> For the complete documentation index, see [llms.txt](https://ravins-organization.gitbook.io/ctf-writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ravins-organization.gitbook.io/ctf-writeups/2025/wapt-module-natas/natas-2.md).

# Natas 2

Natas 2 is where things get slightly more interesting, when we see that there is a pixel.png is /files, seems interesting as there might be more things in /files

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2F0GuqkpYz0SgMQLAO9GXO%2Fimage.png?alt=media&amp;token=5cd08445-d732-4569-af0d-a803a3828944" alt=""><figcaption></figcaption></figure>

If we take a look at the /files directory

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FPIgZZ3gQaiBwlmSqSEIB%2Fimage.png?alt=media&amp;token=240bcfa1-0120-4573-9d03-2474586995d8" alt=""><figcaption></figcaption></figure>

There is an interesting users.txt file, which shows

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FciQULITbbZdhtmOgKGTH%2Fimage.png?alt=media&amp;token=a5c71a07-6492-4969-bd6c-abdda1267213" alt=""><figcaption></figcaption></figure>

```
# username:password
alice:BYNdCesZqW
bob:jw2ueICLvT
charlie:G5vCxkVV3m
natas3:3gqisGdR0pjm6tpkDKdIWO2hSvchLeYH
eve:zo4mJWyNj2
mallory:9urtcpzBmH
```

Thus the password is `3gqisGdR0pjm6tpkDKdIWO2hSvchLeYH`