tutorial · bandit

Bandit Level 18 → 19

Run a remote command when an interactive login is immediately closed.

By

banditsshshell-startup
Marks this level complete in your browser.

Goal

Read the home-directory readme even though a modified .bashrc logs out interactive SSH sessions.

Why this matters

Remote command execution can bypass an interactive startup path and is useful for controlled automation and recovery.

Progressive hints

  1. Hint 1

    The credential still permits SSH authentication.

  2. Hint 2

    SSH can receive a command after the destination.

  3. Hint 3

    Ask for only the file you need.

Method

Run only the lines that match the evidence you observe.

ssh bandit18@bandit.labs.overthewire.org -p 2220 'cat readme'

Expected non-secret observation

The remote command prints the file before the connection closes.

Explanation

A command-mode SSH session does not require the same interactive shell workflow that triggers the logout behavior.

Troubleshooting

  • Place the remote command after the SSH destination.
  • Quote the command so your local shell does not reinterpret it.

Safety and cleanup

  • Use only the OverTheWire game host and your own local practice directory.
  • Do not paste a level password into this site, screenshots, notes, or submissions. Baitaphish never asks for credentials.
  • Treat commands as learning prompts: inspect paths and flags before running them.

Completion and next step

Use the recovered credential only in the official Level 19 login. Then mark this transition complete and continue.