A simple application which allows us to log in as any user. We still have to get into the admin account though, and there seems to be no way for us to simply log in as one. Find out how we can still exploit an issue to allow us administrator access.
In these video series I am running through the Overthewire.org Natas wargame. It’s all about web hacking and shows an array of different web vulnerabilities for us to practice on. This video features Natas18.
If you liked it, or you want more, let me know. Subscribe for updates to my channel.
You can check out my twitter account here for updates: https://twitter.com/ChrisADale
Interested in hiring my team and I for consulting? Check us out at https://riversecurity.eu/
I’m also a SANS certified instructor, and you can come to my classes. Check out my schedule here: https://www.sans.org/instructors/chris-dale