Natas · OverTheWire

Natas Level 2 → Level 3

Level 2

Username : natas2
Password : ZluruAthQk7Q2MqmDeTiUij2ZvWy2mBi


To solve this level, we first log into the natas2 application using the credentials provided above.

7-10-2017 2-12-13 PM.png

After logging in, we can see the message ‘ There is nothing on this page‘. We start our investigation by reading the HTML content of the page.

7-10-2017 2-12-59 PM.png

As we can see in the image below, there is an image named ‘pixel.png’ which can be found by using the relative path ‘files/pixel.png‘. This gives us the information that the web application has a folder named ‘files’ which stores this image and possibly other files too.

We now navigate to the URL ‘‘ and we find that there is another file named ‘users.txt‘. We open the file and Voila!, we can see the password for natas3 stored along with other users.

7-10-2017 2-13-52 PM.png

7-10-2017 2-14-12 PM.png

Level 3

Username : natas3
Password : sJIJNW6ucpu6HPZ1ZAchaDtwd7oGrD14

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s