Goal
Retrieve the next password by submitting the current password to port 30001 on localhost using SSL/TLS.
Hints
openssl s_clientis the go-to “manual TLS client”.- You’ll type/paste the password after you connect.
- If you see messages like
RENEGOTIATING/KEYUPDATE, it can still work—keep reading output.
Solution (click to reveal)
- SSH in:
ssh bandit16@bandit.labs.overthewire.org -p 2220
- Connect with OpenSSL:
openssl s_client -connect localhost:30001
- Paste the current password and press Enter.
The response contains the password for Level 17.
Notes
- If the terminal feels “stuck”, try hitting Enter again; you’re in an interactive session.
- You can also add
-quietto reduce TLS chatter:
openssl s_client -quiet -connect localhost:30001