Natas20 – Jony Schats

Posted by Jony Schats on November 7, 2019 November 7, 2019 Writeups

Challange:
After logging in we see the same message as a couple challanges ago: You are logged in as a regular user. Login as an admin to retrieve credentials for natas21.

After having a look at the sourcecode I could not find something special. Lets input some names.

The value of PHPSESSID seems to be totally changing without any output:
– mvstor4443f13ka1vq99827906
– 4s83chrl0hfabukil5t7rpej63
Same when putting some input like “A”
– 6jhcl2screlh89nc8i5k6a7331
– ik2f4oi9dos276meogdc7a8dr1

To be honest I have no clue on how to complete this challenge. After reading a walkthrough I figured it might be a bit to hard for me to do now. I will go further with the Natas challanges after exploring some more experience with webapps.

Leave a Reply Cancel reply

How safe is your USB drive? October 20, 2020
What are some of the key security risks to be aware of when using USB flash drives and how can you mitigate the threats? The post How safe is your USB drive? appeared first on WeLiveSecurity
Amer Owaida
Microsoft issues two emergency Windows patches October 19, 2020
The flaws, neither of which is being actively exploited, were fixed merely days after the monthly Patch Tuesday rollout The post Microsoft issues two emergency Windows patches appeared first on WeLiveSecurity
Amer Owaida
Week in security with Tony Anscombe October 16, 2020
ESET joins global effort to disrupt the infamous Trickbot botnet – Criminals claim to have hijacked thousands of security cameras – Five ways to secure your home office The post Week in security with Tony Anscombe appeared first on WeLiveSecurity
Editor
Child abductors may use social media to lure victims, FBI warns October 16, 2020
School closings and more screen time can ultimately put children at an increased risk of being kidnapped by strangers they met online The post Child abductors may use social media to lure victims, FBI warns appeared first on WeLiveSecurity
Amer Owaida
5 things you can do to secure your home office without hiring an expert October 16, 2020
You don’t need a degree in cybersecurity or a bottomless budget to do the security basics well – here are five things that will get you on the right track The post 5 things you can do to secure your home office without hiring an expert appeared first on WeLiveSecurity
Cameron Camp
Zoom to begin rolling out end‑to‑end encryption October 15, 2020
The videoconferencing platform is making the feature available to users of both free and paid tiers The post Zoom to begin rolling out end‑to‑end encryption appeared first on WeLiveSecurity
Amer Owaida
50,000 home cameras reportedly hacked, footage posted online October 14, 2020
Some footage has already appeared on adult sites, with cybercriminals offering lifetime access to the entire loot for US$150 The post 50,000 home cameras reportedly hacked, footage posted online appeared first on WeLiveSecurity
Amer Owaida
Attackers chain Windows, VPN flaws to target US government agencies October 13, 2020
Bad actors have accessed US elections support systems, although there's no evidence to suggest that election data has been compromised, say FBI and CISA The post Attackers chain Windows, VPN flaws to target US government agencies appeared first on WeLiveSecurity
Amer Owaida