Warning: This post contains a solution!
Only continue if:
1.) you want to see a possible alternative solution or
2.) you are stuck and need a hint!
Connect to the server using the following credentials:
The properties we know from the level goal are:
- owned by user bandit7
- owned by group bandit6
- 33 bytes in size
This can be used to parametrize the "find" command:
bandit6@bandit:~$ find / -user bandit7 -group bandit6 -size 33c
Append '2>/dev/null' to the command to get rid of the 'Permission denied' messages.
The result of this is:
bandit6@bandit:~$ find / -user bandit7 -group bandit6 -size 33c 2>/dev/null /var/lib/dpkg/info/bandit7.password
The file is located here: "/var/lib/dpkg/info/bandit7.password"
Output the content of this file:
bandit6@bandit:~$ cat /var/lib/dpkg/info/bandit7.password HKBPxxxxxxxxxxxxxxxxxxxxxxxxxxxx