If you cant find an answer here go to the Online Chat irc://10.233.0.50:6667 in game, or irc://game.hacker.nz:6667 from the Internet 0) How do I score a point or add a token First a word about tokens vs points Tokens dont prove you have code exec on a host, Points do. We like shells more than tokens. To score points you must wget or browse to http://192.168.12.6/score.php?player=YOUR-NICKNAME From the systems you hack, this can be via nc, telnet, or whatever browser you can find, it must be done from every host you get a shell on if your want the points. 0.a) What about tokens? To win a token, use the same uri but include the token like http://192.168.12.6/score.php?player=YOUR-NICKNAME&token=THE-TOKEN The difference is that tokens can be added from any other host including your local browser when connected to the games VPN. Or you can use the Add Token button to the left. Tokens have different values, and are worth collecting. Tokens also change regularly so if you find one, submit it or you may loose it to another player. To cash in a token, go to the irc server and talk to ACMEBot in #acmepower he has some quite reasonable prices. 1) The VPN doesnt work. It can be quite tricky sometimes. I have written a quick shell script that may make it easer wget https://game.hacker.nz/rungame.sh; chmod +x ./rungame.sh ; ./rungame.sh If that doesnt work Email game at hacker.nz for help or connect to the IRC Server irc://game.hacker.nz:6667 2) Whats the goal. To gain access to the reactor control and shut it down. 3) I keep getting my sessions killed by another hacker. Life is tough in the real world, Some people are dicks, perhaps you should consider revenge? Or just E-mail game at hacker.nz and tell me the time and provide screenshots. Ill give them a polite warning not to be a dick. 4) Whats the rules. Dont attack anything outside of the 10.0.0.0/8 address range. Dont be lame. Help others if you feel like it. 5) Ive found a bug. Is it a good bug? Totally .... Email me at game at hacker.nz 6) Can I donate a VM to add to the game? yes .. Email me. 7) All my shells are gone :( The game resets, when this happens all history and shells go. I would recommend automating the exploit path you are using. That way you can run a script and take control all over again. Just dont get caught doing it :D 8) I want to change my username or password. Sorry you cant. 9) These hosts are old, any plans to update or create a new game I have lots of ideas, but little time. I will consider your input and help if you want to. 10) Can you delete me from the score-board Yes - Email Me. 11) Can you delete my user Not if you have scored points / spent time on the game, but I can hide your username 12) I havent gotten an email for registration Check your spam folder. Google is a real pain. 13) I work for company X and want to use the game to see if I can hire person Y. Is that Okay? It depends, if your a small crew (5 people - Including sales) I dont have too much of a problem but if your doing well and this game helps you find a good person to hire.. What about you share the love ?? Regardless send me an email and I will consider it. 14) My account has expired, I want to keep playing. Email me. Ill reactivate your account. 15) How does all this work? Magnets, lots of string and tape. 16) Are you going to try and hack me? No, but when you are connected to the VPN others can communicate with your host over the VPN so I advise you to use a Kali VM or a totally seperate computer with Kali installed on it. Dont use a computer with stuff you dont want lost or stolen and make sure IP forwarding is disabled. 17) Whats a good score? The scores, they MAY show you how good someone is but they dont show you how much someone has learnt over the time they have spent on the game. I wouldnt really pay too much attention to them. 18) Can I write a walk-trough Well I cant stop you, but would prefer that you didnt. Please. 19) I cant login - my password IS correct. Check the stats page, see how many Concurrent users there are 20) I cant own anything, ive been running all my tools and its not working. The games DMZ has been designed as much as possible to not work with automated tools. The DMZ is not particularly hard once YOU start to look at and use the services avalible. Just ask yourself what kind of mistakes do devs and ops make then play. If you get really stuck come onto the irc channel and we can give you some hints and pointers. 21) So this VPN has Internet access? No, only parts of RFC 1819 are routed through to the VPN, the rest is from your own Internet connection, so this VPN wont hide who you are or protect your privacy. 22) MSF wont connect or segfaults at the cleint side. You might have configured oyur firewalling to be a bit over the top. If you want a reverse shell to work youll need to let it communicate.