OverTheWire Natas Guide

Previous Level Guide: Natas Level 2 → 3

Access

Username: natas4

Password: dBbzfpIIuBWMyB051PIidHgaGfNeSeUP

URL: http://natas4.natas.labs.overthewire.org

Info

Description: No description, get inside the level to know.

Theory

Not much to do with the details from the task, so just skipping to doing it.

Solution

We enter to the url with the password from last level:

Okay, so the level wants us to enter to this page from the next level we haven't even unlocked yet. Weird ask, but possible, we can do this by using Burpsuite, a program to modify request headers for websites. The gist of it, when you enter a website, it asks for some information from your computer, so that the website can give you back the content, just sending a request for the information in the website with your information so that the server can send that information back to you. So we can put intercept on, to stop requests before sending them to modify them, just click the refresh button and the request will appear:

As you can see in the image, I've changed the referer to come from the website of natas5. Basically this line:

Referer: http://natas5.natas.labs.overthewire.org/

Which gets us to this page when forwarding the modified request:

Access granted. The password for natas5 is LuOIFyQ3DXMhY92i7FKL9JC5o1NLo8Y8

And that's our password! Now you can exit and go to the next level.