Hello there! Noel Boetie here. We're all so glad to have you attend KringleCon IV and work on the Holiday Hack Challenge!
I'm just hanging out here by the Logic Munchers game.
You know... logic: that thing that seems to be in short supply at the tower on the other side of the North Pole?
Oh, I'm sorry. That wasn't terribly kind, but those frosty souls do confuse me...
Anyway, I'm working my way through this Logic Munchers game.
A lot of it comes down to understanding boolean logic, like
True And False is
True And True is
It can get a tad complex in the later levels.
I need some help, though. If you can show me how to complete a stage in Potpourri at the Intermediate (Stage 3) or higher, I'll give you some hints for how to find vulnerabilities.
Specifically, I'll give you some tips in finding flaws in some of the web applications I've heard about here at the North Pole, especially those associated with slot machines!
There are lots of special symbols for logic and set notation. This one covers AND, NOT, and OR at the bottom.
AND, OR, NOT, XOR
This might be a handy reference too.
challenges which contains both the statement shown in each cell as well as the associated true or false result.
chompy.js game code contains a
checkWin() function which iterates over this
challenges to false (line 3), satisfying the
checkWin() function, and level up the game.
Skip to the next level
1 2 3 4 5 6
autoplay_chompers.js script below takes this a step further by adding a timer that repeats this logic for each new level. The biggest difference with the code snippet above is that it more closely mimics a user playing the game by searching for items in
challenges that are set to true and calling a
chomp() function on those cells.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
chomp() function will verify that the cell's result is in fact true and run through the game mechanics like updating the score, clearing out the cell, and calling
checkWin() to level up the game. To use the script, start a new game, paste the contents of
autoplay_chompers.js in your web browser's console, sit back, and enjoy the show.
Wow - amazing score! Great work!
So hey, those slot machines. It seems that in his haste, Jack bought some terrible hardware.
It seems they're susceptible to parameter tampering.
You can modify web request parameters with an intercepting proxy or tools built into Firefox.