Sitemap
Sarfraz Masood

Sarfraz Masood

Linux Fundamentals

2 min readOct 11, 2024

--

Bandit

Level 0

ssh bandit0@bandit.labs.overthewire.org -p 2220
bandit0

https://us06web.zoom.us/j/83619966010?pwd=iyq0jlG08axsJ6115UiuOGquDIHLaH.1

Level 1

  1. go-to home directory
  2. ls command to read components of the directory
  3. use cat command on the readme.txt file
  4. pass : ZjLjTmM6FvvyRnrb2rfNWOZOTa6ip5If

Level 2

ssh bandit1@bandit.labs.overthewire.org -p 2220
  • ls command to read the dashed filename
  • since the dashed filename was also referring as an argument
cat ./-

Password : 263JGJPfgU6LtdEvgfWU1XP5yac29mFx

Level 3

ssh bandit2@bandit.labs.overthewire.org -p 2220
  • ls command
  • file had spaces in it
  • had to use “filename” to write
cat "spaces in this filename"

Password : MNk8KNH3Usiio41PRUEoDFPqfxLPlSmx

Level 4

ssh bandit3@bandit.labs.overthewire.org -p 2220
  • file is hidden
  • had to use “ls -a” command to find all the files in that directory
cat "...Hiding-From-You"

Password : 2WmrDFRmJIq3IPxneAaMGhap0pFhF3NJ

Level 5

ssh bandit4@bandit.labs.overthewire.org -p 2220
  • ls command
file ./-file*
  • files had raw data and only file07 had ASCII data

Get Sarfraz Masood’s stories in your inbox

Join Medium for free to get updates from this writer.

file ./-file07
  • Password : 4oQYVPkxZOOEOO5pTW81FB8j8lxXGUQw

Level 6

ssh bandit5@bandit.labs.overthewire.org -p 2220
cd inhere
ls
file ./maybehere*
find . -readable
find . -readable -size 1033c
  • Password : HWasnPhtq9AVKe0dmk45nxy20cvUa6EG

Level 7

ssh bandit6@bandit.labs.overthewire.org -p 2220
find / -type f -user bandit7 -group bandit6 -size 33c
/var/lib/dpkg/info/bandit7.password
  • Password : morbNTDkSW6jIlUc0ymOdMaLnOlFVAaj

Level 8

ssh bandit7@bandit.labs.overthewire.org -p 2220
strings data.txt | grep "millionth"
  • Password : dfwvzFQi4mU0wfNbFOe9RoWskMLg7eEc

Level 9

ssh bandit8@bandit.labs.overthewire.org -p 2220
sort data.txt | uniq -c
  • Password : 4CKMh1JI91bUIZZPXDqGanal4xvAg0JM

Level 10

ssh bandit9@bandit.labs.overthewire.org -p 2220
strings data.txt | grep "="
  • Password : FGUW5ilLVJrxX9kMYMmlN4MgbpfMiqey

Level 11

ssh bandit10@bandit.labs.overthewire.org -p 2220
base64 -d data.txt
  • Password : dtR173fZKb0RRsDFSGsg2RWnpNVj3qRr

Level 12

ssh bandit11@bandit.labs.overthewire.org -p 2220
  • Since the data.txt file had ciphered the text in it in ROT13 , we will use the following website to decipher it

https://gchq.github.io/CyberChef/#recipe=ROT13(true,true,false,13)

  • Password : 7k16JArUVv5LxVuJfsSVdbbtaHGlw9D4

Level 12

ssh bandit12@bandit.labs.overthewire.org -p 2220
  • Password :

--

--