> For the complete documentation index, see [llms.txt](https://thamizhiniyancs.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://thamizhiniyancs.gitbook.io/writeups/overthewire/natas/level-2-level-3.md).

# Level 2 - Level 3

```
Username: natas3
Password: G6ctbMJ5Nb4cbFwhpMPSvxGHhQ7I6W8Q
URL:      http://natas3.natas.labs.overthewire.org
```

Same as last level, nothing is there in the page source, but there is a comment: `No more information leaks!! Not even Google will find it this time...` , which states that not even google will find it, which is a hint to the `robots.txt` file, which has a list of paths that google is not allowed to crawl or spider. So I checked if `robots.txt` is available.

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2FyjyOs2wHWU8d3V1LPNPI%2Fimage.png?alt=media&amp;token=6604848a-8668-4f2f-8a58-8b9b6b2a2ba1" alt=""><figcaption></figcaption></figure>

As I guessed, there is a secret directory named `s3cr3t`, which was mentioned in `robots.txt` file.

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2FLSMzWgAnvB99tsNHmgF2%2Fimage.png?alt=media&amp;token=97e69774-68b9-4aee-a9b7-21c86ab0adfa" alt=""><figcaption></figcaption></figure>

On checking this path,  there was a file named `users.txt`.

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2FISdRWDpihvfBSNx3Xz6c%2Fimage.png?alt=media&amp;token=a75e75e1-caac-4cdd-a931-8e5d5608f412" alt=""><figcaption></figcaption></figure>

The `users.txt` file had the password for the next level.

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2FXl9WSijeXHluRPzn6fbs%2Fimage.png?alt=media&amp;token=5a81b5fa-1fc0-4ae0-8e01-6a45c09e6eb1" alt=""><figcaption></figcaption></figure>
