Bandit Level 3 to 4: Uncovering Dot-Prefixed Files

Introduction

After navigating tricky filenames, Bandit Level 3 to 4 introduces us to a core concept of Linux/Unix-like operating systems: hidden files. These files, often used for configuration, don’t show up in normal directory listings simply because their names begin with a dot.

This level will teach you how to look past the obvious and uncover the secrets hidden within a directory.

The Challenge: Level 3 Goal

The official goal on the OverTheWire website states:

The password for the next level is stored in a hidden file in the inhere directory.

The clues are clear: we need to find a directory named inhere and then find a hidden file inside it. In this case, the file is named ...Hiding-From-You.

Step-by-Step Walkthrough

Let’s find that hidden password.

Step 1: Log into bandit3

Use the password you acquired from the previous level to SSH into the bandit3 user.

ssh [email protected] -p 2220

Step 2: Find the inhere Directory

Once logged in, list the contents of the home directory to locate the inhere directory.

ls

You should see the inhere directory listed.

inhere

Step 3: Change Into the Directory

Now, navigate into the inhere directory using the cd (change directory) command.

cd inhere

Step 4: The Mystery of the Empty Directory

If you try listing the files with the standard ls command, it will look like the directory is empty.

ls

The command returns nothing. This is the core of the challenge. The file is hidden because its name starts with a . character.

Step 5: Reveal the Hidden File

In Linux, any file or directory that starts with a dot is considered hidden. To see these files, you must use the -a (all) flag with the ls command.

ls -a

The output will now show the hidden file, which normal ls did not.

.  ..  ...Hiding-From-You

We can see the file we’re looking for: ...Hiding-From-You. The . and .. entries represent the current and parent directories, respectively.

Step 6: Read the Password

Now that we know the filename, we can use the cat command to read its contents and get the password for the next level.

cat ...Hiding-From-You

The command will print the password for bandit4 to your terminal.

# yours might be different
2WmrDFRmJIq3IPxneAaMGhap0pFhF3NJ

Key Concepts Learned

1. Hidden Files (Dotfiles): Files and directories starting with a . are hidden from standard ls listings. This is a convention, not a security feature.
2. The ls -a Command: The -a or --all flag for the ls command is essential for viewing all entries in a directory, including hidden ones.
3. Directory Navigation: The cd command is a fundamental tool for moving through the filesystem.

Conclusion

Congratulations! You’ve successfully uncovered a hidden file and captured the password for bandit4. This skill is crucial, as you’ll often need to inspect or modify hidden configuration files when working with Linux systems.

Proceed to the next level with your newfound knowledge!