Take a look into the source code:
A simple GET form with an interesting comment:
<!-- fortune files are in fortunes/ directory -->
This is a clue!
Level 3 – fortune
Level 1 – getadmin
The getadmin contest show us the danger of enabling the register_globals directive in PHP. Looking into the source code, you can see that it is a simple form:
Level 4 – oneweb
I don’t be lying saying that oneweb was the easiest level of the Web challenges from RootedCON’2010 CTF.
Here’s how it looks like: a single text (in spanish) as instructions to follow:
«Ok, we are at 1st., the next file you must read is:
0fdd8fd4233f8a226ff5a4fe87eee080.html
Into that file you will find more instructions.«