As we progress further in the Bandit Challenge, Level 7 ↗️ presents us with a new challenge. Our objective is to locate a password file on the server that has specific ownership and size properties.
Level 7 challenges us to search for a password file on the server with specific ownership and size properties.
We need to find a file that is owned by the user “bandit7”, owned by the group “bandit6”, and has a size of 33 bytes.
By using commands such as
find we’ll navigate the file system, examine file attributes, and uncover the password.
Follow these steps to successfully solve Level 7:
Enter the password you obtained from the previous level.
Once logged in, navigate to the root directory using the
This command will change your working directory to the root directory.
To search for the password file with the specific ownership and size properties, use the
find command along with specific parameters:
This command will search for files owned by user
bandit7, owned by group
bandit6, and have a size of 33 bytes.
2>/dev/null portion redirects error messages to
/dev/null, preventing them from being displayed.
find command will display the path to the password file that meets the given criteria. Make a note of the path.
To view the contents of the password file and retrieve the password, use the
<path_to_password_file> with the actual path obtained from the previous step which was
/var/lib/dpkg/info/bandit7.password when I ran the command.
The password for Level 7 will be displayed in the output. Take note of it for the next level.
findcommand is useful for searching files based on specific criteria.
Congratulations on successfully completing Level 7 of the Bandit Challenge! By exploring the server and locating the password file that meets the ownership and size properties, we have obtained the password necessary to progress further.
Stay tuned for the next blog post, where we’ll take on Level 8 and face new challenges in our quest to become skilled cybersecurity practitioners.