natas7

This is my favorite natas challenge (so far).

There are two buttons for navigation on the webpage, a Home and an About. There’s also a hint in the HTML as a comment. The password is in /etc/natas_webpass/natas8.

Clicking on either the about or home buttons take us to a suspiciously crafted URL: http://natas7.natas.labs.overthewire.org/index.php?page=home

The query part of the url - ?page=home - tells us a lot about this challenge. When we click the home button, we navigate to the home.html in this directory. So what if we just tried putting the flag destination into our query?

http://natas7.natas.labs.overthewire.org/index.php?page=/etc/natas_webpass/natas8