$ ./pybgrab.py http://www.vg.no [+] http://www.vg.no: [!] No 'Server' header received, the response contained the following headers: X-VG-WebServer: leon Cache-Control: must-revalidate Vary: Accept-Encoding Content-Type: text/html; charset=UTF-8 X-VG-WebCache: dexter X-Rick-Would-Never: Run Around and Desert You X-VG-Korken: http://www.youtube.com/watch?v=Fcj8CnD5188 X-VG-SolveMe: uggc://jjj.it.ab/ynxfrgngg.cuc Content-Length: 317406 Date: Fri, 04 Feb 2011 19:17:01 GMT Connection: close X-Cache: HIT X-Cache-Hits: 578 X-Age: 387
Those are not exactly RFC2616 headers, to put it mildly. It contains a Rickroll, a youtube video of the VG Multimedia team in the famous sled ride “Korketrekkeren” in Oslo, and a riddle:
The riddle is fairly easy to solve (hint: it’s a famous cipher). The solution leads you to a web page, but the last part of the riddle is missing; VG seems to have removed the bas64-encoded headers that contained the URL to a job ad for the newspaper. Hard times in the news industry maybe?