php

OverTheWire Natas Level 33 Walkthrough

7 min read appsec
With level 33 of Natas, we are randomly back to PHP after a brief journey using Perl. This is the final level of OverTheWire’s Natas series! This walkthrough covers how Phar deserialization

OverTheWire Natas Level 28 Walkthrough

12 min read appsec
This level was the hardest for me thus far, and is in fact a mix of web security and cryptography. Cryptography is not my strong suit and I had to lean on other

OverTheWire Natas Level 27 Walkthrough

6 min read appsec
This post covers level 27 of OverTheWire’s Natas challenges. This level is a bit more of a technical gotcha than previous levels (which covered more classic OWASP-style vulnerabilities). Let’s get started!

OverTheWire Natas Level 26 Walkthrough

8 min read appsec
This level of Natas covers a PHP deserialization vulnerability. This walkthrough covers source code analysis, why these vulnerabilities work, and how to construct a proof of concept that will get us the flag.

OverTheWire Natas Level 25 Walkthrough

6 min read appsec
Only 10 levels left of Natas from OverTheWire! This level was a fun challenge, involving two different vulnerabilities to get the flag. This blog post is a walkthrough of source code analysis, and