OverTheWire Natas Level 0 → 1 tutorial!!

Login

URL: http://natas1.natas.labs.overthewire.org
Credentials: natas1:0nzCigAq7t2iALyvU9xcHlYN4MlkIwlq

💡 Tip: you can also use curl -u natas1:<password> <URL> if you prefer the terminal, but the intended solution is straight from the browser.

Task

In this level, right-click is disabled in the browser.
Your goal is still to view the HTML source — the password for natas2 is hidden in a comment.

A little bit of Theory

• Websites can use JavaScript to intercept and block right-click, but it only affects the UI, not the actual page source.
• Use keyboard shortcuts to open source directly:
  • Windows/Linux: Ctrl+U
  • macOS: Option+Command+U
• As always, HTML comments (<!-- ... -->) are a common hiding spot.

Further reading:

• MDN: Basic Authentication
• MDN: View Source vs. DevTools
• How right-click is disabled with JS

Solution

1. Log in with the given credentials.
2. Ignore the right-click restriction and open the page source via shortcut.

3. Locate the HTML comment inside the source:

   <!--The password for natas2 is TguMNxKo1DSa1tujBLuZJnDUlCcUAPlI -->
   


1. Copy the password exactly.

2. Proceed to Level 2 at http://natas2.natas.labs.overthewire.org using:

   • Username: natas2
   • Password: TguMNxKo1DSa1tujBLuZJnDUlCcUAPlI

Password

TguMNxKo1DSa1tujBLuZJnDUlCcUAPlI

Troubleshooting

• Can’t open source? → Use the keyboard shortcut instead of right-click.
• Still blocked? → Try another browser.
• Prefer terminal? → Use curl -u natas1:<password> <URL> to fetch raw HTML.

Congrats 🎉 You just bypassed a simple JavaScript trick and revealed the hidden password for natas2!

Thanks for reading!

Until next time — Otsumachi!! 💖☄️✨