BanditOverTheWire

Bandit14

Website URL: http://overthewire.org/wargames/bandit/bandit14.html

Log in to the game server using credentials of bandit13.

 

 

Fig 1.

Our task seems to be as follows:

The password for the next level is stored in /etc/bandit_pass/bandit14 and can only be read by user bandit14. For this level, you don’t get the next password, but you get a private SSH key that can be used to log into the next level. Note: localhost is a hostname that refers to the machine you are working on

Well, seems quite straightforward. Let’s see this ssh file

ls
Fig 2.

Okay, so we can use it to log into bandit14 directly and get the password.

ssh -i ./sshkey.private bandit14@localhost
Fig 3.

Now let’s get the password from /etc/bandit_pass/bandit14

cat /etc/bandit_pass/bandit14
Fig 4.

Done!

Leave a Reply

Your email address will not be published. Required fields are marked *