Natas2

Finding hidden resources via directory listing

When you open this challenge, you are greeted with the familiar message: “There is nothing on this page.”
Natas 2 challenge page As with the previous challenges, we start by viewing the page source.
At first glance, nothing seems interesting. It’s not the usual “The password is: ___” comment.
However, there is something notable on line 15.
Line 15 of Natas 2 This reveals a directory we previously didn’t know about: /files.
Index of /files Visiting this directory shows two files: pixel.png and a new file, users.txt. /files/users.txt After accessing /users.txt, we are shown several usernames and passwords. One of which is the password for Natas 3.
3gqisGdR0pjm6tpkDKdIWO2hSvchLeYH

Back