Bandit Level 1 → Level 2
OverTheWire Bandit Level 1 → Level 2
ssh [email protected] -p 2220
The password for the next level is stored in a file called - located in the home directory
The Solution
Using the password we got from the last challenge, lets ssh into the game server as bandit1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
┌─[slavetomints@parrot]─[~]
└──╼ $ssh [email protected] -p 2220
_ _ _ _
| |__ __ _ _ __ __| (_) |_
| '_ \ / _` | '_ \ / _` | | __|
| |_) | (_| | | | | (_| | | |_
|_.__/ \__,_|_| |_|\__,_|_|\__|
This is an OverTheWire game server.
More information on http://www.overthewire.org/wargames
[email protected]'s password:
Now, this one seems simple enough, actually it should be just as easy as the last challenge, just cat the file and get a move on. So let’s try that.
1
2
3
bandit1@bandit:~$ cat -
Huh, that’s odd. What happened is that - is used for a few different things in UNIX/UNIX-like systems, most commonly to specify flags for a command such as ls -sa. Now what’s happening is the terminal is waiting for the “rest” of the command, as it doesn’t think that we are quite done yet.
The way around it is to specify exactly what we want to cat. See the following
1
2
3
bandit1@bandit:~$ cat ./-
{hidden in accordance with game rules}
What this does is it uses . to specify the current directory, and then the file named - in it. And that how we can get the password for the next level.