Tuesday, July 25, 2017

WarGame - Bandit walk through level 0 - 10


War game is a concept where you can train your mind and improve your knowledge on hacking as well as to learn and practice your knowledge on Linux commands.Mainly these include the concepts of capture the flag logic behind it.You can also improve your password cracking skills , pentesting skills and many more other hacking techniques. I have provided a walk through on a game called Bandit . Hear you can proceed from one level to another.

Login to http://overthewire.org/wargames/  , hear you will be able to select the war game you want to play.


Select Bandit. In this war game there are 27 levels in which you have to complete one by one to proseed to the next level. Lets start with level zero.

Level 0

The goal of this level is for you to log into the game using SSH.Download Putty , we use putty as an SSH client on windows. Once done to connect to the host use the below details and login with the given credentials. 
Host name : bandit.labs.overthewire.org
Port           : 2220

Level 0 - 1


After login in use the ls  command to view all the directories .
Now you will find a readme file. You can read this by using the cat command.



Level 1 - 2

Login to level 1 using the above details .Now use again the ls command to find the - file and again use the cat command and get the password

Level 2 - 3

The password for the next level is stored in a file called "spaces in this filename". Use the cat command along with "" to get the password

Level 3 - 4

Password for the next level is stored in the file name inhere directory. You need to go in to the directory and check the directory by using the command ls -al  and get the password using the cat  command .

Level 4 - 5

The password for the next level is stored in the only human-readable file in the inhere directory. Tip: if your terminal is messed up, try the “reset” command.

Level  5 - 6

The password for the next level is stored in a file somewhere under the inhere directory and has all of the following properties:

  • * human-readable      * 1033 bytes in size  * not executable

    Use ls -l to view all the save items. Then use the find command with the required specifications.

Level  6 - 7

The password for the next level is stored somewhere on the server and has all of the following properties:
  • * owned by user bandit   * owned by group bandit6   * 33 bytes in size
  • Use the find command  with the above specifications

  • once you get the results use the cat  command to grab the password


Level  7 - 8

The password for the next level is stored in the file data.txt next to the word millionth



Next use the bellow command to get the password
 cat data.txt | grep millionth



Level  8 - 9

The password for the next level is stored in the file data.txt and is the only line of text that occurs only once

use the ls command to view the data.txt file. Next we need to find a unique line among many other details. For that use the below command and get the password.

cat data.txt | sort | uniqu -u



Level 9 - 10

The password for the next level is stored in the file data.txt in one of the few human-readable strings, beginning with several ‘=’ characters.

for this use the ls  command . Then use the below command to view the password.

string data.txt | grep '='


No comments:

Post a Comment

Test Images

Below images  are being used for the   Hashtag Generator and Content Authenticator research .