Natas Level 2 Writeup: View Source

URL: http://natas2.natas.labs.overthewire.org

Open the Website

Upon accessing the provided URL, you are presented with the Natas Level 2 webpage.

View the Source Code

Inspecting the source code reveals a clue—an image tag referencing a file on the server:

Explore the Image URL

The image file is located at http://natas2.natas.labs.overthewire.org/files/pixel.png

Attempting to open the URL directly leads to a blank page

Navigate to the Files Directory

Navigate back one directory to the "files" directory, revealing all available files:

http://natas2.natas.labs.overthewire.org/files/

Open the users.txt File

Select the "users.txt" file, and you will find the password to the next level

Proceed to Level 3

______________________________________

NthApostle

Comments

Natas Level 14 Writeup: SQL Injection

1. Objective Find the password for natas level 15. URL: http://natas14.natas.labs.overthewire.org 2. Introduction After opening the webpage, we see a login form. We need to get the correct credentials or somehow bypass the login page in order to proceed to the next level. 3. Exploration Clicking on the View sourcecode link we are able to view the logic of the server side code. The following code snippet is used to query the database to check if the username and password are valid $query = "SELECT * from users where username=\"".$_REQUEST["username"]."\" and password=\"".$_REQUEST["password"]."\""; However, we immediately notice that the input is not being sanitized and is being used directly in the query via string concatenation. These shows us that there is potential for sq injection SQL injection is a cyber attack that exploits vulne...

Natas Level 11 Writeup: XOR Encryption

1. Objective Find the password for natas level 12. 2. Introduction When we open the webpage for Natas 11, we are greeted with the following message: Cookies are protected with XOR encryption. What is XOR: XOR is a binary operation that returns true (1) only when the number of true inputs is odd. It compares corresponding bits of two binary numbers, resulting in 1 for differing bits and 0 for identical bits. Example: Let's consider two binary numbers, A = 1010 and B = 1101. 1010 X 1101 ------- 0111 In this case, A XOR B equals 0111 in binary, or 7 in decimal. XOR Property: If A XOR B = C, then A XOR C = B. Verification: Let A = 1010, C = 0111, and find B. 1010 X 0111 ------- 1101 The result is 1101 in binary, which is B. So, A XOR C equals B, confirming the XOR property. This property holds true for any combination of A, B, and C, demonstrating that given any two values, you can find the third using XOR. 3. Exploration Ch...

Natas Level 12 Writeup: File Upload Vulnerability

1. Objective Find the password for natas level 13. 2. Introduction The first thing we see is a form that gives us the ability to upload 'JPEG' images. If proper checks have not been put in place to validate the uploaded file, it is highly likely that we may have a File Upload Vulnerability. A File Upload Vulnerability is a security issue that arises when proper checks are not implemented to validate uploaded files. In this level, we explore the possibility of exploiting such a vulnerability. 3. Exploration Let's use the 'View source code' button to check what clues we can find there. The process that takes place on the server. A file name is generated before the page is served to the user The filename is stored in a hidden field called filename When a user uploads a file, the server checks if the filename field is present It prepares for the file to be saved in the ...

Cyber Security Blog

Search This Blog