Tuesday, October 30, 2012

OverTheWire Wargame "Natas" Level 4 [How-To/Web]

So Level 3 required a bit more knowledge of web servers and how searches parse them, but we got through it and are now on Level 4.

When we load up this level, we are welcomed by the following error:

So it can see where we are coming from, and it doesn't like it.

There's a "Refresh page" button, lets click that and see what happens.

So now it sees that we are just refreshing the page. A little knowledge of how messages are sent through HTTP is required here.
When an HTTP request is made, there are certain fields that are filled in, and one of them is a "referer".
Maybe you can catch on where I'm going from here. What we need to do is hijack the request and change the referrer to be what it says it should be.

How are we going to do this? Well, I'm using Chrome, and there's this nice little tool called "Referer Control" which can be found here. Go ahead and install it (and if you're not, use Chrome already!) and I'll tell you how to configure it to help us out.

Loading up this app brings us to the main screen of the configuration:

For our setup, we are going to use the top section, where we can enter a website under "site filter".
If we use the "default referrer for all other sites" it will change it for every single HTTP request we make.

Enter "http://natas4.natas.labs.overthewire.org/" for the site, and select the "Custom" setting for the "referrer setting".
From there, enter "http://natas5.natas.labs.overthewire.org/" for the referrer site as seen below:

The red X on the left is the delete button (not an error), so don't click on that unless you want to remove this specific site referral.

Once this is done, go back to Level 4, and you should see this (you might have to refresh the Referrer Control Settings):

There we have it, natas5:V0p12qz30HEUU22dz7CZGHiFk3VdPA9Z.

On to Level 5!


  1. Any chance on getting info on completing Lvl.5?

    1. Right here: http://www.hackavision.com/2012/10/overthewire-wargame-natas-level-5-how.html

      I have completed up to level 11 but have not written them up.

  2. can you please write that down? :)

  3. j'avais un grand plaisir car j'ai visité le blog.

  4. When I initially commented I clicked the "Notify me when new comments are added" checkbox and now each time a comment is added I get four emails with the same comment. Is there any way you can remove me from that service? Appreciate it! paypal credit login

  5. Female Escorts: To protect Esther in the harem, and to forestall discrimination and hostility toward her, Mordecai ordered Esther to cover her Jewishness. She wasn't to celebrate Jewish customs and laws and was to avoid drawing attention to herself inside the harem by insisting on kosher food.
    Female Escorts,High Class Call Ladies,Escorts Ladies,Escorts ,Escorts close to me
    Female Escorts

  6. Love how wonderfully every word is written with proper balance.
    software development company in delhi

  7. Are you desperately in need of a hacker in any area of your life???

    then you can contact; cyberfiles.hacker@gmail.com

    I will help you at affordable prices, he offer services like
    -hack into your cheating partner's phone(whatsapp,bbm.gmail,icloud,facebook, twitter,snap chat and others)
    -Sales of Blank ATM cards.

    -hack into email accounts and trace email location -all social media accounts,

    -school database to clear or change grades,

    -Retrieval of lost file/documents

    -DUIs -company records and systems,

    -Bank accounts,Paypal accounts -Credit cards hacker

    -Credit score hack -Monitor any phone and email address

    -Websites hacking, pentesting.

    -IP addresses and people tracking.

    -Hacking courses and classes.

    is services is the best on the market and 100% security and discreet work is guaranteed.,...

  8. It’s appropriate time to make some plans for the future and it is time to be happy. I have read this post and if I could I wish to suggest you few interesting things or advice. Perhaps you could write next articles referring to this article. I desire to read even more things about it! surgeongate.org/michigan-plastic-surgery/michigan-lasik-eye-surgery/

  9. Néhány lépés hátrafelé, ahol ülhetünk az Omega dedikált tereibe, hogy mindent megtanulhassunk a Bienne-alapú márka legújabb újdonságairól - és felfedezzük,replika órák mi rejlik a rejtett kincsek falában, amely magában foglal néhány valódi képet speciális Omega referenciák… Közben az ablaksorozatban közvetlenül az egész oldalán inkább merész alkotások jelennek meg Ulysse Nardin és Armin Strom,rolex replika valamint a brit Bremont márkanév számos legnépszerűbb limitált kiadásaként.