Security/CTF

Bandit Level 4 → Level 5 [4/34]

LimSeongHyeon 2025. 5. 27. 23:24
 

OverTheWire: Level Goal

We're hackers, and we are good-looking. We are the 1%. <!-- Please read and accept the Rules! --> Level Goal The password for the next level is stored in a hidden file in the inhere directory. Commands you may need to solve this level ls , cd , cat , file

overthewire.org

 

The password for the next level is stored in the only human-readable file in the inhere directory. Tip: if your terminal is messed up, try the “reset” command.

 

 

마찬가지로 ls -la를 시전한다.

bandit4@bandit:~$ ls -la
total 24
drwxr-xr-x  3 root root 4096 Apr 10 14:23 .
drwxr-xr-x 70 root root 4096 Apr 10 14:24 ..
-rw-r--r--  1 root root  220 Mar 31  2024 .bash_logout
-rw-r--r--  1 root root 3771 Mar 31  2024 .bashrc
drwxr-xr-x  2 root root 4096 Apr 10 14:23 inhere
-rw-r--r--  1 root root  807 Mar 31  2024 .profile

 

 

"hidden file in the inhere directory."라고 했으니 inhere로 들어가서 확인해보자.

bandit4@bandit:~$ cd inhere/
bandit4@bandit:~/inhere$ ls -la
total 48
drwxr-xr-x 2 root    root    4096 Apr 10 14:23 .
drwxr-xr-x 3 root    root    4096 Apr 10 14:23 ..
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file00
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file01
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file02
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file03
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file04
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file05
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file06
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file07
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file08
-rw-r----- 1 bandit5 bandit4   33 Apr 10 14:23 -file09

 

 

주어진 command list가 ls, cd, cat, file, du, find 이렇게 있는데 데이터를 확인하는 명령어는 cat 밖에 없으므로 높은 확률로 데이터 형태는 텍스트지 않을까 싶다.

bandit4@bandit:~/inhere$ file ./-file*
./-file00: PGP Secret Sub-key -
./-file01: data
./-file02: data
./-file03: data
./-file04: data
./-file05: data
./-file06: data
./-file07: ASCII text
./-file08: data
./-file09: data

 

 

혼자만 ASCII text인 녀석이 있어서 이걸 열어보자.

bandit4@bandit:~/inhere$ cat ./-file07
[PASSWORD]

 

정답~