# Level 4 - Level 5

```
Username: natas5
Password: Z0NsrtIkJoKALBCLi5eqFfcRN82Au2oD
URL:      http://natas5.natas.labs.overthewire.org
```

This time, the responded that "You are not logged in".

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2Fd2sFWF6hQIqGvEtkQjDd%2Fimage.png?alt=media&#x26;token=f8e6250a-7907-4c7b-83ad-d0ff609fcd2c" alt=""><figcaption></figcaption></figure>

So I checked the HTTP history of burpsuite and found a cookie named `loggedin` in the response header, with a value of 0.

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2FwRxgATvVkjURIeb6h6iI%2Fimage.png?alt=media&#x26;token=d3ce2be1-7ecd-401e-ae60-549d995ca52a" alt=""><figcaption></figcaption></figure>

I tried modifying the value to 1 using the Dev-Tools.

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2FcE99FUm4olDVnBvVi5ed%2Fimage.png?alt=media&#x26;token=382c94c3-7ed3-4376-94db-fccfddba8231" alt=""><figcaption></figcaption></figure>

And refreshed the site and got the password for the next level.

<figure><img src="https://1858660820-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrGZ5yoqZSj85T6vq2w3c%2Fuploads%2FW0O7ywvLSlCryyO0sHHh%2Fimage.png?alt=media&#x26;token=dda8bf8f-91ec-48c1-80a5-a676bc74f653" alt=""><figcaption></figcaption></figure>