Bandit Level 1
Bandit 1
We just got the password for level one and are now logging in. I got sick of PuTTY and VM'ed kali really quickly.
Remember the syntax to connect is "ssh <user@host> -p <port#>" For levels 1-2 of bandit these are our instructions...
Okay so now what?
We list stuff here with "ls" and see the file. When using the cat command to display that file we use "./" before our file name, this tells the cat command to look in our current working directory. The tac "-" symbol is a character that indicates a switch for commands. The CLI wouldn't know what we are asking it to do if we just used "cat -" and question us, unless we specify the full file path or put quotations around the tac symbol.
Both solutions would work, as we move on, remember there are more solutions possible than the one's I show. Nobody cares how you pwn a system they just care that you did.
Glowfish Contrast
We just got the password for level one and are now logging in. I got sick of PuTTY and VM'ed kali really quickly.
root@kali:~# ssh bandit1@bandit.labs.overthewire.org -p 2220
The authenticity of host '[bandit.labs.overthewire.org]:2220 ([176.9.9.172]:2220)' can't be established.
ECDSA key fingerprint is SHA256:SCySwNrZFEHArEX1cAlnnaJ5gz2O8VEigY9X80nFWUU.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[bandit.labs.overthewire.org]:2220,[176.9.9.172]:2220' (ECDSA) to the list of known hosts.
_ _ _ _
| |__ __ _ _ __ __| (_) |_
| '_ \ / _` | '_ \ / _` | | __|
| |_) | (_| | | | | (_| | | |_
|_.__/ \__,_|_| |_|\__,_|_|\__|
a http://www.overthewire.org wargame.
bandit1@bandit.labs.overthewire.org's password:
Welcome to Ubuntu 14.04 LTS (GNU/Linux 4.4.0-71-generic x86_64)
* Documentation: https://help.ubuntu.com/
The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.
bandit1@bandit:~$
Remember the syntax to connect is "ssh <user@host> -p <port#>" For levels 1-2 of bandit these are our instructions...
Level Goal
The password for the next level is stored in a file called - located in the home directoryCommands you may need to solve this level
ls, cd, cat, file, du, findOkay so now what?
bandit1@bandit:~$
bandit1@bandit:~$ ls
-
bandit1@bandit:~$ cat ./-
CV1DtqXWVFXTvM2F0k09SHz0YwRINYA9
bandit1@bandit:~$
We list stuff here with "ls" and see the file. When using the cat command to display that file we use "./" before our file name, this tells the cat command to look in our current working directory. The tac "-" symbol is a character that indicates a switch for commands. The CLI wouldn't know what we are asking it to do if we just used "cat -" and question us, unless we specify the full file path or put quotations around the tac symbol.
bandit1@bandit:~$ cat "-"
CV1DtqXWVFXTvM2F0k09SHz0YwRINYA9Both solutions would work, as we move on, remember there are more solutions possible than the one's I show. Nobody cares how you pwn a system they just care that you did.
Comments
Post a Comment