Tuesday, October 30, 2012

OverTheWire Wargame "Natas" Level 1 [How-To/Web]

Level 0 was quite easy, for obvious reasons, so lets see if level 1 can be any harder.

For this one, right clicking has been blocked, so we can't break it like we did with level 0... or can we?

Again, I use Google Chrome, and in Chrome, you can save the source code to your drive!


If you open this up in a browser, it will still block right clicking, so lets open with our trusty friend Notepad++ (or you can cat it on a Linux system; I'm on Windows 7 right now).


Bam, we have the password for natas2: "aRJMGKT6H7AOfGwllwocI2QwVyvo7dcl".

Just as easy, but required a tiny bit of thinking on how to get the code. Lets move on to Level 2.

Here's a little extension if you care to know why this is bad, or why programming like this is bad.
This is known as client-side security and is really bad. Anything that is client side is controlled by the client and thus the hacker.
We can do things like save the page, change the code, and run it again, or change it directly in the browser by simply "inspecting" the code like Chrome allows... and that's not even an addon!

Keep hackin'.

39 comments:

  1. What could fill some individual's heart with satisfaction other than examining such flawlessly made blog, for instance, this.
    paypal money hack

    ReplyDelete
  2. Female Escorts: They took turns watching over each different as they slept. Once they were picked up by a Coast Guard Cutter, the boys were treated to showers, dry clothes and a nice meal before being dispatched to new assignments.
    Female Escorts,High Class Decision Girls,Escorts Girls,Escorts ,Escorts close to me
    Female Escorts









    ReplyDelete
  3. just information we only provide information for those who need it

    ReplyDelete
  4. Great post! I am actually getting ready to across this information, It’s very helpful for this blog.Also great with all of the valuable information you have Keep up the good work you are doing well.

    Data Science Training in Chennai
    Data science training in bangalore
    Data science online training
    Data science training in pune
    Data science training in kalyan nagar
    Data science training in Bangalore
    Data science training in tambaram

    ReplyDelete
  5. This comment has been removed by the author.

    ReplyDelete



  6. Wonderful article, very useful and well explanation. Your post is extremely incredible. I will refer this to my candidates...

    angularjs Training in bangalore

    angularjs Training in electronic-city

    angularjs Training in online

    angularjs Training in marathahalli

    ReplyDelete
  7. Excellent blog, I wish to share your post with my folks circle. It’s really helped me a lot, so keep sharing post like this
    python online training
    python training course in chennai
    python training in jayanagar

    ReplyDelete
  8. Thanks for splitting your comprehension with us. It’s really useful to me & I hope it helps the people who in need of this vital information. 
    Devops Training in pune

    ReplyDelete
  9. Wow it is really wonderful and awesome thus it is very much useful for me to understand many concepts and helped me a lot. it is really explainable very well and i got more information from your blog.

    rpa training in velachery| rpa training in tambaram |rpa training in sholinganallur | rpa training in annanagar| rpa training in kalyannagar

    ReplyDelete
  10. A grasping magnificently composed blog. Really a present for its gathering of people.
    Mason Soiza

    ReplyDelete
  11. Great things you’ve always shared with us. Just keep writing this kind of posts.The time which was wasted in traveling for tuition now it can be used for studies.Thanks
    Mason Soiza

    ReplyDelete