Username: natas20Password: EuGIeuGIlnEuG3VneuGIlIeuGAFURL:http://natas20.natas.labs.overthewire.org/ View source: The debug($msg) function opens the debug message, which can be accessed by adding /index.php?debug to the end of the URL to see the debug message $msg. After visiting, see a number of messages: In short, myread first checks the sid (first time automatically generated by the server and saved inContinue reading “natas 20-21 (session login, injection parameters)”
Category Archives: Uncategorized
Level 17-18 (sql blinds of time blinds)
Username: natas17Password: kgQPkNdkgQNPkq9Ps3NdkhP7GmAURL:http://natas17.natas.labs.overthewire.org/ quite a hard question for me, here is the source code: Analyse the source code and find that this is a sql injection question, similar to the 15 questions, but no longer provide the echo, all echo are commented out. Guess the username for natas18, still blind injection of ideas, but becauseContinue reading “Level 17-18 (sql blinds of time blinds)”
File Upload Vulnerability
Well, I knew everything wasn’t that simple. Maybe my date for digging for treasure on the UNSW server will be pushed back (just a joke!) what is that vulnerability: A file upload vulnerability is when a user uploads an executable script file and gains the ability to execute server-side commands through this script file. ThisContinue reading “File Upload Vulnerability”
natas 12-13(fake file upload)
How to pass: Username: natas12Password:KHZy1rDGIR3DBPUZKHZy1rfLURL:http://natas12.natas.labs.overthewire.org/ Tips can be uploaded images, the maximum does not exceed 1kB, click Viewsourcecode to view the source code, the key code is as follows: By reading the code, you can find that in addition to limiting the file size and file extension to do the front-end restrictions, there is noContinue reading “natas 12-13(fake file upload)”
Learn about cookie
What is a Cookie How to use cookiesCookies generally serve two purposes.The first is to identify the user.The second is to record the history In more detail: Cookies (often referred to as Internet cookies) are text files with a small amount of data (e.g. username and password) that are used to identify a user’s computerContinue reading “Learn about cookie”
Natas 5-6 change cookie
how to solve: Username: natas5password: iX6IOfmpN7AYOQGPwtn3fXpbaJVJcHfqURL: http://natas5.natas.labs.overthewire.org You are notloggedin. This is a bit of a conundrum, obviously we are logged in, but we are not logged in, why is this? Here we have to talk about the characteristics of the http protocol, http protocol is a stateless protocol, each time the transfer of dataContinue reading “Natas 5-6 change cookie”
Natas3-4(robots.txt)
How to solve this level: easily find this code: <div id=”content”> There is nothing on this page <!– No more information leaks!! Not even Google will find it this time… –> </div> just need to find robots.txt file in URL. Quite easy. but this is the first time I know robots.txt file. So I goContinue reading “Natas3-4(robots.txt)”
The Art of Connection
In the ever-evolving world, the art of forging genuine connections remains timeless. Whether it’s with colleagues, clients, or partners, establishing a genuine rapport paves the way for collaborative success.
Beyond the Obstacle
Challenges in business are a given, but it’s our response to them that defines our trajectory. Looking beyond the immediate obstacle, there lies a realm of opportunity and learning.
