🚀
v13vv/GitBook
🚀
v13vv/GitBook
  • 🌌About this blog
  • The Author
    • v13vv
  • CYBERSECURITY
    • CTFs
      • idekCTF 2024
        • misc/NM~~PZ~~ - easy
      • 🐭Bandit - OverTheWire
        • Bandit 0
        • Bandit 1 ( level 0->1 )
        • Bandit 2 ( level 1->2 )
        • Bandit 3 ( level 2->3 )
        • Bandit 4 ( level 3->4 )
        • Bandit 5 ( level 4->5 )
      • 🐯Natas - OverTheWire
        • Natas 0
        • Natas 1 ( level 0->1 )
        • Natas 2 ( level 1->2 )
        • Natas 3 ( level 2->3 )
    • Security+ Labs
      • ⛑️CompTIA Security+ - 101Labs.net
        • Lab 41 – Getting a reverse shell on a server through a file upload
        • Lab 42 – Manual privilege escalation using python
    • WEB SECURITY
      • 🍊Web Security Academy - PortSwigger
        • Burp Suite Setup on Kali Linux
        • Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
        • Lab: SQL injection vulnerability allowing login bypass
        • Lab: Reflected XSS into HTML context with nothing encoded
    • NETWORKING
      • 🌊Wireshark Labs - Jim Kurose Homepage
        • Getting Started
    • MISCELLANEOUS
      • 🔑WPA2 Key Cracking
    • POST-QUANTUM CRYPTOGRAPHY
      • A Study of Algorithms Development for Post-Quantum Cryptography
        • NIST Post-Quantum Cryptography Standardization
          • Call for Proposals in Security Aspect
          • Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process
          • KEM / Digital Signature
            • Kyber
              • What is Kyber ?
                • Module Learning With Errors (M-LWE)
              • Kyber Cryptanalysis
                • Timing Attack
      • ⏳Timing Attack using Python
  • SOFTWARE DEVELOPMENT
    • test
  • AEROSPACE
    • test
Powered by GitBook
On this page
  1. CYBERSECURITY
  2. CTFs
  3. Natas - OverTheWire

Natas 3 ( level 2->3 )

PreviousNatas 2 ( level 1->2 )NextSecurity+ Labs

Last updated 7 months ago

Username: natas3
URL:      http://natas3.natas.labs.overthewire.org

After exploring the page, The only clue I have is that,

<!-- No more information leaks!! Not even Google will find it this time... -->

So, why Google though ? I made a research about this level and then I found out that: In our websites world there's one script file wrote to limit access of data crawling from a search engine in any specific websites.

The script file is called "robots.txt" So, if this page contains the robots.txt file, maybe we can try navigate to it.

And yes it does has the file.

The file says that:

User-agent: *
Disallow: /s3cr3t/

The interesting part is that the /s3cr3t/ seems to be a secret directory that has been disabled in robots.txt file. Let's try check out the directory.

Looks like we've just found the flag, let's check the users.txt out.

And yes, we captured our flag.

natas4:QryZXc2e0zahULdHrtHxzyYkj59kUxLQ
🐯
LogoOverTheWire
FLAG !