Level 6

The password for the next level is stored somewhere on the server and has all of the following properties:

  • owned by user bandit7
  • owned by group bandit6
  • 33 bytes in size
bandit6@bandit:~$ find / -user bandit7 -group bandit6 -size 33c 2>/dev/null
/var/lib/dpkg/info/bandit7.password
bandit6@bandit:~$ cat /var/lib/dpkg/info/bandit7.password
<PASSWORD>
bandit6@bandit:~$ ssh bandit7@localhost
bandit7@localhost's password:

Level 7

The password for the next level is stored in the file data.txt next to the word millionth

bandit7@bandit:~$ ls
data.txt
bandit7@bandit:~$ cat data.txt | grep millionth
millionth       <PASSWORD>
bandit7@bandit:~$ ssh bandit8@localhost
bandit8@localhost's password:

Level 8

The password for the next level is stored in the file data.txt and is the only line of text that occurs only once

bandit8@bandit:~$ ls
data.txt
bandit8@bandit:~$ cat data.txt | sort | uniq -c | grep "1 "
      1 <PASSWORD>
bandit8@bandit:~$ ssh bandit9@localhost
bandit9@localhost's password:

Level 9

The password for the next level is stored in the file data.txt in one of the few human-readable strings, beginning with several ‘=’ characters.

bandit9@bandit:~$ ls
data.txt
bandit9@bandit:~$ strings data.txt | grep ^=====
========== theP`
========== password
========== <PASSWORD>
bandit9@bandit:~$ ssh bandit10@localhost
bandit10@localhost's password:

Level 10

The password for the next level is stored in the file data.txt, which contains base64 encoded data

bandit10@bandit:~$ ls
data.txt
bandit10@bandit:~$ cat data.txt
VGhlIHBhc3N3b3JkIGlzIElGdWt3S0dzRlc4TU9xM0lSRnFyeEUxaHhUTkViVVBSCg==
bandit10@bandit:~$ cat data.txt | base64 -d
The password is <PASSWORD>
bandit10@bandit:~$ ssh bandit11@localhost
bandit11@localhost's password:

Continue to OverTheWire Bandit Levels 11-15