Natas7 - natas8

From JaxHax
Jump to navigation Jump to search

Level Goal

<Home> <About> 


This challenge just gives us two hyperlinks.

<Home> Points to

<About> Points to

This is probably going to be a LFI (Local File Inclusion) bug...

Clicking on <Home> gives us:

<Home> <About>
this is the front page 

Clicking on <Home> gives us:

<Home> <About>
this is the about page 

Decided to do a view source on this About page and saw a comment that says:

<!-- hint: password for webuser natas8 is in /etc/natas_webpass/natas8 -->

Decided to attempt the LFI route by going to

Got the following:

<Home> <About>