Bandit Level 16 → Level 17

So we can use nmap (Network Mapper) to scan for open ports in the range of 31000 to 32000, and we can use a script to tell us which port has ssl certificate:

nmap localhost -p 31000-32000 --script ssl-cert

We have 5 open ports, but two with ssl cert, I tested the first one but it did not give me anything, so our answer is in the second port with ssl:

ncat --ssl localhost 31790
	<Password>

We got the RSA key for the next user.