Bandit 3 ( level 2->3 )
Last updated
Last updated
The password for the next level is stored in a file called spaces in this filename located in the home directory
ls , cd , cat , file , du , find
ssh into bandit2:
In this level we'll also be playing with a tricky file name. In this level, we have spaces (" ") in file name, as you'll see in the img1.
Of course we can not cat it ordinary, the spaces in a file name makes the shell think that they're a different files as I'll show you in the img2.
To solve this scenario, there are many ways. In this blog I'll be showing 2 ways of the solutions
You can use "" to cover the whole file name, like:
or,
Anytime you are writing the command, you can always press the tab button to let the shell helps you finish the command. In this case, I also used tab and it works !:
In img4, I wrote the command to the 'spaces' and then I stop and pressed TAB, giving me the result in img5. It works fine.
Anyway, as you can see, we captured our flag.
