Othmane Moutaouakkil
LinkedInGitHub
  • Introduction
  • OSCP Journey
    • HTB
      • HTB Linux Boxes
      • HTB Windows Boxes
  • Write-Ups
    • TCM Security
      • Practical Ethical Hacking
        • Networking Refresher
        • The Ethical Hacker Methodology
        • Information Gathering (Reconnaissance)
        • Scanning & Enumeration
        • Vulnerability Scanning with Nessus
        • Exploitation Basics
        • New Capstone
        • Active Directory (AD)
          • AD Overview
          • AD Lab Build
          • Attacking AD: Initial Attack Vectors
          • Attacking AD: Post-Compromise Enumeration
          • Attacking AD: Post-Compromise Attacks
          • We've Compromised the Domain - Now What?
          • Additional AD Attacks
          • AD Case Studies
        • Post Exploitation
        • Web Application Enumeration, Revisited
        • Find & Exploit Common Web Vulnerabilities
        • Wireless Penetration Testing
        • Legal Documents and Report Writing
      • Open-Source Intelligence (OSINT)
    • Hacking Challenges
      • OTW
        • Bandit
          • Level 0
          • Level 0 → 1
          • Level 1 → 2
          • Level 2 → 3
          • Level 3 → 4
          • Level 4 → 5
          • Level 5 → 6
          • Level 6 → 7
          • Level 7 → 8
          • Level 8 → 9
          • Level 9 → 10
          • Level 10 → 11
          • Level 11 → 12
          • Level 12 → 13
          • Level 13 → 14
          • Level 14 → 15
          • Level 15 → 16
          • Level 16 → 17
          • Level 17 → 18
          • Level 18 → 19
        • Natas
        • Leviathan
        • Krypton
        • Narnia
        • Behemoth
        • Utumno
        • Maze
        • Vortex
        • Manpage
        • Drifter
        • FormulaOne
      • THM
  • Research
  • Resume
Powered by GitBook
On this page
  • Level Goal
  • Write-Up
  • Lessons Learned

Was this helpful?

  1. Write-Ups
  2. Hacking Challenges
  3. OTW
  4. Bandit

Level 5 → 6

PreviousLevel 4 → 5NextLevel 6 → 7

Last updated 7 months ago

Was this helpful?

Level Goal

The password for the next level is stored in a file somewhere under the inhere directory and has all of the following properties:

  • human-readable

  • 1033 bytes in size

  • not executable

Write-Up

  1. Find the file matching the specific criteria:

find inhere -type f -readable -size 1033c ! -executable
  • find inhere: Start searching in the 'inhere' directory

  • -type f: Look for regular files

  • -readable: Find human-readable files

  • -size 1033c: Look for files exactly 1033 bytes in size

  • ! -executable: Exclude executable files

This command reveals .file2 as the only file meeting all requirements.

  1. Display the content of the identified file:

cat $(find inhere -type f -readable -size 1033c ! -executable)
  • cat: Command to display the content of a file

  • $(): Command substitution. It allows the output of a command to be used as an argument for another command

Or

cat inhere/maybehere07/.file2

This outputs the password: HWasnPhtq9AVKe0dmk45nxy20cvUa6EG

  1. Access the next level:

ssh bandit6@bandit.labs.overthewire.org -p 2220

Enter the password when prompted.

Lessons Learned

  • The find command can search based on multiple criteria simultaneously

  • File attributes like size and permissions can be used as search parameters

  • Command substitution ($()) allows for combining commands efficiently

  • Hidden files (starting with .) can contain important information

-- Othmane

find inhere -type f -readable -size 1033c ! -executable
cat $(find inhere -type f -readable -size 1033c ! -executable)
cat inhere/maybehere07/.file2