SANS Holiday Challenge 2012 Zone 5 Writeup

Zone 5

Heat Miser

The last zone we need to gain access to is Zone 5 for Heat Miser. Connecting to the URL we found in the previous post, we are presented with the following:

SANS Holiday Challenge 2012 Zone 4 Writeup

Zone 4

We can use the URLs obtained in the previous post to access Zone 4 for both Snow and Heat Miser.

SANS Holiday Challenge 2012 Zone 3 Writeup

Zone 3

Using the URLs obtained in the previous post, we can access Zone 3 for both Heat and Snow Miser. Let's see if we can obtain the URLs for Zone 4.

SANS Holiday Challenge 2012 Zone 2 Writeup

Zone 2

Using the URLs obtained in the previous post, we can gain access to Zone 2 for both Snow and Heat Miser.

SANS Holiday Challenge 2012 Zone 1 Writeup

Zone 1

We can use the links found in the previous post to gain access to Zone 1 for both Snow Miser and Heat Miser. Since no more introduction is needed, let's get started.

SANS Holiday Challenge 2012 Zone 0 Writeup

Introduction

This year, SANS hosted a holiday CTF-like challenge in which participants play the role of Heat Miser and Snow Miser, two characters from the classic movie The Year without a Santa Claus, as they attempt to gain access to each other's weather control systems to alter the weather systems on Earth as we know them.

OvertheWire - Natas Wargame Level 14 Writeup

Level 14

Using the credentials obtained in the previous post, we can login to Level 14 where we are presented with the following screen:

OvertheWire - Natas Wargame Level 13 Writeup

Level 13

Using the credentials obtained in the previous post, we can log in to Level 13, where we are presented with the following:

OvertheWire - Natas Wargame Level 12 Writeup

Level 12

Using the credentials obtained from the previous post, we can log in to Level 12 where we are presented with the following screen:

OvertheWire - Natas Wargame Level 11 Writeup

Level 11

Using the credentials obtained from the previous post, we can log in to Level 11 where we are presented with the following screen:

OvertheWire - Natas Wargame Level 10 Writeup

Level 10

Using the credentials obtained in the previous writeup, we can log in to Level 10, where we are presented with the following:

OvertheWire - Natas Wargame Level 9 Writeup

Level 9

Using the credentials obtained in the previous writeup, we can log in to Level 9, where we are presented with the following:

OvertheWire - Natas Wargame Level 8 Writeup

Level 8

Using the credentials obtained in the previous writeup, we can log in to Level 8, in which we are presented with the following screen:

OvertheWire - Natas Wargame Level 7 Writeup

Using the credentials obtained in the previous post, we can log in to Level 7 where we are presented with the following:

OvertheWire - Natas Wargame Level 6 Writeup

Level 6

When using the credentials obtained from the previous post to log in to Level 6, we are presented with the following:

OvertheWire - Natas Wargame Level 5 Writeup

Level 5

As before, we can use the credentials obtained from the previous post to log in to Level 5. Upon doing so, we are presented with the following screen:

OvertheWire - Natas Wargame Level 4 Writeup

Level 4

We can use the credentials obtained from the previous post to log in to Level 4. Upon logging in, we are presented with the following screen:

OvertheWire - Natas Wargame Level 3 Writeup

Level 3

We can use the credentials obtained from the previous post to log into Level 3. Upon logging, we are presented with a screen similar to that of Level 2:

OvertheWire - Natas Wargame Level 2 Writeup

Level 2

We can use the credentials obtained in the previous post to access Level 2. Once we log in, we are presented with the following screen:

OvertheWire - Natas Wargame Level 0 and Level 1 Writeup

Introduction

The fantastic group at overthewire.org have created another wargame called Natas, the description of which is as follows:

 Natas teaches the basics of serverside web-security.  
 Each level of natas consists of its own website located at http://natasX.natas.labs.overthewire.org, where X is the level number. There is no SSH login. To access a level, enter the username for that level (e.g. natas0 for level 0) and its password.  
 Each level has access to the password of the next level. Your job is to somehow obtain that next password and level up. All passwords are also stored in /etc/natas_webpass/. E.g. the password for natas5 is stored in the file /etc/natas_webpass/natas5 and only readable by natas5.  

A big thank you goes out to this group for creating compelling and well-organized wargames for people of any skillset or experience level!

I decided to go ahead and pair the writeups for the first two levels together, since they are very similar, and both very easy.

So, without further introduction, let's get started.