diff --git a/404.html b/404.html index 91ae15a..d2f6fca 100644 --- a/404.html +++ b/404.html @@ -5,10 +5,10 @@ Page Not Found | William Costa - - + + -
Skip to main content

Page Not Found

We could not find what you were looking for.

Please contact the owner of the site that linked you to the original URL and let them know their link is broken.

+
Skip to main content

Page Not Found

We could not find what you were looking for.

Please contact the owner of the site that linked you to the original URL and let them know their link is broken.

\ No newline at end of file diff --git a/assets/images/Natas_natas_level_0_tip-2a3e9b5a114902bed0b22b651546d626.png b/assets/images/Natas_natas_level_0_tip-2a3e9b5a114902bed0b22b651546d626.png new file mode 100644 index 0000000..fe23568 Binary files /dev/null and b/assets/images/Natas_natas_level_0_tip-2a3e9b5a114902bed0b22b651546d626.png differ diff --git a/assets/images/Natas_natas_level_1_tip-eac7b60699d0e6c66d40cfe83e0f81ad.png b/assets/images/Natas_natas_level_1_tip-eac7b60699d0e6c66d40cfe83e0f81ad.png new file mode 100644 index 0000000..7cf8e3e Binary files /dev/null and b/assets/images/Natas_natas_level_1_tip-eac7b60699d0e6c66d40cfe83e0f81ad.png differ diff --git a/assets/images/Natas_natas_level_2_directory_listing-57288be71280ee52c113d1097099915e.png b/assets/images/Natas_natas_level_2_directory_listing-57288be71280ee52c113d1097099915e.png new file mode 100644 index 0000000..663a12a Binary files /dev/null and b/assets/images/Natas_natas_level_2_directory_listing-57288be71280ee52c113d1097099915e.png differ diff --git a/assets/images/Natas_natas_level_3_google_dorking-0e83bb866e691c6c145d1f820da4c48e.png b/assets/images/Natas_natas_level_3_google_dorking-0e83bb866e691c6c145d1f820da4c48e.png new file mode 100644 index 0000000..d2d2ade Binary files /dev/null and b/assets/images/Natas_natas_level_3_google_dorking-0e83bb866e691c6c145d1f820da4c48e.png differ diff --git a/assets/images/Natas_natas_level_3_s3cr3t-09a1dc2eca1722be7a2dbc58cba35971.png b/assets/images/Natas_natas_level_3_s3cr3t-09a1dc2eca1722be7a2dbc58cba35971.png new file mode 100644 index 0000000..ec04513 Binary files /dev/null and b/assets/images/Natas_natas_level_3_s3cr3t-09a1dc2eca1722be7a2dbc58cba35971.png differ diff --git a/assets/images/Natas_natas_level_4_tip-dacdc966678aa7da59488e12ce5f06b3.png b/assets/images/Natas_natas_level_4_tip-dacdc966678aa7da59488e12ce5f06b3.png new file mode 100644 index 0000000..4c76ba5 Binary files /dev/null and b/assets/images/Natas_natas_level_4_tip-dacdc966678aa7da59488e12ce5f06b3.png differ diff --git a/assets/js/1257f46f.0fbbee9b.js b/assets/js/1257f46f.0fbbee9b.js deleted file mode 100644 index 2d3b81a..0000000 --- a/assets/js/1257f46f.0fbbee9b.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkctf_writeup=self.webpackChunkctf_writeup||[]).push([[616],{3862:e=>{e.exports=JSON.parse('{"categoryGeneratedIndex":{"title":"Windows Writeups","description":"Work In Progress","slug":"/category/windows-writeups","permalink":"/ctf-writeup/docs/category/windows-writeups","sidebar":"tutorialSidebar","navigation":{"previous":{"title":"Test","permalink":"/ctf-writeup/docs/ctf-writeups/Linux/natas"},"next":{"title":"Test","permalink":"/ctf-writeup/docs/ctf-writeups/windows/win"}}}}')}}]); \ No newline at end of file diff --git a/assets/js/1257f46f.45f9fdfe.js b/assets/js/1257f46f.45f9fdfe.js new file mode 100644 index 0000000..06347f4 --- /dev/null +++ b/assets/js/1257f46f.45f9fdfe.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkctf_writeup=self.webpackChunkctf_writeup||[]).push([[616],{3862:t=>{t.exports=JSON.parse('{"categoryGeneratedIndex":{"title":"Windows Writeups","description":"Work In Progress","slug":"/category/windows-writeups","permalink":"/ctf-writeup/docs/category/windows-writeups","sidebar":"tutorialSidebar","navigation":{"previous":{"title":"Natas","permalink":"/ctf-writeup/docs/ctf-writeups/Linux/natas"},"next":{"title":"Test","permalink":"/ctf-writeup/docs/ctf-writeups/windows/win"}}}}')}}]); \ No newline at end of file diff --git a/assets/js/4053f2ef.57dee585.js b/assets/js/4053f2ef.57dee585.js new file mode 100644 index 0000000..64dcd17 --- /dev/null +++ b/assets/js/4053f2ef.57dee585.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkctf_writeup=self.webpackChunkctf_writeup||[]).push([[26],{9188:e=>{e.exports=JSON.parse('{"version":{"pluginId":"default","version":"current","label":"Next","banner":null,"badge":false,"noIndex":false,"className":"docs-version-current","isLast":true,"docsSidebars":{"tutorialSidebar":[{"type":"category","label":"CTF-Writeups","collapsible":true,"collapsed":true,"items":[{"type":"category","label":"Linux Writeups","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Natas","href":"/ctf-writeup/docs/ctf-writeups/Linux/natas","docId":"ctf-writeups/Linux/natas","unlisted":false}],"href":"/ctf-writeup/docs/category/linux-writeups"},{"type":"category","label":"Windows Writeups","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Test","href":"/ctf-writeup/docs/ctf-writeups/windows/win","docId":"ctf-writeups/windows/win","unlisted":false}],"href":"/ctf-writeup/docs/category/windows-writeups"}],"href":"/ctf-writeup/docs/category/ctf-writeups"}]},"docs":{"ctf-writeups/Linux/natas":{"id":"ctf-writeups/Linux/natas","title":"Natas","description":"Introduction","sidebar":"tutorialSidebar"},"ctf-writeups/windows/win":{"id":"ctf-writeups/windows/win","title":"Test","description":"","sidebar":"tutorialSidebar"}}}}')}}]); \ No newline at end of file diff --git a/assets/js/4053f2ef.cf5acd1f.js b/assets/js/4053f2ef.cf5acd1f.js deleted file mode 100644 index 57f6954..0000000 --- a/assets/js/4053f2ef.cf5acd1f.js +++ /dev/null @@ -1 +0,0 @@ -"use strict";(self.webpackChunkctf_writeup=self.webpackChunkctf_writeup||[]).push([[26],{9188:e=>{e.exports=JSON.parse('{"version":{"pluginId":"default","version":"current","label":"Next","banner":null,"badge":false,"noIndex":false,"className":"docs-version-current","isLast":true,"docsSidebars":{"tutorialSidebar":[{"type":"category","label":"CTF-Writeups","collapsible":true,"collapsed":true,"items":[{"type":"category","label":"Linux Writeups","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Test","href":"/ctf-writeup/docs/ctf-writeups/Linux/natas","docId":"ctf-writeups/Linux/natas","unlisted":false}],"href":"/ctf-writeup/docs/category/linux-writeups"},{"type":"category","label":"Windows Writeups","collapsible":true,"collapsed":true,"items":[{"type":"link","label":"Test","href":"/ctf-writeup/docs/ctf-writeups/windows/win","docId":"ctf-writeups/windows/win","unlisted":false}],"href":"/ctf-writeup/docs/category/windows-writeups"}],"href":"/ctf-writeup/docs/category/ctf-writeups"}]},"docs":{"ctf-writeups/Linux/natas":{"id":"ctf-writeups/Linux/natas","title":"Test","description":"","sidebar":"tutorialSidebar"},"ctf-writeups/windows/win":{"id":"ctf-writeups/windows/win","title":"Test","description":"","sidebar":"tutorialSidebar"}}}}')}}]); \ No newline at end of file diff --git a/assets/js/42b297fd.67c01797.js b/assets/js/42b297fd.33e5cbe5.js similarity index 79% rename from assets/js/42b297fd.67c01797.js rename to assets/js/42b297fd.33e5cbe5.js index 3ec8164..ee143f6 100644 --- a/assets/js/42b297fd.67c01797.js +++ b/assets/js/42b297fd.33e5cbe5.js @@ -1 +1 @@ -"use strict";(self.webpackChunkctf_writeup=self.webpackChunkctf_writeup||[]).push([[691],{5975:t=>{t.exports=JSON.parse('{"categoryGeneratedIndex":{"title":"Linux Writeups","description":"Currently working on my Natas Writeup. Predicted for 30/7/24","slug":"/category/linux-writeups","permalink":"/ctf-writeup/docs/category/linux-writeups","sidebar":"tutorialSidebar","navigation":{"previous":{"title":"CTF-Writeups","permalink":"/ctf-writeup/docs/category/ctf-writeups"},"next":{"title":"Test","permalink":"/ctf-writeup/docs/ctf-writeups/Linux/natas"}}}}')}}]); \ No newline at end of file +"use strict";(self.webpackChunkctf_writeup=self.webpackChunkctf_writeup||[]).push([[691],{5975:t=>{t.exports=JSON.parse('{"categoryGeneratedIndex":{"title":"Linux Writeups","description":"Currently working on my Natas Writeup. Predicted for 30/7/24","slug":"/category/linux-writeups","permalink":"/ctf-writeup/docs/category/linux-writeups","sidebar":"tutorialSidebar","navigation":{"previous":{"title":"CTF-Writeups","permalink":"/ctf-writeup/docs/category/ctf-writeups"},"next":{"title":"Natas","permalink":"/ctf-writeup/docs/ctf-writeups/Linux/natas"}}}}')}}]); \ No newline at end of file diff --git a/assets/js/668e9d7a.1ea720ed.js b/assets/js/668e9d7a.1ea720ed.js new file mode 100644 index 0000000..d9db8a3 --- /dev/null +++ b/assets/js/668e9d7a.1ea720ed.js @@ -0,0 +1 @@ +"use strict";(self.webpackChunkctf_writeup=self.webpackChunkctf_writeup||[]).push([[165],{7060:(e,A,n)=>{n.r(A),n.d(A,{assets:()=>c,contentTitle:()=>r,default:()=>o,frontMatter:()=>t,metadata:()=>a,toc:()=>h});var s=n(4848),i=n(8453);const t={sidebar_position:1},r="Natas",a={id:"ctf-writeups/Linux/natas",title:"Natas",description:"Introduction",source:"@site/docs/ctf-writeups/Linux/natas.md",sourceDirName:"ctf-writeups/Linux",slug:"/ctf-writeups/Linux/natas",permalink:"/ctf-writeup/docs/ctf-writeups/Linux/natas",draft:!1,unlisted:!1,editUrl:"https://github.com/facebook/docusaurus/tree/main/packages/create-docusaurus/templates/shared/docs/ctf-writeups/Linux/natas.md",tags:[],version:"current",sidebarPosition:1,frontMatter:{sidebar_position:1},sidebar:"tutorialSidebar",previous:{title:"Linux Writeups",permalink:"/ctf-writeup/docs/category/linux-writeups"},next:{title:"Windows Writeups",permalink:"/ctf-writeup/docs/category/windows-writeups"}},c={},h=[{value:"Introduction",id:"introduction",level:2},{value:"Level 0",id:"level-0",level:2},{value:"Level 1",id:"level-1",level:2},{value:"Level 2",id:"level-2",level:2},{value:"Level 3",id:"level-3",level:2},{value:"Level 4",id:"level-4",level:2},{value:"Level 5",id:"level-5",level:2}];function d(e){const A={code:"code",h1:"h1",h2:"h2",img:"img",li:"li",p:"p",pre:"pre",ul:"ul",...(0,i.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(A.h1,{id:"natas",children:"Natas"}),"\n",(0,s.jsx)(A.h2,{id:"introduction",children:"Introduction"}),"\n",(0,s.jsx)(A.p,{children:"Natas is a website that allows us to test several web vulnerabilities."}),"\n",(0,s.jsx)(A.h2,{id:"level-0",children:"Level 0"}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_0_tip",src:n(1245).A+"",width:"656",height:"167"})}),"\n",(0,s.jsx)(A.p,{children:"Level 0 presents us with a simple page that prompt us to find the password in itself."}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsxs)(A.li,{children:["We first see the source code and find, in a comment, ",(0,s.jsx)(A.code,{children:"\x3c!--The password for natas1 is 0nzCigAq7t2iALyvU9xcHlYN4MlkIwlq --\x3e"})]}),"\n"]}),"\n",(0,s.jsx)(A.h2,{id:"level-1",children:"Level 1"}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_1_tip",src:n(544).A+"",width:"697",height:"187"})}),"\n",(0,s.jsx)(A.p,{children:"Level 1 presents us with a simple page that let's us know that righclicking is disabled"}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsx)(A.li,{children:"We go to the developers tools, using Menu > Tools > Developer Tools"}),"\n",(0,s.jsxs)(A.li,{children:["We see the source code and find, in a comment, ",(0,s.jsx)(A.code,{children:"\x3c!--The password for natas2 is TguMNxKo1DSa1tujBLuZJnDUlCcUAPlI --\x3e"})]}),"\n"]}),"\n",(0,s.jsx)(A.h2,{id:"level-2",children:"Level 2"}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_2_tip",src:n(1431).A+"",width:"625",height:"145"})}),"\n",(0,s.jsx)(A.p,{children:"Level 2 presents us with a simple page that let's us know that there is nothing on it."}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsxs)(A.li,{children:["We see the source code and notice there is an image tag ",(0,s.jsx)(A.code,{children:''})]}),"\n",(0,s.jsx)(A.li,{children:"We download the image and do not discover anything wrong or encoded on it;"}),"\n",(0,s.jsx)(A.li,{children:"We observe if there are more files present on the files folder the image source introduces;"}),"\n"]}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_2_directory_listing",src:n(6688).A+"",width:"523",height:"237"})}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsx)(A.li,{children:"We discover the files directory listing is enabled for folder files"}),"\n"]}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_2_users_file",src:n(9423).A+"",width:"551",height:"158"})}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsxs)(A.li,{children:["We discover the password in the users file, ",(0,s.jsx)(A.code,{children:"natas3:3gqisGdR0pjm6tpkDKdIWO2hSvchLeYH"}),"."]}),"\n"]}),"\n",(0,s.jsx)(A.h2,{id:"level-3",children:"Level 3"}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_3_tip",src:n(2826).A+"",width:"295",height:"162"})}),"\n",(0,s.jsx)(A.p,{children:"Level 3 presents us with a simple page that let's us know that there is nothing on the page."}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsxs)(A.li,{children:["We see the source code and notice there is a comment ",(0,s.jsx)(A.code,{children:"\x3c!-- No more information leaks!! Not even Google will find it this time... --\x3e"}),";"]}),"\n",(0,s.jsxs)(A.li,{children:["We use google dorking to find the login for natas4, through googling ",(0,s.jsx)(A.code,{children:"http://natas3.natas.labs.overthewire.org/ insite:natas4"})]}),"\n"]}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_3_google_dorking",src:n(647).A+"",width:"735",height:"301"})}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsx)(A.li,{children:"Google Dorking did not find anything as the tip mentioned;"}),"\n",(0,s.jsxs)(A.li,{children:["We should try to explore how Google relates to the page;","\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsx)(A.li,{children:"This might mean the sitemap.xml or robots.txt page"}),"\n"]}),"\n"]}),"\n"]}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_3_robots_page",src:n(9610).A+"",width:"149",height:"48"})}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsx)(A.li,{children:"We found a secret folder that gives us the following"}),"\n"]}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_3_s3cr3t",src:n(2889).A+"",width:"516",height:"229"})}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsxs)(A.li,{children:["This folder had a users.txt file that contained the following ",(0,s.jsx)(A.code,{children:"natas4:QryZXc2e0zahULdHrtHxzyYkj59kUxLQ"})]}),"\n"]}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_3_users_file",src:n(6104).A+"",width:"317",height:"40"})}),"\n",(0,s.jsx)(A.h2,{id:"level-4",children:"Level 4"}),"\n",(0,s.jsx)(A.p,{children:(0,s.jsx)(A.img,{alt:"natas_level_4_tip",src:n(2241).A+"",width:"695",height:"195"})}),"\n",(0,s.jsxs)(A.p,{children:["Level 4 presents us with a simple page that let's us know that we are disallowed from acessing this page. It also mentiones we need to come from ",(0,s.jsx)(A.code,{children:"http://natas5.natas.labs.overthewire.org"}),"."]}),"\n",(0,s.jsxs)(A.ul,{children:["\n",(0,s.jsx)(A.li,{children:"We should try to change the referer header to see if the content changes."}),"\n"]}),"\n",(0,s.jsx)(A.pre,{children:(0,s.jsx)(A.code,{className:"language-bash",children:'curl -u "natas4:QryZXc2e0zahULdHrtHxzyYkj59kUxLQ" -H "Referer: http://natas5.natas.labs.overthewire.org/" http://natas4.natas.labs.overthewire.org/index.php\r\n\r\n\r\n\x3c!-- This stuff in the header has nothing to do with the level --\x3e\r\n\r\n\r\n\r\n - - + +
Skip to main content

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

+

Use a <!-- truncate --> comment to limit blog post size in the list view.

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

\ No newline at end of file diff --git a/blog/archive.html b/blog/archive.html index d0b0e66..0879842 100644 --- a/blog/archive.html +++ b/blog/archive.html @@ -5,10 +5,10 @@ Archive | William Costa - - + + -
Skip to main content

Archive

Archive

2021​

2019​

+
Skip to main content

Archive

Archive

2021​

2019​

\ No newline at end of file diff --git a/blog/first-blog-post.html b/blog/first-blog-post.html index 39b4dcf..090ecae 100644 --- a/blog/first-blog-post.html +++ b/blog/first-blog-post.html @@ -5,10 +5,10 @@ First Blog Post | William Costa - - + + -
Skip to main content

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

+
Skip to main content

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

\ No newline at end of file diff --git a/blog/long-blog-post.html b/blog/long-blog-post.html index e054506..c875fd7 100644 --- a/blog/long-blog-post.html +++ b/blog/long-blog-post.html @@ -5,8 +5,8 @@ Long Blog Post | William Costa - - + +
Skip to main content

Long Blog Post

· 3 min read
William Costa
William Costa
Software Developer

This is the summary of a very long blog post,

@@ -26,6 +26,6 @@

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

-

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

+

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

\ No newline at end of file diff --git a/blog/mdx-blog-post.html b/blog/mdx-blog-post.html index 5015e1d..d9ef8f9 100644 --- a/blog/mdx-blog-post.html +++ b/blog/mdx-blog-post.html @@ -5,11 +5,11 @@ MDX Blog Post | William Costa - - + +
Skip to main content
+
tip

Use the power of React to create interactive blog posts.

<button onClick={() => alert('button clicked!')}>Click me!</button>
\ No newline at end of file diff --git a/blog/tags.html b/blog/tags.html index ff496c5..4496127 100644 --- a/blog/tags.html +++ b/blog/tags.html @@ -5,10 +5,10 @@ Tags | William Costa - - + + -
Skip to main content

Tags

+
Skip to main content

Tags

\ No newline at end of file diff --git a/blog/tags/docusaurus.html b/blog/tags/docusaurus.html index 33fcb7c..70b999d 100644 --- a/blog/tags/docusaurus.html +++ b/blog/tags/docusaurus.html @@ -5,8 +5,8 @@ 4 posts tagged with "docusaurus" | William Costa - - + +
Skip to main content

4 posts tagged with "docusaurus"

View All Tags

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

+

Use a <!-- truncate --> comment to limit blog post size in the list view.

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

\ No newline at end of file diff --git a/blog/tags/facebook.html b/blog/tags/facebook.html index 5fc5d79..7b16a80 100644 --- a/blog/tags/facebook.html +++ b/blog/tags/facebook.html @@ -5,8 +5,8 @@ One post tagged with "facebook" | William Costa - - + +
Skip to main content

One post tagged with "facebook"

View All Tags
+

And if you don't want a blog: just delete this directory, and use blog: false in your Docusaurus config.

\ No newline at end of file diff --git a/blog/tags/hello.html b/blog/tags/hello.html index c904e7b..149a73f 100644 --- a/blog/tags/hello.html +++ b/blog/tags/hello.html @@ -5,8 +5,8 @@ 2 posts tagged with "hello" | William Costa - - + +
Skip to main content

2 posts tagged with "hello"

View All Tags
+

Use a <!-- truncate --> comment to limit blog post size in the list view.

\ No newline at end of file diff --git a/blog/tags/hola.html b/blog/tags/hola.html index 46ded82..679caf7 100644 --- a/blog/tags/hola.html +++ b/blog/tags/hola.html @@ -5,10 +5,10 @@ One post tagged with "hola" | William Costa - - + + -
Skip to main content

One post tagged with "hola"

View All Tags

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

+
Skip to main content

One post tagged with "hola"

View All Tags

First Blog Post

· One min read
Gao Wei
Gao Wei
Docusaurus Core Team

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus ipsum tempor eros aliquam consequat. Lorem ipsum dolor sit amet

\ No newline at end of file diff --git a/blog/welcome.html b/blog/welcome.html index 97946e4..a75e943 100644 --- a/blog/welcome.html +++ b/blog/welcome.html @@ -5,8 +5,8 @@ Welcome | William Costa - - + +
Skip to main content
+

And if you don't want a blog: just delete this directory, and use blog: false in your Docusaurus config.

\ No newline at end of file diff --git a/certificates.html b/certificates.html index b62439f..7e03303 100644 --- a/certificates.html +++ b/certificates.html @@ -5,8 +5,8 @@ Certificates | William Costa | William Costa - - + +
Skip to main content
+Play it Safe: Manage Security Risks Certificate
\ No newline at end of file diff --git a/docs/category/ctf-writeups.html b/docs/category/ctf-writeups.html index 8318421..26571ca 100644 --- a/docs/category/ctf-writeups.html +++ b/docs/category/ctf-writeups.html @@ -5,10 +5,10 @@ CTF-Writeups | William Costa - - + + -
Skip to main content

CTF-Writeups

The collection of all the CTFs I solved. they are divided between Windows and Linux Machines

+
Skip to main content

CTF-Writeups

The collection of all the CTFs I solved. they are divided between Windows and Linux Machines

\ No newline at end of file diff --git a/docs/category/linux-writeups.html b/docs/category/linux-writeups.html index 351e638..a390e93 100644 --- a/docs/category/linux-writeups.html +++ b/docs/category/linux-writeups.html @@ -5,10 +5,10 @@ Linux Writeups | William Costa - - + + -
Skip to main content

Linux Writeups

Currently working on my Natas Writeup. Predicted for 30/7/24

+
Skip to main content

Linux Writeups

Currently working on my Natas Writeup. Predicted for 30/7/24

\ No newline at end of file diff --git a/docs/category/windows-writeups.html b/docs/category/windows-writeups.html index 553cfd4..a4ca01c 100644 --- a/docs/category/windows-writeups.html +++ b/docs/category/windows-writeups.html @@ -5,10 +5,10 @@ Windows Writeups | William Costa - - + + -
Skip to main content

Windows Writeups

Work In Progress

+
Skip to main content

Windows Writeups

Work In Progress

\ No newline at end of file diff --git a/docs/ctf-writeups/Linux/natas.html b/docs/ctf-writeups/Linux/natas.html index b76c301..e3dcdcd 100644 --- a/docs/ctf-writeups/Linux/natas.html +++ b/docs/ctf-writeups/Linux/natas.html @@ -3,12 +3,90 @@ -Test | William Costa +Natas | William Costa - - + + -
Skip to main content
+
Skip to main content

Natas

+

Introduction​

+

Natas is a website that allows us to test several web vulnerabilities.

+

Level 0​

+

natas_level_0_tip

+

Level 0 presents us with a simple page that prompt us to find the password in itself.

+
    +
  • We first see the source code and find, in a comment, <!--The password for natas1 is 0nzCigAq7t2iALyvU9xcHlYN4MlkIwlq -->
    • +
+

Level 1​

+

natas_level_1_tip

+

Level 1 presents us with a simple page that let's us know that righclicking is disabled

+
    +
  • We go to the developers tools, using Menu > Tools > Developer Tools
    • +
  • We see the source code and find, in a comment, <!--The password for natas2 is TguMNxKo1DSa1tujBLuZJnDUlCcUAPlI -->
    • +
+

Level 2​

+

natas_level_2_tip

+

Level 2 presents us with a simple page that let's us know that there is nothing on it.

+
    +
  • We see the source code and notice there is an image tag <img src="files/pixel.png">
    • +
  • We download the image and do not discover anything wrong or encoded on it;
    • +
  • We observe if there are more files present on the files folder the image source introduces;
    • +
+

natas_level_2_directory_listing

+
    +
  • We discover the files directory listing is enabled for folder files
    • +
+

natas_level_2_users_file

+
    +
  • We discover the password in the users file, natas3:3gqisGdR0pjm6tpkDKdIWO2hSvchLeYH.
    • +
+

Level 3​

+

natas_level_3_tip

+

Level 3 presents us with a simple page that let's us know that there is nothing on the page.

+
    +
  • We see the source code and notice there is a comment <!-- No more information leaks!! Not even Google will find it this time... -->;
    • +
  • We use google dorking to find the login for natas4, through googling http://natas3.natas.labs.overthewire.org/ insite:natas4
    • +
+

natas_level_3_google_dorking

+
    +
  • Google Dorking did not find anything as the tip mentioned;
    • +
  • We should try to explore how Google relates to the page; +
      +
    • This might mean the sitemap.xml or robots.txt page
      • +
    +
    • +
+

natas_level_3_robots_page

+
    +
  • We found a secret folder that gives us the following
    • +
+

natas_level_3_s3cr3t

+
    +
  • This folder had a users.txt file that contained the following natas4:QryZXc2e0zahULdHrtHxzyYkj59kUxLQ
    • +
+

natas_level_3_users_file

+

Level 4​

+

natas_level_4_tip

+

Level 4 presents us with a simple page that let's us know that we are disallowed from acessing this page. It also mentiones we need to come from http://natas5.natas.labs.overthewire.org.

+
    +
  • We should try to change the referer header to see if the content changes.
    • +
+
curl -u "natas4:QryZXc2e0zahULdHrtHxzyYkj59kUxLQ" -H "Referer: http://natas5.natas.labs.overthewire.org/" http://natas4.natas.labs.overthewire.org/index.php
<html>
<head>
<!-- This stuff in the header has nothing to do with the level -->
<link rel="stylesheet" type="text/css" href="http://natas.labs.overthewire.org/css/level.css">
<link rel="stylesheet" href="http://natas.labs.overthewire.org/css/jquery-ui.css" />
<link rel="stylesheet" href="http://natas.labs.overthewire.org/css/wechall.css" />
<script src="http://natas.labs.overthewire.org/js/jquery-1.9.1.js"></script>
<script src="http://natas.labs.overthewire.org/js/jquery-ui.js"></script>
<script src=http://natas.labs.overthewire.org/js/wechall-data.js></script><script src="http://natas.labs.overthewire.org/js/wechall.js"></script>
<script>var wechallinfo = { "level": "natas4", "pass": "QryZXc2e0zahULdHrtHxzyYkj59kUxLQ" };</script></head>
<body>
<h1>natas4</h1>
<div id="content">

Access granted. The password for natas5 is 0n35PkggAPm2zbEpOU802c0x0Msn1ToK
<br/>
<div id="viewsource"><a href="index.php">Refresh page</a></div>
</div>
</body>
</html>
+
    +
  • The credentials are natas5:0n35PkggAPm2zbEpOU802c0x0Msn1ToK;
    • +
+

Level 5​

+

natas_level_5_tip

+

Level 5 presents us with a simple page that let's us know we are disallowed from this page because we are not logged in. Let us see if there is any cookie being used

+
curl -u "natas5:0n35PkggAPm2zbEpOU802c0x0Msn1ToK" http://natas5.natas.labs.overthewire.org/index.php -I
HTTP/1.1 200 OK
Date: Mon, 22 Jul 2024 16:28:48 GMT
Server: Apache/2.4.58 (Ubuntu)
Set-Cookie: loggedin=0
Content-Type: text/html; charset=UTF-8
+
    +
  • The request sets up a cookie loggedin=0, if not set.
    • +
  • Let's send the same request with the cookie as 1;
    • +
+
curl -u "natas5:0n35PkggAPm2zbEpOU802c0x0Msn1ToK" -b "loggedin=1" http://natas5.natas.labs.overthewire.org/index.php
<html>
<head>
<!-- This stuff in the header has nothing to do with the level -->
<link rel="stylesheet" type="text/css" href="http://natas.labs.overthewire.org/css/level.css">
<link rel="stylesheet" href="http://natas.labs.overthewire.org/css/jquery-ui.css" />
<link rel="stylesheet" href="http://natas.labs.overthewire.org/css/wechall.css" />
<script src="http://natas.labs.overthewire.org/js/jquery-1.9.1.js"></script>
<script src="http://natas.labs.overthewire.org/js/jquery-ui.js"></script>
<script src=http://natas.labs.overthewire.org/js/wechall-data.js></script><script src="http://natas.labs.overthewire.org/js/wechall.js"></script>
<script>var wechallinfo = { "level": "natas5", "pass": "0n35PkggAPm2zbEpOU802c0x0Msn1ToK" };</script></head>
<body>
<h1>natas5</h1>
<div id="content">
Access granted. The password for natas6 is 0RoJwHdSKWFTYR5WuiAewauSuNaBXned</div>
</body>
</html>
+
    +
  • The tampering of the cookie worked and we got natas6:0RoJwHdSKWFTYR5WuiAewauSuNaBXned
    • +
\ No newline at end of file diff --git a/docs/ctf-writeups/windows/win.html b/docs/ctf-writeups/windows/win.html index ab964d2..b3ede1b 100644 --- a/docs/ctf-writeups/windows/win.html +++ b/docs/ctf-writeups/windows/win.html @@ -5,10 +5,10 @@ Test | William Costa - - + + -
Skip to main content
+
Skip to main content
\ No newline at end of file diff --git a/index.html b/index.html index eb7e9d0..fd6d7fa 100644 --- a/index.html +++ b/index.html @@ -5,10 +5,10 @@ Homepage | William Costa - - + + -
Skip to main content

William Costa

Enthusiast for Cybersecurity

Welcome to my CTF Writeups Portfolio! I'm William Costa, a cybersecurity enthusiast who enjoys tackling Capture the Flag (CTF) problems. Here are my writeups and solutions to different CTF challenges. I hope you find these thoughts useful and motivating.

Enjoy exploring!
+
Skip to main content

William Costa

Enthusiast for Cybersecurity

Welcome to my CTF Writeups Portfolio! I'm William Costa, a cybersecurity enthusiast who enjoys tackling Capture the Flag (CTF) problems. Here are my writeups and solutions to different CTF challenges. I hope you find these thoughts useful and motivating.

Enjoy exploring!
\ No newline at end of file