Username: natas6
Password: aGoY4q2Dc6MgDq4oL4YtoKtyAg9PeHa1
URL: http://natas6.natas.labs.overthewire.org


A form and a link to view sourcecode. Let’s view the sourcecode.

It’s just some checks for the form on submission. It checks if there is an array key called¬†secret (which is the name of the input of the form) in the POST info, then compares it to the variable¬†$secret.

There’s an include that may help us. If we navigate to http://natas6.natas.labs.overthewire.org/includes/secret.inc

Alright. Let’s use that string and submit the form.