💻
Ashish Khairnar
  • #whoami
  • Exam Reviews
    • Certified Red Team Professional Exam
  • OverTheWire
    • Bandit
      • Bandit Level 0
      • Bandit Level 0 → Level 1
      • Bandit Level 1 → Level 2
      • Bandit Level 2 → Level 3
      • Bandit Level 3 → Level 4
    • Natas
      • Natas Level 2 → Level 3
      • Natas Level 3 -> Level 4
      • Natas Level 4 -> Level 5
      • Natas Level 5 -> Level 6
      • Natas Level 6 -> Level 7
      • Natas Level 7 -> Level 8
      • Natas Level 8 -> Level 9
  • TryHackMe - Write-ups
    • TryHackMe - Vulnnet
  • HackTheBox - Writeups
    • HTB - ScriptKiddie
Powered by GitBook
On this page

Was this helpful?

  1. OverTheWire
  2. Natas

Natas Level 2 → Level 3

Skills tested: directory listing, robots.txt

PreviousNatasNextNatas Level 3 -> Level 4

Last updated 4 years ago

Was this helpful?

Username: natas3
Password: sJIJNW6ucpu6HPZ1ZAchaDtwd7oGrD14
Target URL:      http://natas3.natas.labs.overthewire.org

Login using above creds to the target URL.

Let's review the contents of the home page [ctrl+u]

By browsing to the /s3cr3t/ directory, we find password in users.txt file

Password for next level - Z9tkRkWmpt9Qr7XrR5jWRkgOU901swEZ

Even Google can't find? - *cough* You can google everything lol *cough* This means "robots.txt" - For more information - Quickly, going to http://natas3.natas.labs.overthewire.org/robots.txt reveals the hidden directory named "s3cr3t"

http://www.robotstxt.org/
Nothing on the home page
robots.txt reveals hidden directory
Final