Bait A Phish
Bait A Phish
Security Pulse
tutorial · bandit

Bandit Level 10

Use strings to extract readable text, then grep for the password marker.
banditstringsgrepforensics
Narration (cached)
Marks this level complete in your browser.

Goal

The password is in data.txt in one of the few human-readable strings, preceded by several = characters.

Key concept

strings extracts readable sequences from a binary-ish file.

Steps

  1. SSH in:
ssh bandit10@bandit.labs.overthewire.org -p 2220
  1. Extract readable strings and look for the marker:
strings data.txt | grep "==="

You should see the password on a line with ==== (or similar) before it.

That output is the password for Level 11.

Notes

strings data.txt | grep -n "="
Bandit Level 9Bandit Level 11