Natas32
Natas Level 32 — the same Perl file-reading trick is back, but now the goal is running a command; learn how to turn a file read into execution.
Table of Contents
Source: This content is aggregated from overthewire (MIT). Visit the original repository for the latest version.
Username: natas32
URL: http://natas32.natas.labs.overthewire.org
Study guide
Level map: sign in as natas32 and find the password for natas33.
What this level teaches
Escalating from file read to command execution using the same Perl behaviour as Level 31.
Key ideas
- Same weakness, bigger prize. The earlier trick shows what files can be named; this level needs a program that runs.
- Environment. The password is not readable directly; look at the directory contents and any helper programs left for you.
- Chaining. Several small steps (find the helper, run it, read the output) combine into the solution.
How to approach it
- Revisit your Level 31 approach and adapt it.
- Explore the server using the file-read ability to understand what exists.
- Look for something executable that returns what you need.
How developers prevent it
As in the previous level, along with running web applications as users that cannot read other levels’ secrets (least privilege).