Level21

Level Goal

A program is running automatically at regular intervals from cron, the time-based job scheduler. Look in /etc/cron.d/ for the configuration and see what command is being executed.

Solution

If we look in the /etc/cron.d/ directory we see a cronjob_bandit22 file. Looking at this file we see that it executes the /usr/bin/cronjob_bandit22.sh script. Looking at that script we see that it is writing the contents of the /etc/bandit_pass/bandit22 file to a file in the /tmp directory that has world readable permissions. We can read the contents of this file to get the password for bandit22.