With level 2 out the way I can now progress on to bandit level 3. If you haven’t had a chance to read my write up of level 2, it can be found here. OverTheWire Bandit Write Up – Level 2. Head over give it a read, then scurry back and we can go through this level.
We’ve got a password file once again. It’s still in the home directory of the user, but this time it’s hidden within a sub directory. I used the word hidden here purposefully.
Let’s Start Hacking Then
So I need to get onto the server. I load up a fresh terminal and SSH into the bandit level 3 server, once connected it asks for the password. I paste in the password from the last level and I’m in.
ssh email@example.com -p 2220
Now I’m in I can start trying to find the password file. I run the usual
ls command and I see yes, there is a sub directory named
inhere. So I run the following command to look for any files.
But there was no files in the directory, however, I remembered that the file was ‘hidden’ within a sub directory. So I did some searching and found an article on TecMint explaining how to view hidden files within a directory. An Easy Way to Hide Files and Directories in Linux.
Now with this newly found knowledge I run the following command to find any hidden files or directories.
ls -a inhere/
and what do you know, there is a hidden file named
.hidden. This is probably it, I run the following command…
…and Wham! Bam! Thank you ma’am! I have the password now for level 4.
Level 3 Complete
I have hidden the password here, if you are playing along don’t peek! Please! It’s more fun getting it yourself.
Level 4 Password
Justin Byrne is a self motivated tech enthusiasts. Spending more than half his life dedicated to the tech industry. He built his first computer at the age of 11, and has been building ever since. His interests have changed across the years from system building to web programming and even a dab of software engineering, and just like his interests, his operating system has changed sometimes more then 4 times a year.