Description

The password for bandit15 can be retrieved by submitting the current level’s password to port 30000 on localhost.

Overview

• nc (netcat) opens a raw TCP connection to a host and port.
• Sending the current password over the connection retrieves the next one.

Solution

connecter = ssh.connect_remote("127.0.0.1", 30000)
connecter.sendline(current_password.encode())
result = connecter.recv().decode().strip().splitlines()[-1]

Password

jN2kgmIXJ6fShzhT2avhotn4Zcka6tnt