Hi.
Currently, we are in Banda 21, and if you're on that list, as you can see, there is nothing here.
So we want to go to 22 and I'm going to open the tips for that.
So here you go.
It says that the program is running automatically at regular intervals from Chrom, the time based job
scheduler.
So if you have never heard about Chrom before Tinkham as like a background service that is running over
there in a given period of time.
So we have to look into it, see Kirundi in order to see the configuration for that Chron and see what
it does.
So basically, if you want callisthenics or any other Linux versions to run a background jump that does
something in a given period of time, then you should actually have a current job.
This is exactly what this so let me show you.
I'm going to go into KDDI at Sea Kirundi, as it's instructed over here.
If you're on Al-Saleh, you can see that we have some crohn jobs.
So these are all jobs that run in a certain period of time.
We don't know whether it's running like every day or every hour, every minute.
We don't know that yet.
We're going to see what they do and we will try to get a password for the next level from them.
So over here, it says that you look at the configuration and see what it does show.
I'm going to try and get this distance.
So I'm going to catch the first one, which has been the 15 route.
And as you can see, it's owned by the route and it's actually running this as H and it's saving the
output into there now, which is nothing.
OK, so it's actually erasing getting rid of the output, but it's actually running this S.H. file.
So maybe if we can find DSH file this Besch script, we can get a lead over there.
However, we're trying to go into Bendit 22, so I'm going to get that one as well.
And as you can see, that that is the same thing, actually.
So this is owned by Bendit 22.
And over here we see Bendat 22, that S.H. as well.
So there's been the twenty two.
S.H. might actually give us the lead that we are looking for.
So Bendit 15.
Maybe it has something to do with the level 15, but we passed that right.
So we don't need that anymore.
So I'm going to focus on this band, the 22 S.H. and see if we can get something out of it.
So Bendit 17.
I believe there was something in the band 17 as well.
But again, we we can just go along and just deal with the other ones from now on.
So let's go and chat this Bendit 20 to MSH user bin Cronje up and then the 22 that H and no such file
or directory.
Yeah, here you go.
I believe I misspelled the Cronje up rather than Cronje up.
I actually have written Bruinooge up, so make sure you get that right.
Right that again and try to just get this out.
So here you go.
Let me just copy it from here or just, just change the beat to see like that.
And here you go.
So this is a bad script.
So this is the Shabangu and it changes something.
It changes a permission of a temporary file.
So as you can see, this is a temporary file.
At least it's in the copy directory.
It changes the permission to six four four.
OK, so we have done that before, as you might remember.
And later on it Katsuta at Seben the password for Bendit twenty two, which is what we are looking for
and also saves the output to that particular file that has been created before.
So it's pretty easy.
I believe it gets the Bendit Pass.
So if we get this temp file over there, just copy and paste it.
You cannot write this.
It's too long.
Let me come over here and paste this election.
We can get the password because it has been read by the band, the twenty two user, and also it has
been saved in the temp directory that that particular file.
Right.
So I'm going to copy this and come over here and then I know my password, the.
And just save it over there, so I'm going to pace this and just ride level 22 like that, so far so
good.
So it actually, as you can see, this was related to grown jobs, but we haven't done so much with
the grown ups yet.
I believe the upcoming lectures will be on Crohn jobs as well, since we have seen Kronur Bandit 23,
24 and 25 over there as well.
So let's see if this is really the case over there.
So I'm going to open the 22 to 23.
Here you go.
So a program is running automatically.
Again, we have a current job.
OK, so it says I look at in at secondees.
So the same thing.
I'm going to go directly into it secondees, OK?
And I'm going to run Al-Saleh.
So we're going to see same things one more time.
But this time I believe we have to focus on Kronur Bandit 23.
So I'm going to catch this thing.
Cronje Up Bandit 23.
And here you go.
We have the best script one more time, so I'm going to get this one and see what it does.
OK, so I'm going to cut and paste selection over here.
So here you go.
An interesting one.
So this is the best script one more time.
It starts with Shabangu and it does something different.
So this particularly stands for the Shabangu.
So it says that this is a bad script.
OK, so even without it, it will be fine.
But we generally place that in order to say that this is a bad script to the users.
So apparently it runs.
Who am I?
And as you can see, if we were on the way, my it gives the current user, which has been the 22,
so it makes my equal to a variable called my name.
So if you know any programming languages, I hope you do at least Python or something like that.
You know what a variable is.
So my name is a variable that holds the value of who am I at this point?
And then my target is Disvalue Echo.
I am user my name.
So Echo means print it out and I am user.
My name is the Wanita at this point and it pipes it to the fivesome later on it cuts said it's formatted
a little bit so maybe you don't know how to work with these commands.
Maybe you haven't worked it before.
But let me just continue for right now and then it echoes the password thingee.
It says that password file Etsi Bendit pass my name to Tempy, my target.
So as you might have understand by now, it actually copies the current user's password to attempt folder
into a file that we don't know yet.
And that file can be inferred from the my target variable.
So if we can calculate the value of the my target's variable, then we can just cut it out, right?
So all we have to do is just understand how to actually calculate is my target and we can do that in
the terminal.
You don't have to know everything about it because we know the my name, my name variable will be equal
to Bendit.
Twenty three.
Remember this will be called by the Bendit twenty three and it couldn't find the command.
So let me just try it like this.
Yeah, it hasn't been defined.
I believe we have to lose the spaces.
You're going to have to write my name Eco's to Bendit.
Twenty three without any spaces like this banded twenty three.
Yep it worked.
So right now if I write another sign my name as you can see dollar sign my name gives me the banded
twenty three right now of course it says that command not font because there is no comment such as bandha
twenty three.
But we managed to assign this to the banded twenty three.
Now if I copied this ok and if I pasted over here then my name is already defined by us.
Now it's going to actually echo this, it's going to actually print this out so that we can see the
value of my target.
And here you go.
This is the value of my target variable.
So I know what is going to be my target and it will copy the current password to the Tempy folder in
that file.
Here you go.
Now we know the file name, so it's kind of a puzzle as you can.
You see, and it's very interesting, so I'm going to cut that out and if I hit enter, here you go.
This is the password for the next level.
So I'm going to copy this.
OK, I'm going to exit out of that one and I'm going to say Gene to 23 and then I'm just going to come
over here, enter and just tried that.
Let me come over here and paste the selection and hit enter.
And here you go.
We are inside of Bendit 23.
I'm going to take a note of that as well.
I'm going to paste over here as a level two and three.
Great.
We managed to make it into the level 23.
We have, I believe, 10 to go.
So I'm going to stop here and continue within the next one with level 24.