Natas 0:

Natas teaches the basics of serverside web-security.

Each level of natas consists of its own website located at http://natasX.natas.labs.overthewire.org, where X is the level number. There is no SSH login. To access a level, enter the username for that level (e.g. natas0 for level 0) and its password.

Each level has access to the password of the next level. Your job is to somehow obtain that next password and level up. All passwords are also stored in /etc/natas_webpass/. E.g. the password for natas5 is stored in the file /etc/natas_webpass/natas5 and only readable by natas4 and natas5.

Start here:

Username: natas0\ Password: natas0\ URL: http\://natas0.natas.labs.overthewire.org

Natas 0 :

To go to the challenge :

You will find a page like this :

You will right click > then > view page source :

Here is what is required for the next round :

---

Natas 1:

Username: natas1\ URL: http\://natas1.natas.labs.overthewire.org\ pass : ########slqBKtcA2uocGHP#########

let’s start :

If you try to open the view page source, you will find this :

So if you go to developer tools , You will then be able to see the complete code :

When the code is checked well , You will find the password for the next round :

---

Natas 2:

Let’s Begin , Actually, I couldn’t find anything on this page :

But wait here we have  :

I feel that it is working, so we have to go back again :

When we came back, I found users.txt, come look at it :

We feel this is the goal .

---

Natas 3:

Natas Level 2 → Level 3

Username: natas3\ URL: http\://natas3.natas.labs.overthewire.org\ pass G6ctbMJ5########################

Natas

I didn’t find anything this time either :

How would a webmaster go against having Google indexing their website?

When I searched on Google I found this :

Ok let’s try robots.txt with the URL :

Let’s try adding them together :

Ok let’s try /s3cr3t with the url only :

File found for users , When I went to her :

Here’s the goal ….”)

---

We meet in the future….!

I’ll see you later…..!

Abdelwahab_Shandy

AS_Cyber……”)