Natas Level 10 Writeup: Command Injection 2

URL: http://natas10.natas.labs.overthewire.org

1. Objective

Find the password for natas 11

2. Method

Open the Website:

Visit the provided URL in your browser.

Check the Source Code:

Bypassing the Filter:

Use command substitution $(command) to bypass the filter.

Enter the search term a $(find /etc/natas_webpass -name natas11 2>/dev/null).

Explore the Output:

Examine the output, revealing files like index-source.html.

Find the natas11 Password File:

Use the command a $(find /etc/natas_webpass -name natas11 2>/dev/null).

Locate the Password:

The password for natas11 is revealed

            >! /etc/natas_webpass/natas11:[Level 11 Password]
            dictionary.txt:
            dictionary.txt:African
            dictionary.txt:Africans
            dictionary.txt:Allah

Success

Use the password to proceed to the next level

______________________________________

NthApostle

Comments

Natas Level 14 Writeup: SQL Injection

1. Objective Find the password for natas level 15. URL: http://natas14.natas.labs.overthewire.org 2. Introduction After opening the webpage, we see a login form. We need to get the correct credentials or somehow bypass the login page in order to proceed to the next level. 3. Exploration Clicking on the View sourcecode link we are able to view the logic of the server side code. The following code snippet is used to query the database to check if the username and password are valid $query = "SELECT * from users where username=\"".$_REQUEST["username"]."\" and password=\"".$_REQUEST["password"]."\""; However, we immediately notice that the input is not being sanitized and is being used directly in the query via string concatenation. These shows us that there is potential for sq injection SQL injection is a cyber attack that exploits vulne...

Natas 4 Writeup: Referrer

Natas Level 4: Referrer Header Trick URL: http://natas4.natas.labs.overthewire.org Open the Website: Challenge: The goal is to change the Referer header to a specific URL. Tools Needed: Use an add-on like Requestly (an open-source HTTP debugging proxy for Chrome) or Burp Suite for this task. Modify the Referer Header: Install Requestly: If using Requestly, install the addon for your browser. Configure Referer: Add a rule to modify the Referer header to match the required URL. Capture the Password: Refresh the page after modifying the Referer header. Access Granted: Voila! The password for natas5 is revealed. Proceed to the next level using the acquired password. ______________________________________ NthApostle

Natas Level 12 Writeup: File Upload Vulnerability

1. Objective Find the password for natas level 13. 2. Introduction The first thing we see is a form that gives us the ability to upload 'JPEG' images. If proper checks have not been put in place to validate the uploaded file, it is highly likely that we may have a File Upload Vulnerability. A File Upload Vulnerability is a security issue that arises when proper checks are not implemented to validate uploaded files. In this level, we explore the possibility of exploiting such a vulnerability. 3. Exploration Let's use the 'View source code' button to check what clues we can find there. The process that takes place on the server. A file name is generated before the page is served to the user The filename is stored in a hidden field called filename When a user uploads a file, the server checks if the filename field is present It prepares for the file to be saved in the ...

Cyber Security Blog

Search This Blog