Tuesday, October 30, 2012

OverTheWire Wargame "Natas" Level 4 [How-To/Web]

So Level 3 required a bit more knowledge of web servers and how searches parse them, but we got through it and are now on Level 4.

When we load up this level, we are welcomed by the following error:

So it can see where we are coming from, and it doesn't like it.

There's a "Refresh page" button, lets click that and see what happens.

So now it sees that we are just refreshing the page. A little knowledge of how messages are sent through HTTP is required here.
When an HTTP request is made, there are certain fields that are filled in, and one of them is a "referer".
Maybe you can catch on where I'm going from here. What we need to do is hijack the request and change the referrer to be what it says it should be.

How are we going to do this? Well, I'm using Chrome, and there's this nice little tool called "Referer Control" which can be found here. Go ahead and install it (and if you're not, use Chrome already!) and I'll tell you how to configure it to help us out.

Loading up this app brings us to the main screen of the configuration:

For our setup, we are going to use the top section, where we can enter a website under "site filter".
If we use the "default referrer for all other sites" it will change it for every single HTTP request we make.

Enter "http://natas4.natas.labs.overthewire.org/" for the site, and select the "Custom" setting for the "referrer setting".
From there, enter "http://natas5.natas.labs.overthewire.org/" for the referrer site as seen below:

The red X on the left is the delete button (not an error), so don't click on that unless you want to remove this specific site referral.

Once this is done, go back to Level 4, and you should see this (you might have to refresh the Referrer Control Settings):

There we have it, natas5:V0p12qz30HEUU22dz7CZGHiFk3VdPA9Z.

On to Level 5!


  1. Any chance on getting info on completing Lvl.5?

    1. Right here: http://www.hackavision.com/2012/10/overthewire-wargame-natas-level-5-how.html

      I have completed up to level 11 but have not written them up.

  2. can you please write that down? :)

  3. j'avais un grand plaisir car j'ai visité le blog.

  4. When I initially commented I clicked the "Notify me when new comments are added" checkbox and now each time a comment is added I get four emails with the same comment. Is there any way you can remove me from that service? Appreciate it! paypal credit login

  5. Female Escorts: To protect Esther in the harem, and to forestall discrimination and hostility toward her, Mordecai ordered Esther to cover her Jewishness. She wasn't to celebrate Jewish customs and laws and was to avoid drawing attention to herself inside the harem by insisting on kosher food.
    Female Escorts,High Class Call Ladies,Escorts Ladies,Escorts ,Escorts close to me
    Female Escorts

  6. Love how wonderfully every word is written with proper balance.
    software development company in delhi