Natas Level 2 → Level 3

Skills tested: directory listing, robots.txt

Username: natas3
Password: sJIJNW6ucpu6HPZ1ZAchaDtwd7oGrD14
Target URL:      http://natas3.natas.labs.overthewire.org

Login using above creds to the target URL.

Nothing on the home page

Let's review the contents of the home page [ctrl+u]

Even Google can't find? - *cough* You can google everything lol *cough* This means "robots.txt" - For more information - http://www.robotstxt.org/ Quickly, going to http://natas3.natas.labs.overthewire.org/robots.txt reveals the hidden directory named "s3cr3t"

robots.txt reveals hidden directory

By browsing to the /s3cr3t/ directory, we find password in users.txt file

Final

Password for next level - Z9tkRkWmpt9Qr7XrR5jWRkgOU901swEZ