With level 2 out the way I can now progress on to bandit level 3. If you haven’t had a chance to read my write up of level 2, it can be found here. OverTheWire Bandit Write Up – Level 2. Head over give it a read, then scurry back and we can go through this level.

Level 3

We’ve got a password file once again. It’s still in the home directory of the user, but this time it’s hidden within a sub directory. I used the word hidden here purposefully.

Let’s Start Hacking Then

So I need to get onto the server. I load up a fresh terminal and SSH into the bandit level 3 server, once connected it asks for the password. I paste in the password from the last level and I’m in.

ssh bandit3@bandit.labs.overthewire.org -p 2220

Now I’m in I can start trying to find the password file. I run the usual ls command and I see yes, there is a sub directory named inhere. So I run the following command to look for any files.

ls inhere/

But there was no files in the directory, however, I remembered that the file was ‘hidden’ within a sub directory. So I did some searching and found an article on TecMint explaining how to view hidden files within a directory. An Easy Way to Hide Files and Directories in Linux.

Now with this newly found knowledge I run the following command to find any hidden files or directories.

ls -a inhere/

and what do you know, there is a hidden file named .hidden. This is probably it, I run the following command…

cat inhere/.hidden

…and Wham! Bam! Thank you ma’am! I have the password now for level 4.

Level 3 Complete

I have hidden the password here, if you are playing along don’t peek! Please! It’s more fun getting it yourself.


Justin Byrne

Justin Byrne is a self motivated tech enthusiasts. Spending more than half his life dedicated to the tech industry. He built his first computer at the age of 11, and has been building ever since. His interests have changed across the years from system building to web programming and even a dab of software engineering, and just like his interests, his operating system has changed sometimes more then 4 times a year.


Leave a Reply