tutorial · bandit

Bandit Level 25 → 26

Inspect a nonstandard login shell and use a pager escape deliberately.

By

banditshell-escapemoressh
Marks this level complete in your browser.

Goal

Log in to bandit26 with the provided key and escape its non-bash shell to obtain an interactive shell.

Why this matters

Login shells, terminal dimensions, pagers, and subprocess escapes form one chain of execution context.

Progressive hints

  1. Hint 1

    Inspect bandit26's configured shell before connecting.

  2. Hint 2

    Make the terminal short enough that output opens in a pager.

  3. Hint 3

    Use the pager's documented command escape to start a shell.

Method

Run only the lines that match the evidence you observe.

grep '^bandit26:' /etc/passwd
cat <shell-path-from-passwd>
# Reduce terminal height, connect with the provided SSH key, then use the pager's help/command escape to open a shell.

Expected non-secret observation

Instead of immediate logout, the login artwork pauses in a pager from which a shell can be launched.

Explanation

The custom login shell invokes a pager only when output does not fit; the pager can start another command under the same account.

Troubleshooting

  • Terminal height is part of the level's behavior.
  • Consult the pager's built-in help rather than guessing keys.

Safety and cleanup

  • Use only the OverTheWire game host and your own local practice directory.
  • Do not paste a level password into this site, screenshots, notes, or submissions. Baitaphish never asks for credentials.
  • Treat commands as learning prompts: inspect paths and flags before running them.

Completion and next step

Use the recovered credential only in the official Level 26 login. Then mark this transition complete and continue.