Natas Level 3 → Level 4
Logging into natas3, we are greeted by the usual message.
Doing the same thing as the previous levels, when we inspect the source code of the page we can see a comment that incicates - Google will not even be able to find it.
This immediately gives us hint that robots.txt file is used for this level. If you don’t know what it is, it’s basically a text file that tells search engines (Google) crawlers which pages or files the crawler can or can’t request from your site. This keeps your website from overloading with requests.
Entering robots.txt in the address bar, we can see the ‘Disallow: /s3cr3t/’ that tells robot to not show it on the site.
Inputting the /s3cret/ tag in the address bar we can see the users.txt file.
Inside the users.txt file we can see the password for the next level.