Natas 3 -> 4

user: natas3
pass: sJIJNW6ucpu6HPZ1ZAchaDtwd7oGrD14

This looks familiar... Let's see what we've got here. Oh, but wait - there's a comment in the HTML. It says that not even Google will find it this time. How do websites control what Google does with them?


The /robots.txt page says:

User-agent: *
Disallow: /s3cr3t/

So, what do we do? Why, let's go to the /s3cr3t page, of course! There we find another users.txt file, and our password for the next challenge.







































Comments











Post a Comment























Popular posts from this blog









Natas 11 -> 12





















user: natas11  pass: U82q5TCMMQ9xuFoI3dYX61s7OZD9JKoK   OK, this level is a bit tricky. We start out looking at the source code, and we are faced with several functions. xor_encrypt seems to encrypt any text sent to it by xoring the input character by character with the key we want.   loadData checks to see if the cookie sent with the data matches the background color, and has the 'showpassword' field in it. If the background color sent with the data and sent in the cookie match,  it stores the color and the showpassword boolean - this is probably the key to getting the key.   The big trick here is that there's an XOR encryption going on. At first this might seem tricky, but on closer consideration we remember that if   xor myword => cypher, then  xor cypher => myword.   in the function saveData, we wee that the cookie for the website is set with base64-encode, xor_encrypt, and json-encode. Therefore, we start with the cookie. We know we want to base64-decode, so let...








Read more










Natas 0 -> 1




















Image







First entry in a series about Over the Wire's Natas challenges!   First, we navigate from http://overthewire.org/wargames/natas/natas0.html to http://natas0.natas.labs.overthewire.org/. Enter the password given to us:   Natas Level 0    Username: natas0 Password: natas0 URL:      http://natas0.natas.labs.overthewire.org     The first thing we see is a grey screen with the text " You can find the password for the next level on this page." in a white box.   We assume you're using the Chrome web browser. Other web browsers will act similarly.   Right click to select "Inspect". On the right-hand side of your screen, you should see the Developers tools box open.  As shown below, if you start opening the tags in the HTML given, you'll see the password for the next level!     








Read more










Natas 6 -> 7





















user: natas6  pass: aGoY4q2Dc6MgDq4oL4YtoKtyAg9PeHa1   Well, it looks like we need to input a secret of some sort. If only we knew what it was... Luckily, though, someone left a link to the website source code here. And, what's this? it very conveniently says, right there:   include "includes/secret.inc";   So let's start there. That looks like a folder we could try navigating to. http://natas6.natas.labs.overthewire.org/includes/secret.inc yields the secret:  FOEIUWGHFEEUHOFUOIU.   Plugging that in gives us the password!








Read more