With level 2 out the way I can now progress on to bandit level 3. If you haven’t had a chance to read my write up of level 2, it can be found here. OverTheWire Bandit Write Up – Level 2. Head over give it a read, then scurry back and we can go through this level.
We’ve got a password file once again. It’s still in the home directory of the user, but this time it’s hidden within a sub directory. I used the word hidden here purposefully.
Let’s Start Hacking Then
So I need to get onto the server. I load up a fresh terminal and SSH into the bandit level 3 server, once connected it asks for the password. I paste in the password from the last level and I’m in.
ssh firstname.lastname@example.org -p 2220
Now I’m in I can start trying to find the password file. I run the usual
ls command and I see yes, there is a sub directory named
inhere. So I run the following command to look for any files.
But there was no files in the directory, however, I remembered that the file was ‘hidden’ within a sub directory. So I did some searching and found an article on TecMint explaining how to view hidden files within a directory. An Easy Way to Hide Files and Directories in Linux.
Now with this newly found knowledge I run the following command to find any hidden files or directories.
ls -a inhere/
and what do you know, there is a hidden file named
.hidden. This is probably it, I run the following command…
…and Wham! Bam! Thank you ma’am! I have the password now for level 4.
Level 3 Complete
I have hidden the password here, if you are playing along don’t peek! Please! It’s more fun getting it yourself.
Level 4 Password