Natas - Level 3
Connection information
- Username: natas2
- URL: http://natas2.natas.labs.overthewire.org
Information given
The white box says ”There is nothing on this page”.
Getting the password
Here is the page’s code (without the header):
<body>
<h1>natas2</h1>
<div id=”content”>
There is nothing on this page
<img src=”files/pixel.png”>
</div>
</body></html>
Hmmm, what is this files/pixel.png? If we look at it, it is just a white pixel image.
However, we now know that there is a folder named files. We navigate to http://natas2.natas.labs.overthewire.org/files/. We see an Index of /files that contains links to the parent directory, pixel.png, and a file named users.txt.
Here is the contents of users.txt:
# username:password
alice:BYNdCesZqW
bob:jw2ueICLvT
charlie:G5vCxkVV3m
natas3:sJIJNW6ucpu6HPZ1ZAchaDtwd7oGrD14
eve:zo4mJWyNj2
mallory:9urtcpzBmH