Bait A Phish
Bait A Phish
Security Pulse
tutorial · bandit

Bandit Level 3

Find hidden files (dotfiles) and read the right one.
banditlsdotfiles
Narration (cached)
Marks this level complete in your browser.

Goal

The password for the next level is stored in a hidden file in the inhere directory.

Key concept

Hidden files on Linux typically start with a dot, like:

By default, ls won’t show them.

Steps

  1. SSH in:
ssh bandit3@bandit.labs.overthewire.org -p 2220
  1. Go into the directory:
cd inhere
  1. List including hidden:
ls -la
  1. Identify the file that looks like the password file, then read it:
cat .hidden

That output is the password for Level 4.

Notes

Bandit Level 2Bandit Level 4