Post

Overthewire Natas Level 0 -> Level 1

Solution for the Overthewire.org Natas level 0 -> Level 1

Description

Username: natas1 URL: natas1.natas.labs.overthewire.org

Walkthrough

Visit the url http://natas1.natas.labs.overthewire.org in the browser and we get a prompt for login.

Use the username natas1 and the password obtained from the previous challenge.

natas1 home page

There is a message on the site stating that right clicking has been disabled.

If we do try to right click the webpage we get an error message.

natas1 right click

So we need to use an alternative method to view the page source.

On a Windows machine we can use Ctrl + U keyboard shortcut to view page source.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
<html>
<head>
<!-- This stuff in the header has nothing to do with the level -->
<link rel="stylesheet" type="text/css" href="http://natas.labs.overthewire.org/css/level.css">
<link rel="stylesheet" href="http://natas.labs.overthewire.org/css/jquery-ui.css" />
<link rel="stylesheet" href="http://natas.labs.overthewire.org/css/wechall.css" />
<script src="http://natas.labs.overthewire.org/js/jquery-1.9.1.js"></script>
<script src="http://natas.labs.overthewire.org/js/jquery-ui.js"></script>
<script src=http://natas.labs.overthewire.org/js/wechall-data.js></script><script src="http://natas.labs.overthewire.org/js/wechall.js"></script>
<script>var wechallinfo = { "level": "natas1", "pass": "gtVrDuiDfck831PqWsLEZy5gyDz1clto" };</script></head>
<body oncontextmenu="javascript:alert('right clicking has been blocked!');return false;">
<h1>natas1</h1>
<div id="content">
You can find the password for the
next level on this page, but rightclicking has been blocked!

<!--The password for natas2 is ZluruA************************** -->
</div>
</body>
</html>

Like the first challenge the password is a comment in the source code

1
The password for natas2 is ZluruA**************************
This post is licensed under CC BY 4.0 by the author.