natas3

We get a hint in the inspect element saying that “Not even Google will find [the token]”

Google indexing of webpages is permitted by a file called /robots.txt.

Navigating to /robots.txt, we see in the file exclusions that theres a specific path we don’t want indexed.

Going to /s3cr3t/users.txt gives us the next token.