuff
     
     Ls
     
     Cat monitor.bin
     
     Download monitor.bin     ## objective 3!
     
     Cat xconmanager.bin ## aha! So to restore, just delete this
     and put in the other file, eh?
     
     Cat conmanager.bin
     
     Download conmanager.bin  ## we need this to restore function
     
     Logout
     
     Crack interlink.net 152
     
     Connect interlink.net 152
     
     Ls   ## as expected, xconmanager.bin is here!
     
     Del xconmanager.bin      ## objective 4!
     
     Upload conmanager.bin         ## objective 5!
     
     Killtrace ## repeat until mission ends
     

6.4.5     Server List
     
     interlink.net
     
     sec.interlink.net
     
     terminal-83.xenti.com
     
     dot-hackers.net
     
     xterm.xenti.com
     
     ns1.sdb.com
     

6.5  LEVEL 4: NOTHING IS RANDOM
    
Latest server to crash is Central Bank of Asia. Investigate the
crash. It's all related, but how?


6.5.1     Objectives
     
1) Retrieve the connection log file from the Central Bank of Asia
server.

2) Retrieve the transaction log file from the Central Bank of
Asia server.

NOTE: There are two ways to gets this, and the way suggested in
the Objectives is NOT the best way!

3) Use the corresponding account number to identify the bank
account interface server from a suspicious transaction. The
server name format is : [ACCOUNT].bank.com   EX: if account is
ab12345, then server is ab12345.bank.com

4) Find the trojan that has been injected in the kernel services,
on the Central Bank of Asia, and delete it.


6.5.2     General Strategy
     
First we shall check what connections are available from cb-
asia.com itself, then we'll explore some old friends and see
where they lead, and then see if their paths cross.

I recommend CPU upgrade now, if you didn't get one in level 3.

There are two ways to get the transaction log. 1) If you got the
connection log, and upload it to dot-hackers.net, you'll get a
hit about hacking into the hash server and download the hash,
which contains pieces of the password into the transaction
server, which would contain the transaction log. 2) Or you can
just grab the transaction_server.exploit from dot-hackers.net
(you'll need to crack their port 80 first) and use that on the
transaction server. I prefer the latter, as it also leads you to
the black-haxors.com sidequest, though you're welcome to use
whichever you find convenient.


6.5.3     Walkthru
     
     ## There may be sections that I forgot to include a bounce.
     By now you should be able to tell if
     
     ## a task needs a bounce, or not. You be the judge. It can
     probably be done with lower CPU by
     
     ## bouncing more often, but I prefer to use a faster CPU
     instead.
     
     Scan cb-asia.com    ## notice one of the entries is a link
     to atm? That's $$$
     
     Scan atm.au-bank.com.au
     
     Decrypt atm.au-bank.com.au
     
     Crack atm.au-bank.com.au
     
     Connect atm.au-bank.com.au
     
     Transfer 2000
     
     Transfer 2000
     
     Logout         ## you should have plenty of money now, so
     let's spend a little
     
     Upgrade cpu0   ## 2 GHz of CPU will help us crack passwords
     and decrypt things faster
     
     Scan dot-hackers.net     ## our friends are still around
     
     Crack dot-hackers.net    ## our faster CPU now comes in
     handy
     
     Connect dot-hackers.net  ## let's see what they got.
     
     Ls
     
     Cat news.txt   ## free money at the other place, who can
     resist?
     
     Scan black-haxors.com  ## now they're on the map, worry
     about them later
     
     Download x-filemanager.exploit     ## every exploit is
     needed somewhere
     
     Download transaction-manager.exploit
     
     Logout
     
     Decrypt black-haxors.com
     
     Crack black-haxors.com   ## this cracks the port 80, 1 more
     to go
     
     Exec x-filemanager.exploit black-haxors.com
     
     Connect black-haxors.com
     
     Transfer 2000
     
     Logout
     
     Killtrace ## repeat as necessary to reduce trace level to
     reasonable levels
     
     Decrypt cb-asia.com ## back to target
     
     Scan cb-asia.com ## didn't we see transaction-manager
     somewhere before? Aha!
     
     Exec transaction-manager.exploit cb-asia.com
     
     Connect cb-asia.com 100
     
     Ls   ## there's the log file, but it's HUGE!
     
     Upgrade mem0   ## don't overupgrade, we may need the $$$
     later this level
     
     Download transaction.log ## completes objective 2
     
     Logout         ## you'll get an e-mail message
     
     Connect dot-hackers.net 99
     
     Upload transaction.log   ## may as well see what they have
     to say about it
     
     Logout         ## got another message, let's login and read
     their analysis
     
     Login dot-hackers.net tsdf2324nfdf3233
     
     Cat report.doc      ## interesting analysis. No need to
     download it though.
     
     Logout
     
     Crack cb-asia.com   ## default is port 80
     
     Connect cb-asia.com ## note that they have a "contact us"
     address of ns.cb-asia.com as well
     
     Ls   ## and there's objective 1!
     
     Download connection.log  ## objective 1 complete!
     
     Cat connection.log  ## spot any new hosts? Dot-hackers want
     a copy too
     
     Scan ns.cb-asia.com
     
     Scan terminal-83.xenti.com    ## note that you do NOT have
     to crack this host
     
     Logout
     
     Connect dot-hackers.net 99
     
     Upload connection.log
     
     Logout         ## you should get the instructions on how to
     get the password from hacking the hash port
     
     ## but we already have the transaction log, so no need to
     hack the hash server at all.
     
     Cat transaction.log ## look at the huge amount of one
     transaction. check if that account server exists.
     
     Scan ch548755.bank.com   # objective 3 complete!
     
     Decrypt ns.cb-asia.com   ## let's get some more $$$, but
     this is technically optional
     
     Crack ns.cb-asia.com
     
     Ls
     
     Transfer 2000
     
     Transfer 2000
     
     Logout         ## one last item remains.
     
     Crack cb-asia.com 200  ## we need to get into
     kernel_services
     
     Connect cb-asia.com 200
     
     Ls   ## only one file there, tj.bin, which makes sense,
     according to connection.log
     
     Del tj.bin     ## objective 4 complete!
     
     Killtrace ## repeat as necessary
     

6.5.4     Alternate Walkthru
     
     Once you've retrieved the connection.log and uploaded it to
     dot-hackers.net, you will get e-mail hint about how to
     retrieve the password from the hash server.
     
     I personally find it better to crack dot-hackers.net,
     retrieve their exploits, and use them on whatever servers I
     find convenient, thus avoiding the need for the hash server
     at all. However, should you choose NOT to crack dot-
     hackers.net (and miss out on a sidequest) here's the
     solution given. Basically, hack the hash server on the bank,
     and you'll get a file "hash", which contains this:
     
     sdsd 3434 ddfd dasd
     txty dsdd xcef 3342
     edcv qwsa 4322 dssd
     sads dwed 1324 dedx
     fdsz dsds ewwe sdsd
     
     Apply the hint given to you in the e-mail, you highlight [ ]
     the hash you need to assemble.
     
     sdsd 3434 ddfd dasd
     [txty] dsdd xcef 3342
     edcv [qwsa] 4322 dssd
     sads dwed [1324] dedx
     [fdsz] dsds ewwe sdsd
     
     Voila! The password is `txtyqwsa1324fdsz'
     

6.5.5     Full Server List
     
     cb-asia.com
     
     ns.cb-asia.com
     
     terminal-83.xenti.com
     
     dot-hackers.net
     
     ch548755.bank.com
     
     black-haxors.com
     
     atm.au-bank.com.au
     

6.6  LEVEL 5: RUNDOWN
    
Time to hack the Xenti AI server, and destroy it. However, it's
protected by 4 firewall servers. We need to crack all four. Each
spits out a part of the password when cracked. Assemble the
password and we can get into the server. We'll need to find the
serverfreeze.code as well, and hack the backup to make sure they
don't have any.


6.6.1     Objectives
     
1) Hack into the Xenti Corporation's central server

2) Delete the core code file from the Xenti Corporation central
server

3) Find and upload the serverfreeze.code file to the Xenti
Corporation central server

4) Hack into the Xenti Core backup server

5) Reduce your trace level below 20%.  You can achieve this by
using the KILLTRACE command.


6.6.2     General Strategy
     
Please note objective 5. save your money for this specifically.

Remember, URLs can be hidden in the most innocuous of places.

Of the four firewalls, one is the easiest, so start with that
one. Then use that to attack the others.

Remember to transfer the money!

You MAY want to get a CPU upgrade to 3 GHz total now. 3 GHz /
FWL1 is good for cracking 16 char w/o bounce, or 512 bit
encryption keys. Any more than that and you'll need bounces.


6.6.3     Walkthru
     
     ## There may be sections that I forgot to include a bounce.
     By now you should be able to tell if
     
     ## a task needs a bounce, or not. You be the judge. It can
     probably be done with lower CPU by
     
     ## bouncing more often, but I prefer to use a faster CPU
     instead.
     
     ## you may want to upgrade CPU now, as money should be
     plentiful from previous mission
     
     Decrypt firewall-2.xenti.com  ## we start on firewall-2
     because it's only 512 bit encryption
     
     Crack firewall-2.xenti.com 399
     
     Connect firewall-2.xenti.com 399
     
     Transfer 500
     
     Logout
     
     Bounce 1 # add bounce to decrypt 1024-bit encryption
     
     Decrypt firewall-1.xenti.com
     
     Unbounce all
     
     Crack firewall-1.xenti.com 399
     
     Connect firewall-1.xenti.com 399   ## note that the login
     says firewall.xenti.com!!!!
     
     Transfer 1000
     
     Logout
     
     Killtrace ## as necessary
     
     Scan firewall.xenti.com  ## aha! Extra money!!!!  Worry
     about it later!
     
     Bounce 1
     
     Decrypt firewall-4.xenti.com
     
     Unbounce all
     
     Crack firewall-4.xenti.com 399
     
     Connect firewall-4.xenti.com 399
     
     Transfer 1500
     
     Logout
     
     Killtrace ## as desired
     
     Bounce 2  ## this requires 2 bounces, as it's 2048-bit
     encryption
     
     Decrypt firewall-3.xenti.com
     
     Unbounce all
     
     Crack firewall-3.xenti.com 399
     
     Connect firewall-3.xenti.com 399
     
     Transfer 2000
     
     Logout
     
     Bounce 2
     
     Decrypt core.xenti.com
     
     Unbounce all
     
     ## assemble the password in the order it was given
     
     Login core.xenti.com 11111111999999992222222277777777
     
     Connect core.xenti.com 401
     
     Ls
     
     Logout    ## nothing here, we need money to continue, hack
     firewall.xenti.com
     
     Scan firewall.xenti.com
     
     Decrypt firewall.xenti.com
     
     Crack firewall.xenti.com
     
     Ls
     
     Download serverfreeze.code
     
     Transfer 2000
     
     Transfer 2000
     
     Logout
     
     Bounce 1  ## crack 32-char password
     
     Crack core.xenti.com 402 ## objective 1 complete
     
     Cat core.code       ##note that there's a reference to
     firewall.xenti.com if you didn't see it earlier
     
                    ## as well as a reference to nessie.core-
     xenti.com
     
     Scan nessie.core-xenti.com
     
     Upload serverfreeze.code ##objective 3 complete
     
     Delete core.code  ## objective 2 complete
     
     Logout
     
     Bounce 2
     
     Decrypt nessie.core-xenti.com
     
     Unbounce all
     
     Bounce 1  ## make sure the 32-char password is hacked
     
     Crack nessie-core-xenti.com 210  ## objective 4!
     
     Connect nessie.core-xenti.com 210
     
     Transfer 1000
     
     Logout
     
     Killtrace   ## repeat as needed to go below 20%, perhaps
     even 0%
     
     ### You win when you go below 20% which is objective 5
     

6.6.4     Server list
     
     firewall-1.xenti.com
     
     firewall-2.xenti.com
     
     firewall-3.xenti.com
     
     firewall-4.xenti.com
     
     core.xenti.com
     
     firewall.xenti.com
     
     nessie.core-xenti.com
     

6.7  LEVEL 6: THE CHASE
    
We need to find John Davis. Figure out how he's connecting to the
net, and see if it's possible track him down.


6.7.1     Objectives
     
1) Find the wireless router which John Davis uses to connect his
laptop to the Xenti network. Retrieve the DHCP table from it, to
identify the name of his notebook.

2) Find John Davis's laptop, hack into it and retrieve the
archive containing his files. Upload a copy of it, to the dot-
hackers.net server

3) Inject the monitoring trojan into John Davis's laptop. There
isn't a copy of it available at hand, so you must find one.

4) Cancel John Davis's flight reservation.

5) Reduce your trace level below 20%. You can achieve this by
using the KILLTRACE command.


6.7.2     General Strategy
     
You knew which hosts he used to hacked. There must be a trail
somewhere.  So chase those down, and see where they lead. They
should lead in all sorts of directions.

Remember, one of the requirements is reduce trace level, so only
upgrade when it MUST be done!


6.7.3     Walkthru
     
     ## There may be sections that I forgot to include a bounce.
     By now you should be able to tell if
     
     ## a task needs a bounce, or not. You be the judge. It can
     probably be done with lower CPU by
     
     ## bouncing more often, but I prefer to use a faster CPU
     instead.
     
     Scan dot-hackers.net
     
     Decrypt xterm.xenti.com  ## 3 GHz CPU should have no problem
     with 512 bit encryption cracking
     
     Crack xterm.xenti.com 23 ## crack all three services
     
     Crack xterm.xenti.com 115
     
     Crack xterm.xenti.com 151
     
     Connect xterm.xenti.com 23
     
     Transfer 2000
     
     Transfer 500   ## empty the server
     
     Ls
     
     Cat activity.log  ## note first entry is wi-fi.jd.xenti.com
     
     Scan wi-fi.jd.xenti.com
     
     Cat e-receipt.doc   ## see atm-5.sdb.ch
     
     Scan atm-5.sdb.ch   ## woohoo! $10000!
     
     Cat host.id
     
     Logout
     
     Connect xterm.xenti.com 115
     
     Ls
     
     Cat mail  ## note flyblue-air.com and reservation number!
     
     Scan flyblue-air.com     ##aha!
     
     Logout
     
     Connect xterm.xenti.com 151
     
     Ls   ## so that's where the bin files are.
     
     Logout
     
     Crack dot-hackers.net    ## we need whatever they got in
     that port 80 service.
     
     Killtrace      ## as needed to reduce to manageable levels,
     preferably just below 50%
     
     Connect dot-hackers.net
     
     Ls  ## lots of stuff! Grab them!
     
     Download k-filemanager.exploit
     
     Download transaction_manager.exploit
     
     Download x-filemanager.exploit
     
     Cat news.txt   ## old news, as we've got the money from last
     time.
     
     Logout
     
     Decrypt atm-5.sdb.ch     ## let's get some money!
     
     Crack atm-5.sdb.ch 443
     
     Connect atm-5.sdb.ch 443
     
     Ls
     
     Transfer 2300  ## repeat transfer until all money gone, 2300
     gives you 1 sec margin on the trace.
     
     ##Consider upgrading CPU now, or beginning of next level.
     
     Logout         ## we're done here, but remember there's
     monitor.bin here too
     
     Decrypt wi-fi.jd.xenti.com    ## let's do the wi-fi server
     then
     
     Crack wi-fi.jd.xenti.com 808
     
     Connect wi-fi.jd.xenti.com 808
     
     Ls
     
     Download dhcptable
     
     Cat dhcptable
     
     Logout
     
     Decrypt flyblue-air.com
     
     Killtrace ## repeat until below 50%
     
     Exec x-filemanager.exploit flyblue-air.com
     
     Connect flyblue-air.com  ## nothing in 80
     
     Logout         ## nothing about wifi in homepage at all
     
     Connect flyblue-air.com 99  ## used exploit
     
     Ls
     
     Cat index.old       ## aha! So there's the wifi server
     address!!!!
     
     Scan wifi.flyblue-air.com
     
     Logout
     
     Ls
     
     Del dhcptable       ## we need the space
     
     Crack flyblue-air.com    100  ## the reservations server
     
     Ls
     
     Cat info  ## this tells you how to create and remove
     reservations
     
     Del 34723 ## objective complete!
     
     Logout
     
     Killtrace ## as needed
     
     Decrypt wifi.flyblue-air.com
     
     Crack wifi.flyblue-air.com 808
     
     Connect wifi.flyblue-air.com 808
     
     Ls
     
     Download dhcptable1
     
     Cat dhcptable1 ## see your target? Someone w/ very familiar
     name
     
     Logout
     
     Scan 192.168.1.120
     
     Decrypt 192.168.1.120
     
     Exec k-filemanager.exploit 192.168.1.120
     
     Ls   ## May be good time to upgrade memory as you need 3 GB
     to download the archive
     
     Connect 192.168.1.120 102
     
     Ls
     
     Download archive.bin          ## I hope you have 3 GB!
     
     Cat archive.bin     ## hey, there's an URL in this archive!
     
     Scan backup.flyblue-air.com        ## no time to hack it, no
     need to either
     
     Logout
     
     Connect dot-hackers.net 99
     
     Upload archive.bin
     
     Logout
     
     Delete archive.bin
     
     Connect atm-5.sdb.ch      443
     
     Download monitor.bin
     
     Logout
     
     Connect 192.168.1.120 102
     
     Upload monitor.bin  ## objectives are complete except last
     one
     
     Killtrace ## repeat until we can satisfy the objective, and
     we should JUST have enough money
     

6.7.4     Server List
     
     xterm.xenti.com
     
     flyblue-air.com
     
     backup.flyblue-air.com
     
     wifi.flyblue-air.com
     
     wi-fi.jd.xenti.com
     
     dot-hackers.net
     
     192.168.1.120
     
     atm-5.sdb.ch
     

6.8  LEVEL 7: DEJA VU
    
The World Med center was hacked. Their computer system went down
for 30 minutes, then just came back up. What was copied or moved
and who did it?


6.8.1     Objectives
     
1) Identify the origin point, from where connection was
established, in order to penetrate the WorldMed main server

2) Retrieve a copy of the file that has been stolen from the
WorldMed central server.

3) Delete the stolen file from the host on which you have found
it.

4) Reduce your trace level below 10%. You can achieve this by
using the KILLTRACE command.

5) Keep at least $1600 in your money balance.


6.8.2     General Strategy
     
Instead of attacking WorldMed immediately, attack ancillary
targets for a while, as we need to find some bounce hosts first.
THEN get into WorldMed with the appropriate access tools, and
let's see where it leads us.


6.8.3     Walkthru
     
     ## There may be sections that I forgot to include a bounce.
     By now you should be able to tell if
     
     ## a task needs a bounce, or not. You be the judge. It can
     probably be done with lower CPU by
     
     ## bouncing more often, but I prefer to use a faster CPU
     instead.
     
     Scan ns.dot-hackers.net
     
     Crack ns.dot-hackers.net 53
     
     Connect ns.dot-hackers.net 53
     
     Ls
     
     Cat cache
     
     Cat named.conf  ## aha! Atm-3.sdb.ch!
     
     Scan atm-3.sdb.ch
     
     Cat x-filemanager.exploit  ## this is on port 99.
     
     Cat zone
     
     Logout
     
     Decrypt atm-3.sdb.ch     ## let's get some money!!!!
     
     Crack atm-3.sdb.ch 443
     
     Connect atm-3.sdb.ch 443
     
     Ls   ## hmmm. another x-filemanager.exploit?
     
     Cat x-filemanager.exploit     ## aha, this runs on port 181,
     not 99, so grab it
     
     Download x-filemanager.exploit
     
     Transfer 2300  ## repeat transfer until you empty this ATM!
     
     Killtrace ## repeat until your trace level is under 50%, and
     keep it under 50%
     
     logout
     
     decrypt c-core.worldmed.com   ## time to do the WorldMed
     server!
     
     Exec x-filemanager.exploit c-core-worldmed.com    ##
     WorldMed's x-filemanager runs on port 181!!!!
     
     Connect c-core.worldmed.com 181
     
     Ls   ## just one file
     
     Cat call-config       ## phones are in the format xxx-xxxx-
     xxxx.nphone.com were xxx are numbers.
     
     ## however, we need the actual LOG to backtrack the hacker.
     must hack call manager
     
     logout
     
     crack c-core.worldmed.com 180
     
     connect c-core.worldmed.com 180
     
     ls
     
     cat call-records    ## let's see which call lasted exactly
     30 minutes.
     
     scan 555-3234-1122.nphone.com ## voila!
     
     logout
     
     decrypt 555-3234-1122.nphone.com
     
     crack 555-3234-1122.nphone.com 743
     
     connect 555-3234-1122.nphone.com 743    ## just tells us
     about auth.nphone.com
     
     scan auth.nphone.com     ## it has $4000 you can `borrow'
     
     ls
     
     cat modem.conf  ## this tells us about xenti.nphone.com
     instead!
     
     Scan xenti.nphone.com
     
     Logout
     
     Decrypt auth.nphone.com
     
     Crack auth.nphone.com
     
     Connect auth.nphone.com
     
     Transfer 2000
     
     Transfer 2000
     
     Killtrace ## repeat as needed
     
     Logout
     
     decrypt xenti.nphone.com
     
     crack xenti.nphone.com 743
     
     connect xenti.nphone.com 743
     
     ls   ## auth.log, and worldmed-dna.seq
     
     download worldmed-dna.seq     # objective complete!
     
     Cat auth.log  #hmmm.
     
     Del worldmed-dna.seq
     
     logout
     
     killtrace ## until you fulfill mission objective
     

6.8.4     Server List
     
     c-core.worldmed.com
     
     ns.dot-hackers.net
     
     atm-3.sdb.ch
     
     555-3234-1122.nphone.com
     
     auth.nphone.com
     
     xenti.nphone.com
     

6.9  LEVEL 8: THE MAZE
    

6.9.1     Objectives
     
1) Hack into the first host on the maze path.

2) Hack into the second host on the maze path.

3) Hack into the third host on the maze path.

4) Hack into the fourth host on the maze path.

5) Hack into the fifth host on the maze path.

6) Download the DNS reconstruction map from the last server on
the path.


6.9.2     General Strategy
     
Money is limited on this level. Be very careful in using the
cracks and decrypts, make sure you got the right server.


6.9.3     Walkthru
     
     ## NOTE this walkthrough assumes you have 4 GHz CPU, 3 GB of
     RAM, and level 1 firewall.
     
     ## There may be sections that I forgot to include a bounce.
     By now you should be able to tell if
     
     ## a task needs a bounce, or not. You be the judge. It can
     probably be done with lower CPU by
     
     ## bouncing more often, but I prefer to use a faster CPU
     instead.
     
     ## 4 GHz CPU means you can decrypt 1024 bit key directly,
     and need 1 bounce to do 2048 bit key.
     
     Scan xmaze.net
     
     Decrypt xmaze.net
     
     Crack xmaze.net
     
     Connect xmaze.net
     
     Transfer 2000
     
     Transfer 500
     
     Logout         ## scans show 28 is easiest, 512 cipher only
     
     ## it's also 28 because the e-mail you got says you should
     have started YESTERDAY, and today is 12/29
     
     Crack 28.xmaze.net 901
     
     Decrypt 28.xmaze.net
     
     Connect 28.xmaze.net
     
     Ls
     
     Download dnaseq-28
     
     Cat hint-28
     
     Download hint-28    ## you'll get e-mail with hint, points
     to 24
     
     Logout
     
     Killtrace ## repeat as necessary
     
     Decrypt 24.xmaze.net
     
     Crack 24.xmaze.net 901
     
     Connect 24.xmaze.net 901
     
     Ls
     
     Download dnaseq-24
     
     Cat hint  ## points to 26
     
     Logout

     Killtrace ## repeat as needed

     Decrypt 26.xmaze.net
     
     Crack 26.xmaze.net 901
     
     Connect 26.xmaze.net 901
     
     Ls
     
     Download dnaseq-26
     
     Cat hint  ## hint points to 27
     
     Logout
     
     Killtrace ## repeat as necessr
     
     decrypt 27.xmaze.net
     
     crack 27.xmaze.net 901
     
     connect 27.xmaze.net 901
     
     ls
     
     cat log   ## points back to xmaze.net
     
     download dnaseq-27
     
     cat hint       ## this hint takes a bit of patience, but
     it'll lead us to 22
     
     transfer 500
     
     logout
     
     decrypt 22.xmaze.net
     
     crack 22.xmaze.net 901
     
     connect 22.xmaze.net 901
     
     ls
     
     download dnaseq-22
     
     cat hint       ## 16 servers, so must add up to 8, which
     means. 35.
     
     Logout
     
     Killtrace ## as necessary
     
     decrypt 35.xmaze.net
     
     crack 35.xmaze.net 901
     
     connect 35.xmaze.net 901
     
     ls
     
     download dnaseq-35
     
     cat hint       ## no hint, we're done!
     
     Logout         ## wait for level to end
     

6.9.4     Server List
     
    20.xmaze.net
    
    21.xmaze.net
    
    22.xmaze.net
    
    23.xmaze.net
    
    24.xmaze.net
    
    25.xmaze.net
    
    26.xmaze.net
    
    27.xmaze.net
    
    28.xmaze.net
    
    29.xmaze.net
    
    31.xmaze.net
    
    32.xmaze.net
    
    33.xmaze.net
    
    34.xmaze.net
    
    35.xmaze.net
    
    37.xmaze.net
    
    xmaze.net
    

6.10 LEVEL 9: END
    
This is the end. We need to wipe out the Xenti AI server


6.10.1    Objectives
     
1) Retrieve a copy of the AI kernel file from the Xenti
Corporation server.

2) Delete the AI kernel file from the Xenti Corporation server.

3) Reduce your trace level below 30%. You can achieve this by
using the KILLTRACE command.


6.10.2    General Strategy
     
Note that you don't even know the AI server's name, or the
firewall servers' names, so pay attention!


6.10.3    Walkthru
     
     ## NOTE this walkthrough assumes you have 4 GHz CPU, 3 GB of
     RAM, and level 1 firewall.
     
     ## There may be sections that I forgot to include a bounce.
     By now you should be able to tell if
     
     ## a task needs a bounce, or not. You be the judge. It can
     probably be done with lower CPU by
     
     ## bouncing more often, but I prefer to use a faster CPU
     instead.
     
     Scan ns.dot-hackers.net  ## yes, e-mail contains server
     address!
     
     Decrypt ns.dot-hackers.net
     
     Connect ns.dot-hackers.net
     
     ls
     
     Download namedserver_service.exploit
     
     Cat named.conf ##hmmm.  ns2?
     
     Scan ns2.dot-hackers.net  ## aha!
     
     Cat zone
     
     Transfer 2300  ## repeat until you drain all the money
     
     Logout
     
     Decrypt ns2.dot-hackers.net
     
     Crack ns2.dot-hackers.net
     
     Exec nameserver_service.exploit ns2.dot-hackers.net
     
     Connect ns2.dot-hackers.net
     
     Ls   ##nothing
     
     Transfer 2000  ## all it's got
     
     Logout
     
     Killtrace ## repeat as needed!
     
     Connect ns2.dot-hackers.net 53
     
     Ls
     
     Cat cache ## aha! There's the firewall server names!
     
     Scan fwall-34.xenti.com
     
     Scan fwall-23.xenti.com
     
     Scan fwall-64.xenti.com
     
     Scan fwall-00.xenti.com
     
     Cat named.conf
     
     Cat zone
     
     Logout
     
     ## remember the order listed, Let's start hacking!
     
     Decrypt fwall-00.xenti.com
     
     Crack fwall-00.xenti.com 88   ## got the "message"
     
     Connect fwall-00.xenti.com 88
     
     Transfer 500
     
     Logout
     
     Decrypt fwall-64.xenti.com
     
     Crack fwall-64.xenti.com 88   ## got the "message"
     
     Connect fwall-64.xenti.com 88
     
     Transfer 500
     
     Logout
     
     Decrypt fwall-23.xenti.com
     
     Crack fwall-23.xenti.com 88   ## got the "message"
     
     Connect fwall-23.xenti.com 88
     
     Transfer 500
     
     Logout
     
     Decrypt fwall-34.xenti.com
     
     Crack fwall-34.xenti.com 88   ## got the "message"
     
     Connect fwall-34.xenti.com 88 ## wait. it says.
     aicore.xenti.com!
     
     Scan aicore.xenti.com         ## voila!!!!
     
     Transfer 500
     
     Logout
     
     Decrypt aicore.xenti.com
     
     ## so what's the password? It's the pieces you got, in the
     order
     
     Login aicore.xenti.com ttyy3322xxzz4455uupp8888kkcc7777
     
     Connect aicore.xenti.com
     
     Ls   ## you see 4 bin files, one of which is correct
     
     Download ttyy3322xxzz4455uupp8888kkcc7777.bin
     
     Killtrace ## repeat killtrace while we wait for download to
     finish
     
     Killtrace ## keep going until you go below 30%
     
     Del  ttyy3322xxzz4455uupp8888kkcc7777.bin
     
     Logout  #### You win!!!!
     

6.10.4    Server List
     
   ns.dot-hackers.net
   
   ns2.dot-hackers.net
   
   aicore.xenti.com
   
   fwall-34.xenti.com
   
   fwall-23.xenti.com
   
   fwall-64.xenti.com
   
   fwall-00.xenti.com
   


7    Miscellaneous
   

7.1  MODS
    
Some user mods which changes interface colors are available in
the support forum, see official website.


7.2  CHEAT CODES
    
There are exclusive cheatcodes. They are NOT guaranteed to work
at all. Try it for yourself. How to use? Type them in the
"console".

exosyphen: identifies the maker of this fine sim

xskiplevel : ends current level and go to next one, but resets
your score to zero

xmoney: gives you $10000, but resets your score to zero

xshowhosts: reveals all the hosts on the map, but resets your
score to zero

xsubmit: hmmm.


7.3  TRIVIA
    
Blue Sky Airline in the game is actually named after one of
Exosyphen's previous games, "Blue Sky".



--THE END--

Leave a Comment

Your email address will not be published. Required fields are marked *