
i have tried everything and i believe that <!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Strict//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd”> has something but i realy dont know can you give me a hint at what to do please

well first, it has nothing to do with the line you gave. This is just a common header for html files.
Read the hint and other topic in this section, many clues are dispatched if not too much.



What does it say in your URL bar..?
Yes it is one and you should delete it because it’s kind of a spoiler..


no, robots.txt is a list of what things a search engine can’t find, and one of them, very conveniently, is a file where the password and username for the level are kept.

look through the files that were hidden from search engines, if you read english it would be obvious where your password is kept.

Look at the “Disallows”, what do they say? Does one seems to be in the “levels” directory? Does one seem unnecessarily specific? Does one seem to be pointing towards a specific file? If so, put that behind hackthis.co.uk and be done with this level.

I’m not being rude, I’m asking you questions that you may have not thought about, hopefully pointing you in the right direction. But As I said, think about what things are disallowed.



If you found the password then you should have found the username as well
But no they are not the same.