Alright! So we have two links here, home and about.
When we click either of the links, it looks like the current page is showing up in the address bar.
Let’s try to feed it some random information and see how it acts
It looks like we got some more information from that!
Now we know that the webpage lives in /var/www/natas/natas7/index.php
If we recall from the main natas page All passwords are also stored in /etc/natas_webpass/
Let’s see if we can access that from this webpage…
We are looking for etc/natas_webpass/natas8
Our current directory is /var/www/natas/natas8/
Therefore, to get to /etc/natas_webpass, we need to go up 4 levels, and then to the /etc/ directory and then to natas_webpass.
We can do this by navigating to ../../../../etc/natas_webpass/natas8 (up a directory 4 times and open /etc/natas_webpass)
Perfect!
Killian Sherer 