OverTheWire Bandit Level 3 → 4 tutorial!!

Login

Log in as bandit3 using the password you just obtained from Level 2 → 3.

ssh bandit3@bandit.labs.overthewire.org -p 2220
# password: MNk8KNH3Usiio41PRUEoDFPqfxLPlSmx

Why? Each Bandit level is a separate UNIX user. To solve 3 → 4, you must be the bandit3 user.

Task

The password for the next level is stored in a hidden file named ...Hiding-From-You inside the directory inhere in bandit3’s home.

A little bit of Theory

• Files are hidden if their name starts with a dot .. ...Hiding-From-You starts with a dot (actually three dots), so it’s hidden too.
• Use ls -a / ls -la to list all files, including hidden ones.

• The filename has no spaces; the hyphens are regular characters. You can still quote it to avoid typos:

  cat "...Hiding-From-You"
  

  or prefix with a path:

  cat ./...Hiding-From-You
  

• Relative vs absolute paths: ./...Hiding-From-You (current dir) vs /home/bandit3/inhere/...Hiding-From-You.

Further reading:

• Search: linux hidden files
• ls manual (man7.org)

Solution

1. Go to the inhere directory

   cd inhere
   

   Why? The challenge states the hidden file is inside inhere.

2. List everything (including hidden files)

   ls -la
   

   Why? Hidden files appear only with -a/-la. You should see ...Hiding-From-You.

3. Read the hidden file

   cat "...Hiding-From-You"
   # or
   cat ./...Hiding-From-You
   

   Why? Prints the password to the screen; quoting/path prefix prevents mistakes.

1. Copy the password (no extra spaces/newlines).

2. Log into the next level (bandit4)

   exit
   ssh bandit4@bandit.labs.overthewire.org -p 2220
   # paste the password you just found when prompted
   

Password

This is the password shown in my run; if yours differs, copy the one from your own terminal output.

2WmrDFRmJIq3IPxneAaMGhap0pFhF3NJ

Troubleshooting

• No such file or directory → Ensure you’re in inhere and the filename is exactly ...Hiding-From-You (three leading dots).
• Nothing appears with ls → Use ls -a/ls -la.
• Permission denied → Confirm you’re logged in as bandit3.

Congrats 🎉 You found the hidden file and can now play as bandit4.

Thanks for reading!

Until next time — Otsumachi!! 💖☄️✨