Bandit Level 0 → 1

Goal

Log in with SSH and read the password stored in the home-directory file named readme.

Why this matters

Remote shells, directory orientation, and careful output handling are the foundation for every later level.

Progressive hints

1. Hint 1

   Start with the connection details on the official page.

2. Hint 2

   After login, list the current directory before reading anything.

3. Hint 3

   The target is an ordinary file named readme.

Method

Run only the lines that match the evidence you observe.

ssh bandit0@bandit.labs.overthewire.org -p 2220
pwd && ls -la
cat readme

Expected non-secret observation

The SSH session opens on the game host, and reading readme prints one credential-like line. Do not copy it anywhere except the next official login prompt.

Explanation

SSH creates the remote session; ls identifies available entries; cat writes the selected file to the terminal.

Troubleshooting

• Confirm the host and port match the official page.
• If host-key verification appears, compare the prompt with OverTheWire guidance before accepting.
• Remember that password input is intentionally not echoed.

Safety and cleanup

• Use only the OverTheWire game host and your own local practice directory.
• Do not paste a level password into this site, screenshots, notes, or submissions. Baitaphish never asks for credentials.
• Treat commands as learning prompts: inspect paths and flags before running them.

Completion and next step

Use the recovered credential only in the official Level 1 login. Then mark this transition complete and continue.