Natas Level 3 → Level 4

natas3 start

Logging into natas3, we are greeted by the usual message.

natas3 source

Doing the same thing as the previous levels, when we inspect the source code of the page we can see a comment that incicates - Google will not even be able to find it.

This immediately gives us hint that robots.txt file is used for this level. If you don’t know what it is, it’s basically a text file that tells search engines (Google) crawlers which pages or files the crawler can or can’t request from your site. This keeps your website from overloading with requests.

natas3 robots

Entering robots.txt in the address bar, we can see the ‘Disallow: /s3cr3t/’ that tells robot to not show it on the site.

natas3 s3cr3t

Inputting the /s3cret/ tag in the address bar we can see the users.txt file.

natas3 passwd

Inside the users.txt file we can see the password for the next level.