OverTheWire Natas Level 33 Walkthrough

7 min read appsec
With level 33 of Natas, we are randomly back to PHP after a brief journey using Perl. This is the final level of OverTheWire’s Natas series! This walkthrough covers how Phar deserialization

OverTheWire Natas Level 32 Walkthrough

5 min read appsec
This next level of Natas is solvable using the techniques in the previous post, but this walkthrough will cover the same techniques, skipping over the read-only version of the Pinnacle Attack from “Perl

OverTheWire Natas Level 31 Walkthrough

7 min read appsec
This next level of Natas is another Perl-focused one. The attack vector used is from a 2016 presentation called “Perl Jam 2“, describing a 20 year old bug. Despite (or maybe because of?

OverTheWire Natas Level 30 Walkthrough

4 min read appsec
This next level of Natas is also written in Perl. I surprised myself with how quickly I solved this challenge (based on a proof of concept I found) but went back to better

OverTheWire Natas Level 29 Walkthrough

5 min read appsec
After 28 levels of PHP, this level of OverTheWire’s Natas switches to Perl instead. This walkthrough covers how to find the solution with plenty of screenshots and query details. What is Natas?