Connect to the server using the following credentials:

Server: bandit.labs.overthewire.org
Port: 2220
Username: bandit6
Password: DXjZxxxxxxxxxxxxxxxxxxxxxxxxxxxx

The properties we know from the level goal are:

• owned by user bandit7- owned by group bandit6- 33 bytes in size

This can be used to parametrize the “find” command:

1

bandit6@bandit:~$ find / -user bandit7 -group bandit6 -size 33c

Append ‘2>/dev/null’ to the command to get rid of the ‘Permission denied’ messages.The result of this is:

1
2

bandit6@bandit:~$ find / -user bandit7 -group bandit6 -size 33c 2>/dev/null
/var/lib/dpkg/info/bandit7.password

The file is located here: “/var/lib/dpkg/info/bandit7.password“Output the content of this file:

1
2

bandit6@bandit:~$ cat /var/lib/dpkg/info/bandit7.password
HKBPxxxxxxxxxxxxxxxxxxxxxxxxxxxx