OverTheWire: Bandit Level 2

S.P.
SecTTP
Published in
1 min readMar 17, 2019

http://overthewire.org/wargames/bandit/bandit3.html

Level Goal

The password for the next level is stored in a file called spaces in this filename located in the home directory

Use ssh to login the server with the following information.

  • Username: bandit2
  • Password: CV1DtqXWVFXTvM2F0k09SHz0YwRINYA9
  • Host: bandit.labs.overthewire.org
  • Port: 2220
$ ssh bandit2@bandit.labs.overthewire.org -p 2220
This is a OverTheWire game server. More information on http://www.overthewire.org/wargames
bandit2@bandit.labs.overthewire.org's password:
CV1DtqXWVFXTvM2F0k09SHz0YwRINYA9

Let’s find the password for the next level.

bandit2@bandit:~$ ls
spaces in this filename
bandit2@bandit:~$ ls -al
total 24
drwxr-xr-x 2 root root 4096 Oct 16 14:00 .
drwxr-xr-x 41 root root 4096 Oct 16 14:00 ..
-rw-r — r — 1 root root 220 May 15 2017 .bash_logout
-rw-r — r — 1 root root 3526 May 15 2017 .bashrc
-rw-r — r — 1 root root 675 May 15 2017 .profile
-rw-r — — — 1 bandit3 bandit2 33 Oct 16 14:00 spaces in this filename
bandit2@bandit:~$ cat “spaces in this filename”
UmHadQclWmgdLOKQ3YNgjWxGoRMb5luK
bandit2@bandit:~$

Got it!

--

--