Natas - Level 8
Connection information
- Username: natas7
- Password: 7z3hEENjQtflzgnT29q7wAvMNfZdh0i9
- URL: http://natas7.natas.labs.overthewire.org
Information given
The white box is composed of two parts:
- The first part is link named Home and pointing to http://natas7.natas.labs.overthewire.org/index.php?page=home
- The second is a link About pointing to http://natas7.natas.labs.overthewire.org/index.php?page=about
Getting the password
Clicking on Home brings us to the same page, except that there is a message saying ”this is the front page”. Clicking on About changes the message to ”this is the about page”. If we look at the source of the page, we see a hint:
<!−− hint: password for webuser natas8 is in /etc/natas webpass/natas8 −−>
Ok, then we just include this file as the php variable (instead of home or about), that is to say, we navigate to http://natas7.natas.labs.overthewire.org/index.php?page=/etc/natas_webpass/natas8.
The message changes to DBfUBfqQG69KvJvJ1iAbMoIpwSNQ9bWe