Bandit13

A very Important Note BANDIT passwords has been changed by the start of September so any blogpost posted before 1st of September you can just follow the steps but the passwords has been changed

bandit level13

ssh server: bandit.labs.overthewire.org port 2220

username: bandit13

password: fGrHPx402xGC7U7rXKDaxiWFTOiF0ENq

In this level we are requested to read the password from a file that located in the path /etc/bandit_pass/bandit14, the problem is that this file is read only by the user bandit14. So no one else bandit14 who has access to read this file

In the home directory for bandit13 there is a file named sshkey.private this file is owned by bandit14 and group bandit13 get access to read it.

This is the private key for user bandit14, So all we are going to do is to use it to connect to the server:

ssh -i  key.file.name bandit14@localhost -p 2220

this is the password for the next level bandit14
tell we meet there

Your comments and feedback are highly appreciated

Thank You