The next level involves getting the password from a hidden file inside the “inhere” directory. A little trip to the man pages will help us figure out what switches we need for listing hidden files.

bandit3@bandit:~$ ls
inhere
bandit3@bandit:~$ cd inhere/
bandit3@bandit:~/inhere$ ls -asl
total 12
4 drwxr-xr-x 2 root    root    4096 Jun 15 11:41 .
4 drwxr-xr-x 4 bandit3 bandit3 4096 Sep  6 21:32 ..
4 -rw-r----- 1 bandit4 bandit3   33 Jun 15 11:41 .hidden
bandit3@bandit:~/inhere$ cat .hidden
XXXXXXXXXXXXXXXXXXXX (actual password not shown)
bandit3@bandit:~/inhere$