Credentials

Username: natas2
Password: h4ubbcXrWqsTo7GGnnUMLppXbOogfBZ7
URL:      <http://natas2.natas.labs.overthewire.org>

Working

There seems to be nothing in this page. Lets search.

web1.png

Methodology

  1. Go To Lab URL.
  2. Right click to go to Page sources from View page Source option.
  3. There is an image source just below the text,
<img src="files/pixel.png">
  1. When we go to the source, its just a image of 1 pixel, but now we know there is a folder called files that is accessible so we can visit files/
  2. We can see a link to users.txt file.
  3. We can visit to files/users.txt and see required credentials.

Findings

We find that the files folder not only had pixel.png file but also users.txt file

files.png

pass.png

When we visit users.txt our password for the level 3 is one of the user.

Password: G6ctbMJ5Nb4cbFwhpMPSvxGHhQ7I6W8Q