What is X-B6-Key ?

Recon

penguinbin.murphy
9 years ago | edited 9 years ago

5

it took me 2 minutes to get the IP and the company name.
however, I spent more then 4 hours looking for the X-B6-Key header…..what the hell is that mean lol….If I am correct it should be something related to the header value in the B6 (Basic 6) page?
I read all the messages in the B6 forum, I will prefer the old question than the new one, it will take me a single telnet command to get the email software. lol

Any hints?

104replies
52voices
3,505views
Mystery [kapuccino]
9 years ago

1

This level was changed once before. Now user has to look for X-B6-Key header, instead of email software.

This thread puts money in your pocket. It seems that you didn’t read too well though.

darkl33ch
9 years ago

1

I have to say that the X-B6-key header isn’t easily understood – you’ll have to look for it in a very specific case. It is related to emails, though.
Hope I didn’t say too much.


1

You didn’t say too much, if you check the source code it says

id=“email”, so…

Mugi [Mugiwara27]
9 years ago

0

Yes RichardBrook you’re right but don’t spoil anymore, let them find that by themselves :p

darkl33ch
9 years ago

1

RichardBrook, I saw that, but I thought that they just didn’t change it from the previous version ;)

xD007
9 years ago

1

Give me the company name i give you what is the X-B6-key header :D

Mugi [Mugiwara27]
9 years ago

1

lol If you can’t find the Compagny name I’m sure you did not found the X-b6-Key

xD007
9 years ago

1

No , i know it

[deleted user]
9 years ago

1

http://www.whoishostingthis.com/

Use his, xD007, to answer your question (type the domain name in).


1

Do you really need a website to tell you that?

Mugi [Mugiwara27]
9 years ago

1

This website do what you can do easily using command prompt

[deleted user]
9 years ago

1

Is it still performable on Ubuntu?

Mugi [Mugiwara27]
9 years ago

1

Yes you can do it using ubuntu

[deleted user]
9 years ago

1

is the command findhost?

Mugi [Mugiwara27]
9 years ago

1

Try it, I’m not going to tell you the solution ^^

[deleted user]
9 years ago

1

Ya, it didn’t work. Also, I would rather recommend the website I posted because EVERYONE can use it, just like Weebly can allow you to make websites without HTML knowledge.


1

Although you can answer this question using a website, the main goal is to Acquire Some Knowledge by using command Prompt. You only need a single word to get that.

Reply has been removed
[deleted user]
9 years ago

1

Nvm, I just want to know what site to use to find the X-B6-Key.

Mugi [Mugiwara27]
9 years ago

1

What you want is the solution, no one is going to tell you that, you have all HINT needed in other threads

[deleted user]
9 years ago

1

I am not asking for teh solucion, I just want to know the X part of X-B6 header key now.

Mugi [Mugiwara27]
9 years ago

1

Oh I think you don’t understand X-B6-Key is the same thing

[deleted user]
9 years ago

1

So X-B6-Key means B6 key?

Mugi [Mugiwara27]
9 years ago

1

Hum nope, that means nothings.
If you work a lot in that level you will find something like X-B6-key and you’ll understand why there is a X ^^

Reply has been removed
Nimrod
9 years ago | edited 9 years ago

0

bro all I can say is the key is not int the x-b6-key its in finding thr x-b6-key… usually the problems come from undefined terms. Once properly “defined” things are very easy to find. Don’t get caught up on the X-b6-key part

panther [kooooo]
9 years ago

-5

+WHAT IS SOLUTION THANK

Mugi [Mugiwara27]
9 years ago

0

kooo need some -ve karma

Echorion
9 years ago

0

Actually you just have to take a look around. Be guided by what you see, don’t try to “understand” what that means, just get lead by all the data you’ve collected so far. By the time you reach this exercise, you have literally everything you need in your hands.
Oh and btw, the first try I did to lookup ip was by cmd prompt but i was mislead. Had to look by other means.

blixit [claude23]
9 years ago

0

hello,
I found out the ip and the company name with a suggested tool.
And i read all threads and something like that is repeated :
- “let the … server do what it always do”
i really don’t understand what that means.
Is the solution related to

the service at the following ports : 119,25,587 ?
please, i need 1 more hint or some explanations!
thanks in advance

dirtybox
7 years ago

0

hello, waiting for email

Mugi [Mugiwara27]
7 years ago

0

I think you’ll wait until Flabby repair the big problem of mail !

br_777
7 years ago

0

Yeah, didn’t receive an email when I registered, still waiting…

Mugi [Mugiwara27]
7 years ago

0

Hackthis is currently facing a problem with the mailer
Therefore, you won’t receive anything unless Flabby fix it
You’ll have, as a lot of people, wait for him :/

lilhsn
7 years ago

0

I think you’re not so far from the answer if you asked to receive emails when someone replies to your post…
I hope so, waiting for an answer and the notification email too…

lilhsn

br_777
7 years ago

0

Well, I moved on to the next levels. I’ll get back to this one to check my theory when I’ll get the email.

SIGKILL [r4v463]
7 years ago | edited 7 years ago

0

Hi, just to say that it seems that the emails are back, you can re-try this level! (thx Flabby :p)

Luke [flabbyrabbit]
7 years ago

0

I did something :o

ilopkey
7 years ago

0

email test

PyjamaButtons
7 years ago

0

email request

dimooz
7 years ago

0

[quote=PyjamaButtons]email request[/quote]

I sent you one.

AUR24
7 years ago

0

email request

tonkhimanshu2
7 years ago

0

mail request

SIGKILL [r4v463]
7 years ago

0

Here it is

Wazabi258
7 years ago

0

mail request

dimooz
7 years ago

0

Mail sent.

zoroark
7 years ago

0

Mail Request

dimooz
7 years ago

0

Mail sent.

Elo0451
7 years ago

0

I don’t have any email :/ :/ :/ pleaaaaase

SIGKILL [r4v463]
7 years ago

0

For the others, you can get email by resetting your password or watching an active thread

Elo0451
7 years ago

0

Don’t undersand…. I have change my password but don’t have email

SIGKILL [r4v463]
7 years ago

0

To have an email, you need to reset with “forgot password”, not to change the password, but now that I’ve anwer to this post, you should have received emails.

dimooz
7 years ago

0

I also sent you one, did you get it?

Shingen_334
7 years ago

0

Mail request please. Thank you

Mugi [Mugiwara27]
7 years ago

0

You could get an email without any post :)

prque
7 years ago | edited 7 years ago

0

Here is a big hint for the X-B6-Key

Check out the emails that you received from hackthis.co.uk

kratos_rebel
6 years ago

0

what tha fuck with this level????????

Mugi [Mugiwara27]
6 years ago

0

What’s the matter, kratos?

apakobunnies
6 years ago

0

Email request now

Smyler [WHGhost]
6 years ago

0

You can get it by yourself you know.
Anyway, here it is :)

ryancor
6 years ago

0

email request

SIGKILL [r4v463]
6 years ago

0

Sorry but the SMTP server is down, so you won’t receive email. I suggest you to go to other levels while the SMTP server is down.

Darwin [DIDIx13]
6 years ago

0

Can’t flabby put a note where it say on the Basic+ Level 6 that the level is in suspend ?

SIGKILL [r4v463]
6 years ago

0

Flabby has not been connected since two months, this is the reason why ^^

Micr0n [micr0n]
6 years ago

1

If he could put a note in the level he could fix the SMTP problem too

Smyler [WHGhost]
6 years ago

0

Year it would be cool to have something to tell people that the level is broken, but it won’t come from flabby as he will simply fix the level. Can’t @Mugiwara27 add a sticky thread on the forum or something?

Mugi [Mugiwara27]
6 years ago

0

The sticky option is broken… Gotta have to wait for Flabby :p

SIGKILL [r4v463]
6 years ago

1

Can’t @dloser find an SQLi so @Mugiwara27 can create a sticky thread?

dloser
6 years ago

0

I don’t share my 0-days. Not that I have any. Or that I would use them to spy on all of you. Not at all.

SIGKILL [r4v463]
6 years ago

0

C'mon we all know that you’ve solved Real 7 using a PDO’s 0-day

Darwin [DIDIx13]
6 years ago

0

I’m not part of “all” ;_;

SIGKILL [r4v463]
6 years ago

0

Actually I was kidding x) using an 0-day for a challenge is a bit overkill (after all, if you’ve find an 0-day, why not?)

dloser
6 years ago

1

The only challenge I solved with a 0-day is Main 1.

SIGKILL [r4v463]
6 years ago

0

I can bet that you’ve found an 0-day in TLS and that you’ve eavesdropped someone solving this level and decrypted his request to the server so you can have the username and password. Am I right?

Micr0n [micr0n]
6 years ago

0

+r4v463 remember you aren’t in the solution side, you could give ideas for this who haven’t solved main 1 yet ;)

Darwin [DIDIx13]
6 years ago

0

+r4v463

I’ve got it don’t worry :p It was a joke too

3 replies have been removed

0

Can I have a notification?

SIGKILL [r4v463]
6 years ago

0

No, read posts above


0

Is there any estimates or I can just skip it and forgot ? :)

SIGKILL [r4v463]
6 years ago

0

Skip it, there will be an post when the SMTP server will be back online.

lucasoz
6 years ago

0

Please send me the mail, the page show me SMTP Error: Could not authenticate.

SIGKILL [r4v463]
6 years ago

0

You can read a bit of this thread maybe?

lucasoz
6 years ago

0

fine. Thank you

SIGKILL [r4v463]
6 years ago

0

Well, you’re welcome…

cl1c
6 years ago

-1

Hi.

I need a notification please.

SIGKILL [r4v463]
6 years ago

0

Someone told you in another thread that the SMTP server was down, so you won’t receive any email.

Micr0n [micr0n]
6 years ago

0

Checking last levels i realized that the people are completing Basic+6 (for example +cl1c, and other today) with the SMTP server down, so there are only two possibilities to do that…

Cheatssssssssssss

Or maybe he/she had the email before the SMTP was down hmmmm

<!-
In 9/10 cases are impossible because they joined less than two months ago, so….

Cheatssssss

-!>

SIGKILL [r4v463]
6 years ago

0

Yes, at least we can know who is cheating …

Darwin [DIDIx13]
6 years ago | edited 6 years ago

0

Yes, few threads on the internet give the X-B6-KEY of HT :/

SIGKILL [r4v463]
6 years ago

0

Yes, you can see easily who’s cheating. When someone solve 10 levels in 5 minutes.

hexhacks
6 years ago

0

hello people

Darwin [DIDIx13]
6 years ago

0

@feuerstein broke the rule :p

fred [feuerstein]
6 years ago

0

shame on me ;)

Reply has been removed
xMr110
5 years ago | edited 5 years ago

0

okay can some one help on this ..
i tried to analyse the email header
i tried to mail a msg to my self and replay to it but no notification was there .
this an example of mail header but i am confused how ican get the header throw the forummail system

From: Media Temple user (mt.kb.user@gmail.com)
Subject: article: How to Trace a Email
Date: January 25, 2011 3:30:58 PM PDT
To: user@example.com
Return-Path: mt.kb.user@gmail.com
Envelope-To: user@example.com
Delivery-Date: Tue, 25 Jan 2011 15:31:01 -0700
Received: from po-out-1718.google.com ([72.14.252.155]:54907) by cl35.gs01.gridserver.com with esmtp (Exim 4.63) (envelope-from mt.kb.user@gmail.com) id 1KDoNH-0000f0-RL for user@example.com; Tue, 25 Jan 2011 15:31:01 -0700
Received: by po-out-1718.google.com with SMTP id y22so795146pof.4 for user@example.com; Tue, 25 Jan 2011 15:30:58 -0700 (PDT)
Received: by 10.141.116.17 with SMTP id t17mr3929916rvm.251.1214951458741; Tue, 25 Jan 2011 15:30:58 -0700 (PDT)
Received: by 10.140.188.3 with HTTP; Tue, 25 Jan 2011 15:30:58 -0700 (PDT)
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:mime-version:content-type; bh=+JqkmVt+sHDFIGX5jKp3oP18LQf10VQjAmZAKl1lspY=; b=F87jySDZnMayyitVxLdHcQNL073DytKRyrRh84GNsI24IRNakn0oOfrC2luliNvdea LGTk3adIrzt+N96GyMseWz8T9xE6O/sAI16db48q4Iqkd7uOiDvFsvS3CUQlNhybNw8m CH/o8eELTN0zbSbn5Trp0dkRYXhMX8FTAwrH0=
Domainkey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type; b=wkbBj0M8NCUlboI6idKooejg0sL2ms7fDPe1tHUkR9Ht0qr5lAJX4q9PMVJeyjWalH 36n4qGLtC2euBJY070bVra8IBB9FeDEW9C35BC1vuPT5XyucCm0hulbE86+uiUTXCkaB 6ykquzQGCer7xPAcMJqVfXDkHo3H61HM9oCQM=
Message-Id: c8f49cec0807011530k11196ad4p7cb4b9420f2ae752@mail.gmail.com
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=“—-=_Part_3927_12044027.1214951458678”
X-Spam-Status: score=3.7 tests=DNS_FROM_RFC_POST, HTML_00_10, HTML_MESSAGE, HTML_SHORT_LENGTH version=3.1.7
X-Spam-Level: ***
Message Body: This is a KnowledgeBase article that provides information on how to find email headers and use the data to trace a email.

and thanks

Mugi [Mugiwara27]
5 years ago

0

There is currently an issue with the mail service, so you won’t be able to get a mail and then do some analyze to it and thus won’t be able to finish the level. Keep this one aside and do others, this one will be fixed as soon as possible

xMr110
5 years ago

0

Okay, so just a little hint here …
where i should look .
iam watching the ajax for the new notifiction and i tried to send PM to my self ..
any hints or what i should use .

Mugi [Mugiwara27]
5 years ago

0

I think you didn’t really get what I meant in the previous message… You won’t be able to finish the level now ‘cause there is a problem with the SMTP server and you need to wait until it’s fixed

xMr110
5 years ago

0

aha okay thanks i will go to the next one .

elpaulio
5 years ago

0

@elpaulio email test

3 replies have been removed
b31shmc
4 years ago

0

Is there a notification when post on the forum?

fred [feuerstein]
4 years ago

0

You can decide by your settings

ohad156
4 years ago

0

How can i receive an email from this website?

Darwin [DIDIx13]
4 years ago

0

@ohad156 You can decide by your settings just check the very previous post …

hackaruba
4 years ago

0

I need some hints…stuck here

dimooz
4 years ago | edited 4 years ago

0

Honestly there are enough hints in the forum about that level, just take your time and read the posts.

5 replies have been removed
Discussion thread has been locked. You can no longer add new posts.
1 of 105

This site only uses cookies that are essential for the functionality of this website. Cookies are not used for tracking or marketing purposes.

By using our site, you acknowledge that you have read and understand our Privacy Policy, and Terms of Service.

Dismiss