Bandit6 - bandit7

From JaxHax
Jump to navigation Jump to search

Level Goal

The password for the next level is stored somewhere on the server and has all of the following properties:

  • Owned by user bandit7
  • Owned by group bandit6
  • 33 bytes in size


Solution

The password can be anywhere... Time to use the "find" command!

bandit6@melinda:~$ find / -group bandit6 -user bandit7 2> /dev/null
/var/lib/dpkg/info/bandit7.password

bandit6@melinda:~$ cat /var/lib/dpkg/info/bandit7.password
HKBPTKQnIay4Fw76bEy8PVxKEDQRKTzs