ctf writeup - LearnHacking.io

Add .DS_Store to Your Wordlists (TFC CTF's "MacDonalds" challenge)

Nov 30, 2021 3 min read appsec

One of the CTF challenges from TFC CTF was called “MacDonalds”. This challenge essentially asks you to find a web directory–without using a scanner like dirb–given a few hints. There’s

OverTheWire Krypton (Levels 0-9)

Nov 23, 2021 11 min read cryptography

OverTheWire is an educational hacking site with different “war games” meant to teach different topics (for example, Natas teaches web security). Krypton is a short war game focused on introductory cryptography concepts. Level

OverTheWire Natas Level 33 Walkthrough

Nov 20, 2021 7 min read appsec

With level 33 of Natas, we are randomly back to PHP after a brief journey using Perl. This is the final level of OverTheWire’s Natas series! This walkthrough covers how Phar deserialization

OverTheWire Natas Level 32 Walkthrough

Nov 19, 2021 5 min read appsec

This next level of Natas is solvable using the techniques in the previous post, but this walkthrough will cover the same techniques, skipping over the read-only version of the Pinnacle Attack from “Perl

OverTheWire Natas Level 31 Walkthrough

Nov 18, 2021 7 min read appsec

This next level of Natas is another Perl-focused one. The attack vector used is from a 2016 presentation called “Perl Jam 2“, describing a 20 year old bug. Despite (or maybe because of?