OverTheWire Bandit Write Up – Level 3

With level 2 out the way I can now progress on to bandit level 3. If you haven’t had a chance to read my write up of level 2, it can be found here. OverTheWire Bandit Write Up – Level 2. Head over give it a read, then scurry back and we can go through this level.

Level 3

We’ve got a password file once again. It’s still in the home directory of the user, but this time it’s hidden within a sub directory. I used the word hidden here purposefully.

Let’s Start Hacking Then

So I need to get onto the server. I load up a fresh terminal and SSH into the bandit level 3 server, once connected it asks for the password. I paste in the password from the last level and I’m in.

ssh bandit3@bandit.labs.overthewire.org -p 2220

Now I’m in I can start trying to find the password file. I run the usual ls command and I see yes, there is a sub directory named inhere. So I run the following command to look for any files.

ls inhere/

But there was no files in the directory, however, I remembered that the file was ‘hidden’ within a sub directory. So I did some searching and found an article on TecMint explaining how to view hidden files within a directory. An Easy Way to Hide Files and Directories in Linux.

Now with this newly found knowledge I run the following command to find any hidden files or directories.

ls -a inhere/

and what do you know, there is a hidden file named .hidden. This is probably it, I run the following command…

cat inhere/.hidden

…and Wham! Bam! Thank you ma’am! I have the password now for level 4.

Level 3 Complete

I have hidden the password here, if you are playing along don’t peek! Please! It’s more fun getting it yourself.

Leave a Reply