Level Goal

a program is running automatically at regualr intervals from cron, the time-based job scheduler. look in /etc/cron.d/ for the configuration and see what command is being executed

Solution

first we ls(1) the directory that contain the system wide crontab files, usually they are located in /etc/cron.d/ and /etc/crontab/ directories, and can be edited only by the system administrator

let’s cat(1) the contents of the file cronjob_bandit22

the @reboot in the first line is a predefined macro that it means run the specified task at the system startup while, while the five asterisks in the second line means run the specified task every minute of every day of every week of every month of every year.

let’s cat(1) the file /usr/bin/cronjob_bandit22.sh

well, it’s a bash script that cat(1) the password for user bandit22 to a file readable by other users.

let’s cat(1) that file

the file contains next level’s password, so we are done!.