Over The Wire

Bandit

Host: bandit.labs.overthewire.org

Port: 2220

Level 6

ssh bandit6@bandit.labs.overthewire.org -p 2220
password: P4L4vucdmLnm8I7Vl7jG1ApGSfjYKqJU

Objective:

The password for the next level is stored somewhere on the server and has all of the following properties:

  • owned by user bandit7
  • owned by group bandit6
  • 33 bytes in size

$ find / -user bandit7 -group bandit6 -size 33c 2>/dev/null

2>/dev/null will remove the errors because we are not in root for a "clean" result

CLI:

bandit6@bandit:~$ find / -user bandit7 -group bandit6 -size 33c 2>/dev/null
/var/lib/dpkg/info/bandit7.password
bandit6@bandit:~$ cat /var/lib/dpkg/info/bandit7.password
z7WtoNQU2XfjmMtWA8u5rN4vzqu4v99S
bandit6@bandit:~

Bandit