Natas4

Website URL: http://overthewire.org/wargames/natas/natas4.html

According to the data on the OverTheWire webpage.

Username: natas4
URL:      http://natas4.natas.labs.overthewire.org

Let’s log into the URL for Natas3

Inspecting the source code of the page.

Okay, so its not very apparent in the source code as to the location of the password. However, the comment that even Google can’t find anything should immediately trigger your brain. It hints at the possibility of a robots.txt on the server. Let’s test out this.

So we now know about the existence of a directory on the server. Let’s check it out.

Now open the users.txt file.

Done!