Natas · OverTheWire

Natas Level 2 → Level 3

Level 2

Username : natas2
Password : ZluruAthQk7Q2MqmDeTiUij2ZvWy2mBi
URL : http://natas2.natas.labs.overthewire.org

Solution

To solve this level, we first log into the natas2 application using the credentials provided above.

7-10-2017 2-12-13 PM.png

After logging in, we can see the message ‘ There is nothing on this page‘. We start our investigation by reading the HTML content of the page.

7-10-2017 2-12-59 PM.png

As we can see in the image below, there is an image named ‘pixel.png’ which can be found by using the relative path ‘files/pixel.png‘. This gives us the information that the web application has a folder named ‘files’ which stores this image and possibly other files too.

We now navigate to the URL ‘http://natas2.natas.labs.overthewire.org/files‘ and we find that there is another file named ‘users.txt‘. We open the file and Voila!, we can see the password for natas3 stored along with other users.

7-10-2017 2-13-52 PM.png

7-10-2017 2-14-12 PM.png

Level 3

Username : natas3
Password : sJIJNW6ucpu6HPZ1ZAchaDtwd7oGrD14
URL : http://natas3.natas.labs.overthewire.org

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s