Over the Wire’s Bandit Challenge – Level 13
Level Instructions:
“The password for the next level is stored in /etc/bandit_pass/bandit14 and can only be read by user bandit14. For this level, you don’t get the next password, but you get a private SSH key that can be used to log into the next level. Note: localhost is a hostname that refers to the machine you are working on.”
bandit13@bandit:~$ ls -la
total 24
drwxr-xr-x 2 root root 4096 Dec 28 2017 .
drwxr-xr-x 42 root root 4096 Jul 22 18:42 ..
-rw-r--r-- 1 root root 220 Sep 1 2015 .bash_logout
-rw-r--r-- 1 root root 3771 Sep 1 2015 .bashrc
-rw-r--r-- 1 root root 655 Jun 24 2016 .profile
-rw-r----- 1 bandit14 bandit13 1679 Dec 28 2017 sshkey.private
bandit13@bandit:~$ ssh -i ./sshkey.private bandit14@localhost
In level 13, as instructed, we are not provided with a password to access bandit14. We are, however, provided with the private ssh key which can be used in lieu of a login password by passing the switch ‘-i [location of private ssh key]’