OverTheWire: Bandit [1-14]

Event
1

https://overthewire.org/wargames/bandit/

lynx https://overthewire.org/wargames/bandit/

0

ssh bandit0@bandit.labs.overthewire.org -p 2220

ZjLjTmM6FvvyRnrb2rfNWOZOTa6ip5If

1

cat ./-

263JGJPfgU6LtdEvgfWU1XP5yac29mFx

2

cat "spaces in this filename"

MNk8KNH3Usiio41PRUEoDFPqfxLPlSmx

3

cat ./inhere/...Hiding-From-You

2WmrDFRmJIq3IPxneAaMGhap0pFhF3NJ

4

file ./inhere/-*
cat ./inhere/-file07

4oQYVPkxZOOEOO5pTW81FB8j8lxXGUQw

5

find -type f -size 1033c
cat ./inhere/maybehere07/.file2

HWasnPhtq9AVKe0dmk45nxy20cvUa6EG

6

find / -user bandit7 -group bandit6 -size 33c 2>/dev/null
cat $(find / -user bandit7 -group bandit6 -size 33c 2>/dev/null)

morbNTDkSW6jIlUc0ymOdMaLnOlFVAaj

7

grep 'millionth' data.txt

dfwvzFQi4mU0wfNbFOe9RoWskMLg7eEc

8

cat data.txt | sort | uniq -u

4CKMh1JI91bUIZZPXDqGanal4xvAg0JM

9

strings data.txt | grep '=='

FGUW5ilLVJrxX9kMYMmlN4MgbpfMiqey

10

cat data.txt | base64 -d

dtR173fZKb0RRsDFSGsg2RWnpNVj3qRr

11

cat data.txt | tr 'a-zA-Z' 'n-za-mN-ZA-M'
The password is 7x16WNeHIi5YkIhWsfFIqoognUTyj9Q4

12

   31  xxd -r dump.hex 0
   33  file 0 
   35  gzip -d 0
   37  mv 0 1
   38  ls
   39  zcat -d 1
   40  zcat -d 1 > 2
   41  ls
   42  file 2 
   44  bzcat -d 2 > 3
   45  file 3 
   46  zcat -d 3 > 4
   47  file 4
   54  tar xvf 4
   56  file data5.bin 
   57  tar xvf data5.bin
   58  file data6.bin 
   61  bzcat -d data6.bin > 7
   63  file 7
   64  tar xvf 7
   65  file data8.bin 
   67  zcat -d data8.bin > 9
   68  file 9
   69  cat 9

FO5dwFsc0cbaIiH0h8J2eUks2vdTDwAn

13

ssh -i sshkey.private bandit14@localhost -p 2220
cat /etc/bandit_pass/bandit14

MU4VWeTyJk8ROof1qqmcBPaLh7lDCPvS

14

nc localhost 30000
MU4VWeTyJk8ROof1qqmcBPaLh7lDCPvS
Correct!

8xCjnmgoKbGLhHFAZlGE5Tmu4M2tKJQo

2 Likes