Category: CTF Sites

[OverTheWire] Natas – Level 07 0

[OverTheWire] Natas – Level 07

http://natas7.natas.labs.overthewire.org/ Xem source: [php] natas7 Home About [/php] Với dạng ?page=xxx, có thể nghĩ ngay đến Remote File Inclusion, và gợi ý đề đường dẫn nằm trong source cũng một phần góp thêm lý...

[OverTheWire] Natas – Level 06 0

[OverTheWire] Natas – Level 06

http://natas6.natas.labs.overthewire.org/ Input secret… Nhấn View sourcecode: [php] include “includes/secret.inc”; if(array_key_exists(“submit”, $_POST)) { if($secret == $_POST[‘secret’]) { print “Access granted. The password for natas7 is “; } else { print “Wrong secret”; } } ?>...

[OverTheWire] Natas – Level 05 0

[OverTheWire] Natas – Level 05

http://natas5.natas.labs.overthewire.org/ Access disallowed. You are not logged in Xem thông tin HTTP Response: HTTP/1.1 200 OK Date: Sat, 17 Aug 2013 14:09:15 GMT Server: Apache/2.2.22 (Ubuntu) X-Powered-By: PHP/5.3.10-1ubuntu3.7 Set-Cookie: loggedin=0 Vary: Accept-Encoding Content-Encoding: gzip...

[OverTheWire] Natas – Level 04 0

[OverTheWire] Natas – Level 04

http://natas4.natas.labs.overthewire.org/ Access disallowed. You are visiting from “” while authorized users should come only from “http://natas5.natas.labs.overthewire.org/” Câu trên nghĩa là tham số referer của request header phải là http://natas5.natas.labs.overthewire.org/. Có thể sử dụng curl...

[OverTheWire] Natas – Level 03 0

[OverTheWire] Natas – Level 03

http://natas3.natas.labs.overthewire.org/ There is nothing on this page Xem source: [html] <html> <head> <!– This stuff in the header has nothing to do with the level –> <link rel="stylesheet" type="text/css" href="http://natas.labs.overthewire.org/css/level.css"> <link rel="stylesheet" href="http://natas.labs.overthewire.org/css/jquery-ui.css" />...

[OverTheWire] Natas – Level 02 0

[OverTheWire] Natas – Level 02

http://natas2.natas.labs.overthewire.org/ There is nothing on this page Xem source: [html] <html> <head> <!– This stuff in the header has nothing to do with the level –> <link rel="stylesheet" type="text/css" href="http://natas.labs.overthewire.org/css/level.css"> <link rel="stylesheet" href="http://natas.labs.overthewire.org/css/jquery-ui.css" />...

[OverTheWire] Natas – Level 01 0

[OverTheWire] Natas – Level 01

http://natas1.natas.labs.overthewire.org/ You can find the password for the next level on this page, but rightclicking has been blocked! Dùng phím tắt để xem source (vd Ctrl+U trên Firefox): [html] <html> <head> <!– This stuff...

[OverTheWire] Natas – Level 00 0

[OverTheWire] Natas – Level 00

http://natas0.natas.labs.overthewire.org/ You can find the password for the next level on this page. Xem source: [html] <html> <head> <!– This stuff in the header has nothing to do with the level –> <link rel="stylesheet"...

[WarGame] wtf_blackout 0

[WarGame] wtf_blackout

http://wargame.kr:8080/prob/35/ BlueH4G did working test.php in current directory! but, the blackout began yesterday.. We can view BlueH4G’s test.php source!! Không có bất cứ thứ gì cả, ngoài việc chúng ta thấy lời tựa tiếng...