Level Goal

A program is running automatically at regular intervals from cron, the time-based job scheduler. Look in /etc/cron.d/ for the configuration and see what command is being executed.

Solution

Password: Yk7owGAcWjwMVRwrTesJEwB7WVOiILLI

Alright. Let’s check out cron.

Another script is running. Let’s check it out.

Okay. It’s similar to the last level, but the file in the tmp directory is now obscured behind a function.

We know that the user running this cronjob is bandit23. So we should be able to get the filename just by substituting $myname with bandit23. Let’s see what we get.

Let’s use command substitution to read this file.

Riveting.