OverTheWire Natas level 6 Check the “view sourcecode” link

OverTheWire Natas level 3 Let’s go check the page source

OverTheWire (OTW) is one of the best resources to learn about a wide range of security topics, their home page clearly states: The wargames offered by the OverTheWire community can help you to learn and practice security concepts in the form of fun-filled games. …

From the interface I guess I should try to vote so let’s try it by clicking on the stars

This challenge is basically a “suggestion” to make use of source code, when available, to get as much information as possible First of all send yourself a mail on WebWolf to get the reset link structure, put <username>@<anydomain> and press “Reset Password”

Second WebGoat challenge, we have to log in as Larry, let’s see what’s in here The “Forgot Password” link is fake and not much in HTML source Burp shows that, apart from the request to /WebGoat/Challenge5.lesson.lesson and its HTML, there is not much else when requesting the page There is…

This is the first of four CTF-like challenges present in WebGoat The challenge itself is not particularly complex but the process you have to go through is what’s important here I have spent many hours trying to figure anything plausible on this challenge, thehackerish’s video that you can find below…

Bypass front-end restrictions 2 For this lesson we have to send a request bypassing the restrictions on the page, let’s go ahead and fill up and submit the form

WebGoat SSRF 2 — After watching this mind-blowing talk about SSRF from Orange Tsai let’s see what’s in this lesson