Bandit: Level 3 - Level 4
Bandit: Level 3 - Level 4
Level 3
Username: bandit3
Password: MNk8KNH3Usiio41PRUEoDFPqfxLPlSmx
Task:
https://overthewire.org/wargames/bandit/bandit4.html
Start
Let’s begin by connecting to the server bandit.labs.overthewire.org and logging in with user bandit3 on port 2220.
We have several commands available for this task:
lscdcatfiledufind
Solve the level
First lets check the environment. With ls we see the mentioned folder inhere.
Lets see what is in the folder:
1
2
3
4
5
bandit3@bandit:~$ ls
inhere
bandit3@bandit:~$ cd inhere/
bandit3@bandit:~/inhere$ ls
bandit3@bandit:~/inhere$
Okay, we changed the directory with cd but unfortunately it seems we dont see the hidden file via ls. Lets check the manual or help:
1
2
man ls
ls --help
After short studying - there is the parameter -a.
1
2
3
4
5
6
7
8
bandit3@bandit:~/inhere$ ls --help
Usage: ls [OPTION]... [FILE]...
List information about the FILEs (the current directory by default).
Sort entries alphabetically if none of -cftuvSUX nor --sort is specified.
Mandatory arguments to long options are mandatory for short options too.
-a, --all do not ignore entries starting with .
Lets try it:
1
2
3
4
5
6
7
8
bandit3@bandit:~/inhere$ ls -a
. .. ...Hiding-From-You
bandit3@bandit:~/inhere$ cat ...Hiding-From-You
2WmrDFRmJIq3IPxneAaMGhap0pFhF3NJ
bandit3@bandit:~/inhere$
Perfect, we have our password for the next level:
2WmrDFRmJIq3IPxneAaMGhap0pFhF3NJ
Explanation:
In Unix-like operating systems, files and directories that begin with a dot (.) are considered hidden. These files are not displayed by default when using the ls command, which lists files in a directory.