{"id":315,"date":"2012-10-31T11:56:59","date_gmt":"2012-10-31T18:56:59","guid":{"rendered":"http:\/\/seanmurphree.com\/blog\/?page_id=315"},"modified":"2012-11-07T10:43:31","modified_gmt":"2012-11-07T18:43:31","slug":"natas","status":"publish","type":"page","link":"https:\/\/seanmurphree.com\/blog\/?page_id=315","title":{"rendered":"Natas"},"content":{"rendered":"<p>Natas is a web-based wargame hosted by <a title=\"Over The Wire\" href=\"http:\/\/overthewire.org\" target=\"_blank\">Over The Wire<\/a>. \u00a0It was published in late October of 2012 to highlight web security vulnerabilities.<\/p>\n<p>Here, you can find links to technical dissections of the various levels of Natas. \u00a0These dissections are mini-white-papers designed to better illuminate the security issues\u00a0emphasized\u00a0throughout the wargame.<\/p>\n<ul>\n<li><a title=\"Natas Level 0\/1 \u2013 HTML Comments are User Viewable\" href=\"http:\/\/seanmurphree.com\/blog\/?p=297\">Natas Level 0\/1 &#8211; HTML Comments Are User Viewable<\/a><\/li>\n<li><a title=\"Natas Level 2\/3 \u2013 Directory Listings\" href=\"http:\/\/seanmurphree.com\/blog\/?p=303\">Natas Level 2\/3 &#8211; Directory Listings<\/a><\/li>\n<li><a title=\"Natas Level 4 \u2013 HTTP Request Forging\" href=\"http:\/\/seanmurphree.com\/blog\/?p=307\">Natas Level 4 \u00a0 \u00a0 &#8211; HTTP Request Forging<\/a><\/li>\n<li><a title=\"Natas Level 5 \u2013 Cookie Forging\" href=\"http:\/\/seanmurphree.com\/blog\/?p=309\">Natas Level 5 \u00a0 \u00a0 &#8211; Cookie Forging<\/a><\/li>\n<li><a title=\"Natas Level 6 \u2013 PHP Interpreter and File Types\" href=\"http:\/\/seanmurphree.com\/blog\/?p=318\">Natas Level 6 \u00a0 \u00a0 &#8211; PHP Interpreter and File Types<\/a><\/li>\n<li><a title=\"Natas Level 7 \u2013 User Input and Unsafe Includes\" href=\"http:\/\/seanmurphree.com\/blog\/?p=324\">Natas Level 7 \u00a0 \u00a0 &#8211; User Input and Unsafe Includes<\/a><\/li>\n<li><a title=\"Natas Level 8 \u2013 Encoding Instead of Hashing\" href=\"http:\/\/seanmurphree.com\/blog\/?p=329\">Natas Level 8 \u00a0 \u00a0 &#8211; Encoding Instead of Hashing<\/a><\/li>\n<li><a title=\"Natas Level 9 \u2013 Shell Execution\" href=\"http:\/\/seanmurphree.com\/blog\/?p=335\">Natas Level 9 \u00a0 \u00a0 &#8211; Shell Execution<\/a><\/li>\n<li><a title=\"Natas Level 10 \u2013 Input Sanitization\" href=\"http:\/\/seanmurphree.com\/blog\/?p=338\">Natas Level 10 \u00a0 &#8211; Input Sanitization<\/a><\/li>\n<li><a title=\"Natas Level 11 \u2013 XOR \u201cEncryption\u201d\" href=\"http:\/\/seanmurphree.com\/blog\/?p=341\">Natas Level 11 \u00a0 \u00a0&#8211; XOR &#8220;Encryption&#8221;<\/a><\/li>\n<li><a title=\"Natas Level 12 \u2013 File Uploads\" href=\"http:\/\/seanmurphree.com\/blog\/?p=346\">Natas Level 12 \u00a0 \u00a0&#8211; File Uploads<\/a><\/li>\n<li><a title=\"Natas Level 13 \u2013 Image File Restricted Upload\" href=\"http:\/\/seanmurphree.com\/blog\/?p=350\">Natas Level 13 \u00a0 \u00a0&#8211; Image File Restricted Upload<\/a><\/li>\n<li><a title=\"Natas Level 14 \u2013 Direct Injection!\" href=\"http:\/\/seanmurphree.com\/blog\/?p=355\">Natas Level 14 \u00a0 \u00a0&#8211; Direct Injection!<\/a><\/li>\n<li><a title=\"Natas Level 15 \u2013 Blind Injection\" href=\"http:\/\/seanmurphree.com\/blog\/?p=359\">Natas Level 15 \u00a0 \u00a0&#8211; Blind Injection<\/a><\/li>\n<li><a title=\"Natas Level 16 \u2013 Semi-Blind Shell Injection\" href=\"http:\/\/seanmurphree.com\/blog\/?p=364\">Natas Level 16 \u00a0 \u00a0&#8211; Semi-Blind Shell Injection<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Natas is a web-based wargame hosted by Over The Wire. \u00a0It was published in late October of 2012 to highlight web security vulnerabilities. Here, you can find links to technical dissections of the various levels of Natas. \u00a0These dissections are &hellip; <a href=\"https:\/\/seanmurphree.com\/blog\/?page_id=315\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":294,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=\/wp\/v2\/pages\/315"}],"collection":[{"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=315"}],"version-history":[{"count":5,"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=\/wp\/v2\/pages\/315\/revisions"}],"predecessor-version":[{"id":317,"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=\/wp\/v2\/pages\/315\/revisions\/317"}],"up":[{"embeddable":true,"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=\/wp\/v2\/pages\/294"}],"wp:attachment":[{"href":"https:\/\/seanmurphree.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}