Hello everyone, I would like to share how I solved Nastas CTF also Here is the updated password, I hope this write-up will be helpful.
hello Folks!!! it’s a samxia99
My Bio link:-https://beacons.ai/samxia99
Greetings everyone! I’m excited to share with you how I was able to successfully conquer a CTF challenge. Through this write-up, I’ll provide a clear explanation of my techniques and strategies, and I’m confident that it will greatly benefit those who are interested in CTF challenges. So, sit back, relax, and let me take you on an informative journey.
Just a quick reminder that the game has been updated, so the password has also been changed. I hope this password is helpful!
Natas Level 2 → Level 3
- Here are the login details.
Username: natas3
URL: http://natas3.natas.labs.overthewire.org
- After logging in we can see this page.
- This time I try to find the clue in the inspection but there is nothing so I check the page view source and there is this line I find. Not even Google will find it this time…
Here is a clear hint so I try robots.txt that keeps a web page out of Google.
What is robots.txt?
A robots.txt file tells search engine crawlers which URLs the crawler can access on your site. This is used mainly to avoid overloading your site with requests; it is not a mechanism for keeping a web page out of Google. To keep a web page out of Google, block indexing with noindex or password-protect the page.
- Here is s3cr3t that is disallowed so try to search in url.
http://natas3.natas.labs.overthewire.org/s3cr3t/
- Here we got an index of s3cr3t so click on the parent directory to see what it has. if there is nothing check users.txt.
- Here we get the password of natas4 level.
Pass:-tKOcJIbzM4lTs8hbCmzn5Zr4434fGZQm
Hopefully, this write-up will be useful for everybody, I have tried to make it easy to read.
Next level:-https://medium.com/@samarthkokil64/overthewire-updated-natas-walkthrough-level-4-03a676bd0c90
Previous level:-https://medium.com/@samarthkokil64/overthewire-updated-natas-walkthrough-level-2-153fd4edada0
PS:- THANKS FOR READING