Othmane Moutaouakkil
LinkedInGitHub
  • Introduction
  • OSCP Journey
    • HTB
      • HTB Linux Boxes
      • HTB Windows Boxes
  • Write-Ups
    • TCM Security
      • Practical Ethical Hacking
        • Networking Refresher
        • The Ethical Hacker Methodology
        • Information Gathering (Reconnaissance)
        • Scanning & Enumeration
        • Vulnerability Scanning with Nessus
        • Exploitation Basics
        • New Capstone
        • Active Directory (AD)
          • AD Overview
          • AD Lab Build
          • Attacking AD: Initial Attack Vectors
          • Attacking AD: Post-Compromise Enumeration
          • Attacking AD: Post-Compromise Attacks
          • We've Compromised the Domain - Now What?
          • Additional AD Attacks
          • AD Case Studies
        • Post Exploitation
        • Web Application Enumeration, Revisited
        • Find & Exploit Common Web Vulnerabilities
        • Wireless Penetration Testing
        • Legal Documents and Report Writing
      • Open-Source Intelligence (OSINT)
    • Hacking Challenges
      • OTW
        • Bandit
          • Level 0
          • Level 0 → 1
          • Level 1 → 2
          • Level 2 → 3
          • Level 3 → 4
          • Level 4 → 5
          • Level 5 → 6
          • Level 6 → 7
          • Level 7 → 8
          • Level 8 → 9
          • Level 9 → 10
          • Level 10 → 11
          • Level 11 → 12
          • Level 12 → 13
          • Level 13 → 14
          • Level 14 → 15
          • Level 15 → 16
          • Level 16 → 17
          • Level 17 → 18
          • Level 18 → 19
        • Natas
        • Leviathan
        • Krypton
        • Narnia
        • Behemoth
        • Utumno
        • Maze
        • Vortex
        • Manpage
        • Drifter
        • FormulaOne
      • THM
  • Research
  • Resume
Powered by GitBook
On this page
  • Level Goal
  • Write-Up
  • Lessons Learned

Was this helpful?

  1. Write-Ups
  2. Hacking Challenges
  3. OTW
  4. Bandit

Level 4 → 5

PreviousLevel 3 → 4NextLevel 5 → 6

Last updated 7 months ago

Was this helpful?

Level Goal

The password for the next level is stored in the only human-readable file in the inhere directory. Tip: if your terminal is messed up, try the reset command.

Write-Up

  1. Navigate to the inhere directory:

ls
cd inhere
  1. Identify the human-readable file:

for i in $(ls); do file -i "./$i"; done;

This reveals ./-file07 as the only text/plain file.

  • for i in $(ls): Loops through each file in the current directory

  • do: Starts the loop body

  • file -i: Runs the file command to each file, using ./ to handle filenames starting with -

  • done: Ends the loop

  • Overall: Identifies the file type of every file in the directory.

  1. Display the content of the identified file:

cat ./-file07

The retrieved password: 4oQYVPkxZOOEOO5pTW81FB8j8lxXGUQw

  1. Access the next level:

ssh bandit5@bandit.labs.overthewire.org -p 2220

Enter the password when prompted.

Lessons Learned

  • Scripting with loops can efficiently process multiple files

  • The file command helps identify file types regardless of extension

  • Using ./ is crucial when dealing with files that start with -

-- Othmane

ls & cd inhere
for i in $(ls); do file -i "./$i"; done;
cat ./-file07