> ## Documentation Index > Fetch the complete documentation index at: https://writeups.dudji.com/llms.txt > Use this file to discover all available pages before exploring further. # Natas 1 > Natas Level 1 — right-click is blocked via JavaScript, but keyboard shortcuts bypass it entirely. ## Overview | Field | Value | | -------- | ------------------------------------------ | | URL | `http://natas1.natas.labs.overthewire.org` | | Username | `natas1` | | Password | `0nzCigAq7t2iALyvU9xcHlYN4MlkIwlq` | The page says: *"You can find the password for the next level on this page, but rightclicking has been blocked!"* The source contains this handler: ```html theme={"theme":{"light":"github-light","dark":"tokyo-night"}} ``` The password is still in the source — same as Level 0. The only obstacle is accessing that source without right-clicking. *** ## Hints Only the right-click context menu is blocked — and only by JavaScript running inside the browser. JavaScript can block the context menu event, but it cannot block your browser's own built-in features. What other methods does your browser offer to view source? Most browsers have a keyboard shortcut to view the page source that has nothing to do with right-clicking. Try `Ctrl+U`. You can also use the browser address bar directly by typing `view-source:` before the URL. *** ## Solution Press `Ctrl+U` to open the page source directly — the JavaScript block on right-click doesn't affect this shortcut. Alternatively, type `view-source:http://natas1.natas.labs.overthewire.org` in the address bar. The password sits in the same HTML comment pattern as Level 0: ```html theme={"theme":{"light":"github-light","dark":"tokyo-night"}} ``` Client-side restrictions (JavaScript handlers, CSS tricks) are never a real security boundary. They only affect users who run your JavaScript. Any HTTP client, curl, or browser shortcut bypasses them entirely. ## With curl ```bash theme={"theme":{"light":"github-light","dark":"tokyo-night"}} curl -s -u natas1:0nzCigAq7t2iALyvU9xcHlYN4MlkIwlq \ http://natas1.natas.labs.overthewire.org/ \ | grep -i password ``` ## Password ``` natas2: TguMNxKo1DSa1tujBLuZJnDUlCcUAPlI ```