和hax.tor.hu说再见
我也是搜索“免费 shell”的时候无意发现这个网站的。该网站有5个warmup的题目,通过后可以获得免费的shell帐号和web hosting。网上关于如何破解这5个问题的文章比比皆是,大家可以搜索《挑战hax.tor.hu 申请带ssh的免费php+mysql空间》试试。不过好像都是转载,人云亦云。出处已经不可考证了。
我在参考一份答案后顺利回答了5个问题。之后我发现继这5个问题之后还有50个challenges。于是凭借自己的能力我又做了16个,最后卡在第17题上。之后我把这16个题目的答案和原来5个warmup的答案都发在了博客上,见《挑战 hax.tor.hu 申请带ssh的免费php+mysql空间(附level 1-16答案)》。后来tor.hu的作者不知怎么发现了这份答案,还发邮件给我。可能是枪打出头鸟吧。我给他解释说这不是我的原创,而且我们确实需要一个免费的shell。但是迫于压力我还是删除了那篇文章。不过后来想想既然大家都需要这份答案,还是发出去吧。于是我又把那篇文章公布了出来。这都是很久以前的事了。
今天收到邮件:
The original idea was to provide security related projects and websites with a stable, fast, kick-ass server.
Today, there are only a handful of smaller security / tech related blogs, but lots of users who only use the shell for their own profit alone: scanning other networks, proxying, IRC bots and bouncers, backup, and so on.
While we do not normally mind most of these activities, we will in the future prefer to provide our services only to those users who actually do something significant for the benefit of the security community or the server itself.What didn’t change:
- The same services will be available in the future (shell, web, sql).
- The server’s main theme is still about security related projects.
- We are still non-profit.
- Worthy websites still get the hosting for free.What did change:
- The control panel has been separated from the Hax.Tor.Hu website.
- Anyone may sign up for the hosting, even without playing the game.
- Instead of a worthy project, we accept Adsense space or payments
in order to cover the hosting and hardware costs (~$100 / month).
- We are trying to get the server to be able to support itself.
All we need for this is 10-20 users (out of the 1500) who are willing
to contribute a small amount of money.If you have a shell account on shell.tor.hu and would like to to keep it, please sign up for continued access by the 20th of January.
You will need to specify your requirements (quota, IRC, web usage) and make an offer (running a security related website or project, giving us Adsense space on one of your better visited webpages, or making small payments every month).
Users who do not sign up for continued access or do not get approved by the 20th will be removed.
Because of this, we strongly suggest that you do a backup of your files.
We will not have time to ‘give your files back’ individually.
Thanks for your understanding.
前因我就不翻译了,后果就是原来的shell账户全部作废,需要重新申请。于是我就填了申请表,作者很快回复:
Your website contains the solutions to hax.tor levels, plus your current home contains a web proxy, which is aginst the rules.
Because of these, I’m rejecting your signup.
其实我想作者是一直想找个理由k掉我以及其他一些国人的帐号吧。只是一忍再忍,这次终于痛下杀手了。拒绝就拒绝吧,现在用appspot玩穿越挺好的。等以后有钱了自己买个vps玩。
以前hax.tor.hu在国内是个好东西,估计以后我们无福消受了。Google Reader里有句话说的好,“在中国,免费的东西最贵。”
不牢骚了,新的申请地址在这,大家可以去试试运气。
level11挑战:
Enter the hash for: “k y l h” (without spaces/quotes).Oh, BTW… You have exactly 7 seconds to do this
hint, cheerleader, hint2
字符串是随机给的,时间最长是10s。提示给的链接是自动抽取字符串并计算md5的perl脚本和计算md5的网页。这道题实在是太麻烦了,我尝试了N种方法,具体代码我就不贴出来了,因为字符串是变的,所以也没固定答案。提供几个思路:
(1)手工计算。要求网速好,眼疾手快。ps:看看cheerleader这张图就知道这招不大现实。
(2)使用java或者其他语言自动获取网页,提取字符串,计算md5并提交。这个方法难点在于网页是https协议,而且要用post方法先登录网页。
(3)如果使用firefox,可以使用Greasemonkey插件添加js脚本,提取字符串,计算md5并输入到密码框里。ps:在尝试了(1)(2)失败后,我就是用的这个方法。
(4)其他方法。
这题没看懂啊,你有联系方式吗?
可以发邮件到我的johnsonvin@126.com 谢谢。
有点儿意思
别提了,上次被他们发邮件鄙视了一下。看来他们对我们如何使用ssh很是介意。
按照他们的意思,ssh应该被用来执行一些project的脚本。而不是用来转发数据。hax这个人感觉特别geek。
免费的都不给力啊!
晕啊,第五题的数字字母顺序,一直没搞明白,楼主能否提示下呀,多谢了。。。
现在还能申请吗?已经出通知要转移了。
不太清楚,但是,问题还在呢,到第五题做下不去了
我好久不弄那个题目了。把两位数字抽出来换成对应的字母,答案不对吗?
不懂这么高深的东西
都是GFW惹的祸。就是为了好ssh。
免费的VPS有点放心,
不过用来学习还是不错的选择,
我申请的是捷克免费的VPS。
怎么申请?
免费的就这样。很霸道的就会把你的封掉。。现在收费的貌似也不算太贵哦。。
也收到hax.tor.hu的邮件了,虽然我上次没申请成功。呵呵。还是自己买个廉价vps折腾靠谱
GFW威武。
GFW“造福”了好多人。。。
搞不通啊
想要个免费都如此难。