Description

Same as bandit14 but port 30001 requires an SSL/TLS connection. Plain nc will not work; openssl s_client is needed.

Overview

• openssl s_client -connect host:port establishes an SSL/TLS handshake and then passes data interactively.
• -ign_eof keeps the connection open after stdin closes so the response can be read.

Solution

echo <password> | openssl s_client -connect localhost:30001 -ign_eof

• The response contains the password for bandit16 near the end.

Password

JQttfApK4SeyHwDlI9SXGR50qclOAil1