Bandit Level 6 → Level 7

Level Goal

The password for the next level is stored somewhere on the server and has all of the following properties:
owned by user bandit7
owned by group bandit6
33 bytes in size

Level Answer

1. find [starting-point...] [-user uname] [-group gname] [-size n[cwbkMG]]

• [-user uname] File is owned by user uname.
• [-group gname] File belongs to group gname
• [-size n[cwbkMG]] File uses n units of space, rounding up.
  The following suffixes can be used:
  'b' for 512-byte blocks (this is the default if no suffix is used)
  'c' for bytes
  'w' for two-byte words
  'k' for Kilobytes
  'M' for Megabytes
  'G' for Gigabytes

$ find / -user bandit7 -group bandit6 -size 33c 2>/dev/null
/var/lib/dpkg/info/bandit7.password

2. cat [FILE]...

$ cat /var/lib/dpkg/info/bandit7.password
HKBPTKQnIay4Fw76bEy8PVxKEDQRKTzs

3. ssh [-p port] [user@]hostname

• [-p port] Port to connect to on the remote host.

$ ssh -p 2220 [email protected]

Level Password

HKBPTKQnIay4Fw76bEy8PVxKEDQRKTzs