appsec

OverTheWire Natas Level 27 Walkthrough

This post covers level 27 of OverTheWire’s Natas challenges. This level is a bit more of a technical gotcha than previous levels (which covered more classic OWASP-style vulnerabilities). Let’s get started!

OverTheWire Natas Level 26 Walkthrough

This level of Natas covers a PHP deserialization vulnerability. This walkthrough covers source code analysis, why these vulnerabilities work, and how to construct a proof of concept that will get us the flag.

OverTheWire Natas Level 25 Walkthrough

Only 10 levels left of Natas from OverTheWire! This level was a fun challenge, involving two different vulnerabilities to get the flag. This blog post is a walkthrough of source code analysis, and

OverTheWire Natas Level 24 Walkthrough

The Natas walkthrough series continues with level 24. This challenge is based around PHP data types and how they can affect web security. What is Natas? Natas is an online hacking game meant

OverTheWire Natas Level 23 Walkthrough

This post is a walkthrough for level 23 of Natas, which gets us into some more PHP functions. This post shows how to evaluate the code and get the solution. What is Natas?