> For the complete documentation index, see [llms.txt](https://ravins-organization.gitbook.io/ctf-writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ravins-organization.gitbook.io/ctf-writeups/2025/wapt-module-natas/natas-3.md).

# Natas 3

When we start this challenge, we see a comment in the code that says

```html
<!-- No more information leaks!! Not even Google will find it this time... -->
```

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FvNB7xbBH0Fknk3dMvqqv%2Fimage.png?alt=media&amp;token=5f4235dc-f4f0-4aa5-bbc7-16bcdeb2e986" alt=""><figcaption></figcaption></figure>

This gives the clue that it has something to do with Search Engines and indexing. This refers to robots.txt which provides instructions to web crawlers on which parts of a website it should not access.

By going to /robots.txt we see

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FzQbrertLqrg8mSQRWF0Y%2Fimage.png?alt=media&amp;token=f8079c4e-4097-49ac-b136-ea4459c611eb" alt=""><figcaption></figcaption></figure>

It tries to disallow /s3cr3t, By going to it we see

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FNawliS3HmVasbat7hd3o%2Fimage.png?alt=media&amp;token=f5804a15-cb6b-4018-a6a1-1f1842a36ffe" alt=""><figcaption></figcaption></figure>

in which we find the password for natas4

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FtTus0oMeNVWpgxzAM7gU%2Fimage.png?alt=media&amp;token=90c2b2c3-2604-4f35-8b33-b00b32c1570a" alt=""><figcaption></figcaption></figure>

Thus the password is `QryZXc2e0zahULdHrtHxzyYkj59kUxLQ`