Joshua Nichols

Bandit Level 13 -> Level 14

Overview

Bandit Level 13: The password for Level 14 is stored in a file named /etc/bandit_pass/bandit14 that and can only be read by user bandit14. One doesn't need the next password, but the private SSH key.

Connection:

Host: bandit.labs.overthewire.org
Port: 2220
User: bandit13
Password: (use the password from Level 12's data.txt file)

Steps

1. SSH into the server as bandit13

local
$
ssh bandit13@bandit.labs.overthewire.org -p 2220
(enter the password you found in Level 12 when prompted)

2. Find the private key

bandit13@bandit
bandit13@bandit:~$
ls
sshkey.private
bandit13@bandit:~$
exit

3. Get the private key

local
$
scp -P 2220 bandit13@bandit.labs.overthewire.org:sshkey.private .
(enter the password you found in Level 12 when prompted)
$
ls
sshkey.private
$
chmod 600 sshkey.private

4. Log in as bandit14

local
$
ssh -i sshkey.private bandit14@bandit.labs.overthewire.org -p 2220

5. Secure bandit14's password

bandit14@bandit
bandit14@bandit:~$
cat /etc/bandit_pass/bandit14
(password for bandit14)

Summary