natas 20-21 (session login, injection parameters)

Username: natas20Password: EuGIeuGIlnEuG3VneuGIlIeuGAFURL:http://natas20.natas.labs.overthewire.org/ View source: The debug($msg) function opens the debug message, which can be accessed by adding /index.php?debug to the end of the URL to see the debug message $msg. After visiting, see a number of messages: In short, myread first checks the sid (first time automatically generated by the server and saved inContinue reading “natas 20-21 (session login, injection parameters)”

Level 17-18 (sql blinds of time blinds)

Username: natas17Password: kgQPkNdkgQNPkq9Ps3NdkhP7GmAURL:http://natas17.natas.labs.overthewire.org/ quite a hard question for me, here is the source code: Analyse the source code and find that this is a sql injection question, similar to the 15 questions, but no longer provide the echo, all echo are commented out. Guess the username for natas18, still blind injection of ideas, but becauseContinue reading “Level 17-18 (sql blinds of time blinds)”

File Upload Vulnerability

Well, I knew everything wasn’t that simple. Maybe my date for digging for treasure on the UNSW server will be pushed back (just a joke!) what is that vulnerability: A file upload vulnerability is when a user uploads an executable script file and gains the ability to execute server-side commands through this script file. ThisContinue reading “File Upload Vulnerability”

natas 12-13(fake file upload)

How to pass: Username: natas12Password:KHZy1rDGIR3DBPUZKHZy1rfLURL:http://natas12.natas.labs.overthewire.org/ Tips can be uploaded images, the maximum does not exceed 1kB, click Viewsourcecode to view the source code, the key code is as follows: By reading the code, you can find that in addition to limiting the file size and file extension to do the front-end restrictions, there is noContinue reading “natas 12-13(fake file upload)”

Natas 5-6 change cookie

how to solve: Username: natas5password: iX6IOfmpN7AYOQGPwtn3fXpbaJVJcHfqURL: http://natas5.natas.labs.overthewire.org You are notloggedin. This is a bit of a conundrum, obviously we are logged in, but we are not logged in, why is this? Here we have to talk about the characteristics of the http protocol, http protocol is a stateless protocol, each time the transfer of dataContinue reading “Natas 5-6 change cookie”