Othmane Moutaouakkil
LinkedInGitHub
  • Introduction
  • OSCP Journey
    • HTB
      • HTB Linux Boxes
      • HTB Windows Boxes
  • Write-Ups
    • TCM Security
      • Practical Ethical Hacking
        • Networking Refresher
        • The Ethical Hacker Methodology
        • Information Gathering (Reconnaissance)
        • Scanning & Enumeration
        • Vulnerability Scanning with Nessus
        • Exploitation Basics
        • New Capstone
        • Active Directory (AD)
          • AD Overview
          • AD Lab Build
          • Attacking AD: Initial Attack Vectors
          • Attacking AD: Post-Compromise Enumeration
          • Attacking AD: Post-Compromise Attacks
          • We've Compromised the Domain - Now What?
          • Additional AD Attacks
          • AD Case Studies
        • Post Exploitation
        • Web Application Enumeration, Revisited
        • Find & Exploit Common Web Vulnerabilities
        • Wireless Penetration Testing
        • Legal Documents and Report Writing
      • Open-Source Intelligence (OSINT)
    • Hacking Challenges
      • OTW
        • Bandit
          • Level 0
          • Level 0 → 1
          • Level 1 → 2
          • Level 2 → 3
          • Level 3 → 4
          • Level 4 → 5
          • Level 5 → 6
          • Level 6 → 7
          • Level 7 → 8
          • Level 8 → 9
          • Level 9 → 10
          • Level 10 → 11
          • Level 11 → 12
          • Level 12 → 13
          • Level 13 → 14
          • Level 14 → 15
          • Level 15 → 16
          • Level 16 → 17
          • Level 17 → 18
          • Level 18 → 19
        • Natas
        • Leviathan
        • Krypton
        • Narnia
        • Behemoth
        • Utumno
        • Maze
        • Vortex
        • Manpage
        • Drifter
        • FormulaOne
      • THM
  • Research
  • Resume
Powered by GitBook
On this page
  • Level Goal
  • Write-Up
  • Lessons Learned

Was this helpful?

  1. Write-Ups
  2. Hacking Challenges
  3. OTW
  4. Bandit

Level 3 → 4

PreviousLevel 2 → 3NextLevel 4 → 5

Last updated 8 months ago

Was this helpful?

Level Goal

The password for the next level is stored in a hidden file in the inhere directory.

Write-Up

  1. List the content of the current directory to verify the existence of inhere directory:

ls
  1. Navigate to the inhere directory and list all files, including hidden ones:

cd inhere
ls -a

This reveals the presence of a hidden file named ...Hiding-From-You.

  1. Display the content of the hidden file:

cat ...Hiding-From-You

This command reveals the password: 2WmrDFRmJIq3IPxneAaMGhap0pFhF3NJ

  1. Access the next level using the obtained password:

ssh bandit4@bandit.labs.overthewire.org -p 2220

Enter the password when prompted.

Lessons Learned

  • Hidden files in Unix systems start with a dot .

  • The ls -a command shows all files, including hidden ones

  • Hidden files can be accessed and read like any other file

  • Important information may be concealed in hidden files

-- Othmane

ls
cd inhere & ls -a
cat ...Hiding-From-You