PHP Session Hijacking With XOR Encrypion | OverTheWire War Games Natas Level 11

We covered a scenario of web application admin bypass by reverse engineering the PHP source code which was based on creating a cookie through a series of encoding and XOR encryption. Following the same logic in the code, we were able to change the required attributes in the cookie to bypass the challenge and receive the password of the next level. This was part of OverTheWire War Games Natas Level 11

Get OSCP Certificate Notes

Next Level Password:

YWqo0pjpcXzSIl5NMAVxg12QxeC1w9QG

Video Walkthrough