Bandit Level 13

Goal: Find the password and log into level 14. Use the ssh private key to log into bandit 14 and get the next password.

When we use ls we can see the private key to authenticate with ssh in the sshkey.private file. We can use a similar ssh login as we normally do for other levels with the difference being we will log in with the hostname @localhost as we are already on the machine we want to log onto. Additionally, we will use the -i flag which allows us to specify our own private key.

ssh bandit14@localhost -p 2220 -i sshkey.private

This should allow us to log in without a password as we are using private key authentication. However, we still do need to find the password for this level to solve it but we can do this by going into /etc/bandit_pass which is where every password is stored. Now all we need to do is simply print out the password.

bandit14@bandit:~$ cat /etc/bandit_pass/bandit14
MU4VWeTyJk8ROof1qqmcBPaLh7lDCPvS

Now we have our password for level 14 and we sign into the next level!