OverTheWire Natas Guide

Access

Username: natas0

Password: natas0

URL: http://natas0.natas.labs.overthewire.org

Info

Description: Natas teaches the basics of serverside web-security.

Each level of natas consists of its own website located at http://natasX.natas.labs.overthewire.org, where X is the level number. There is no SSH login. To access a level, enter the username for that level (e.g. natas0 for level 0) and its password.

Each level has access to the password of the next level. Your job is to somehow obtain that next password and level up. All passwords are also stored in /etc/natas_webpass/. E.g. the password for natas5 is stored in the file /etc/natas_webpass/natas5 and only readable by natas4 and natas5.

Username: natas0
Password: natas0
URL:      http://natas0.natas.labs.overthewire.org

Theory

To log into the game, the instructions say enter to a website with username and password. As it says in the description, this is going to be about web challenges and web exploitation, with servers, and all of that. I've looked through these levels, and they are not gonna have descriptions apart from the username and URL, so there's not gonna be theory for these, except this first one.

Solution

So let's enter to the URL they gave us:

And enter the username and password we are given:

Now that we are inside the website, let's see what we have to do. It says there that the flag is somewhere in that page, so we can probably find it by just going into View Source with right click, or Ctrl+U, which is just a fancy term for the code of the website exactly like the server sent it to you. So if we open this View Source:

<!--The password for natas1 is HtPBZi9UCgzH3jni7JtVqsmJsFnMcqJm -->

And that's our password! Now you can exit and go to the next level.