Summary
- OverTheWire’s Natas is a series of labs that teach web security, with a specific focus on servers.
- Each level of Natas is password protected, and the password for the next level is available to the current level.
- The question is how do you find the passwords?
- This journal article explains how the writer solves some of the initial puzzles.
- For Natas 0, the password was hidden in a comment in the code for the website.
- For Natas 1, the right-click functionality was blocked, but the page source still offered a comment with the password.
- Several methods for overcoming the right-click block were discussed.
- For Natas 2, an image was referenced in the page source, but no image was displayed on the webpage.
- The image turned out to be a red herring, but the author checked the directory containing the image and discovered a useful users.txt file.
- For Natas 3, a robots.txt file, which is normally used to communicate with search engines, was used to reveal the password.
By VISCID
Original Article