add natas0 and fix 1337up writeup

Slavetomints · Slavetomints · commit 4d982044d97a · 2025-07-26T11:34:06.000-05:00
diff --git a/_posts/2024-11-17-1337up-live-2024-private-github-repository.md b/_posts/2024-11-17-1337up-live-2024-private-github-repository.md
@@ -94,4 +94,4 @@ Another repository! Ugh this is getting kind tedious, but nevertheless, lets clo
 
 Finally! We've found the flag, but we should clean up first. All we'll need to do is run `ssh-add -d is_rsa` to remove that key, because we don't need it anymore, and we're all good! Hopefully you learned a thing or two about git and GitHub on your way here.
 
-FLAG: INTIGRITI{9e0121bb8bce15ead3d7f529a81b77b4}
+FLAG: `INTIGRITI{9e0121bb8bce15ead3d7f529a81b77b4}`
diff --git a/_posts/2025-07-13-overthewire-natas0.md b/_posts/2025-07-13-overthewire-natas0.md
@@ -0,0 +1,52 @@
+---
+title: natas0
+date: 2025-07-13
+categories: [Capture The Flags, OverTheWire]
+tags: [ctf, overthewire, natas, writeups]
+description: OverTheWire natas0 Challenge
+---
+
+
+> Challenge description:
+>
+>
+ http://natas0.natas.labs.overthewire.org
+{: .prompt-info }
+
+Okay, so let's load up the site!
+
+![the landing page](/assets/img/overthewire/natas0-0.png)
+
+Hm, well I don't see it on the page, so let's look at the `html` that makes up the site.
+
+```html
+<html>
+
+<head>
+    <!-- This stuff in the header has nothing to do with the level -->
+    <link rel="stylesheet" type="text/css" href="http://natas.labs.overthewire.org/css/level.css">
+    <link rel="stylesheet" href="http://natas.labs.overthewire.org/css/jquery-ui.css" />
+    <link rel="stylesheet" href="http://natas.labs.overthewire.org/css/wechall.css" />
+    <script src="http://natas.labs.overthewire.org/js/jquery-1.9.1.js"></script>
+    <script src="http://natas.labs.overthewire.org/js/jquery-ui.js"></script>
+    <script src=http://natas.labs.overthewire.org/js/wechall-data.js></script>
+    <script src="http://natas.labs.overthewire.org/js/wechall.js"></script>
+    <script>
+        var wechallinfo = { "level": "natas0", "pass": "natas0" };
+    </script>
+</head>
+
+<body>
+    <h1>natas0</h1>
+    <div id="content">
+        You can find the password for the next level on this page.
+
+        <!--The password for natas1 is {hidden in accordance with game rules} -->
+    </div>
+</body>
+
+</html>
+```
+
+And look at that, the password was in a comment on the source code, which is a real problem you'll find in the world.
+
diff --git a/assets/img/overthewire/natas0-0.png b/assets/img/overthewire/natas0-0.png

Original file line number	Diff line number	Diff line change
`@@ -94,4 +94,4 @@ Another repository! Ugh this is getting kind tedious, but nevertheless, lets clo`
`94`	`94`
`95`	`95`	Finally! We've found the flag, but we should clean up first. All we'll need to do is run `ssh-add -d is_rsa` to remove that key, because we don't need it anymore, and we're all good! Hopefully you learned a thing or two about git and GitHub on your way here.
`96`	`96`
`97`		`-FLAG: INTIGRITI{9e0121bb8bce15ead3d7f529a81b77b4}`
	`97`	+FLAG: `INTIGRITI{9e0121bb8bce15ead3d7f529a81b77b4}`