/etc/natas_webpass/natas#
Saw image at /files/, go to to /files, found users.txt
Source says "not Google" → robots.txt
/s3cr3t/ → users.txt
change html referer using Tamper Data extension for FF
not logged in
no /login, /admin
check cookies, value loggedin=0, change to 1
source code mentions includes/secret.inc, visit that, ?$secret = "FOEIUWGHFEEUHOFUOIU";?
source code has hint: password for webuser natas8 is in /etc/natas_webpass/natas8
url style is http://natas7.natas.labs.overthewire.org/index.php?page=home
http://natas7.natas.labs.overthewire.org/index.php?page=/etc/natas_webpass/natas8