-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathBANDIT_TIPS
164 lines (118 loc) · 3.52 KB
/
BANDIT_TIPS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
/# DISCLAMMER BELOW MENTION ARE SOME TIPS AND KEY NOT FULL EXPLAINATORY SOLUTION
level 0-1
cat readme
NH2SXQwcBdpmTEzi3bvBHMM9H66vVXjL
level 1-2
cat < - or cat -- -
rRGizSaX8Mk1RTb1CNQoXTcYZWU6lgzi
level 2-3
cat "spaces in this filename" or cat spaces\ in\ this\ filename
aBZ0W5EmUfAf7kHTQeOwd8bauFJ2lAiG
level 3-4
cd inhere then cat .hidden
2EW7BBsr6aMMoJ2HjW067dm8EgX26xNe
level 4-5
cat < -file07
lrIWWI6bB37kxfiCQZqUdOIYfr6eEeqR
level 5-6
find ./* -type f -size 1033c ! -executable
cat .file
P4L4vucdmLnm8I7Vl7jG1ApGSfjYKqJU
level 6-7
find / -user bandit7 -group bandit6 -size 33c
find / -user bandit7 -group bandit6 -size 33c 2>/dev/null remove unwanted file from search
z7WtoNQU2XfjmMtWA8u5rN4vzqu4v99S
level 7-8
wc -l data.txt
grep "millionth" data.txt
TESKZC0XvTetK0S9xNwm25STk5iWrBvP
level 8-9
sort data.txt | uniq -u
EN632PlfYiZbn3PhVK3XOGSlNInNE00t
level 9-10
strings data.txt | grep -E "===+"
G7w8LIi6J3kTb8A7j9LgrywtEUlyyp6s
level 10-11
base64 -d data.txt
6zPeziLdR2RKNdNYFNb6nVCKzphlXHBM
LEVEL 11-12
cat data.txt | tr "a-zA-Z" "n-za-mN-ZA-M"
The password is JVNBBFSmZwKKOP0XbFXOoW8chDz5yVRv
level 12-13
gzip file bzip2 tar is used to decmopress it
The password is wbWdlBxEir4CaE8LaPhauuOo6pwRmrDw
level 13-14
ssh bandit14@localhost -i sshkey.private -p 2220
cat /etc/bandit_pass/bandit14
fGrHPx402xGC7U7rXKDaxiWFTOiF0ENq
level 14-15
nc localhost 30000
fGrHPx402xGC7U7rXKDaxiWFTOiF0ENq-previous password
jN2kgmIXJ6fShzhT2avhotn4Zcka6tnt-final password
level 15-16
openssl s_client localhost:30001
JQttfApK4SeyHwDlI9SXGR50qclOAil1
ssh -i b17.key bandit17@localhost -p2220
level 16-17
ssh -i b17.key bandit17@localhost -p2220
JQttfApK4SeyHwDlI9SXGR50qclOAil1
level 17-18
hga5tuuCLF6fFzUpnagiMN8ssu9LFrdg
level 18-19
ssh -t [email protected] -p 2220 cat readme
awhqfNnAbc1naukrpqDYcF95h7HoMTrC
level 19-20
./bandit20-do cat /etc/bandit_pass/bandit20
VxCazJaVykI6W36BkBU0mJTCM8rR95XT
level 20-21
nc -lp 5000 set listner in one terminal
./suconnect 5000 check pass and give next one
NvEJF7oVjkddltPSrdKEFOllh9V1IBcq
level21-22
WdDozAdTM2z9DiFEQ2mGlwngMfj4EZff
level 22-23
echo I am user bandit23 | md5sum | cut -d ' ' -f 1
QYw0Y2aiA672PsMmh9puTQuhoz8SyR2G
level 23-24
by reading script come to solution
VAfGXJ1PBSsPSnvsjI8p759leLZ9GGar
level 24-25
The password of user bandit25 is p7TaowMYrmu23Ol8hiZh9UvD0O9hpx8d
level25-26
/etc/passwd here we can see fronm where shell is launching
here more is used tool is used to see data
we create smaller window to not exit shell
cat /etc/bandit_pass/bandit26
c7GvcKlw9mC7aUQaPx7nwFstuAIBw1o1
level26-27
./bandit27-do cat /etc/bandit_pass/bandit27
YnQpBuifNMas1hcUFk70ZmqkhUU2EuaS
level 27-28
git clone ssh://bandit27-git@localhost:2220/home/bandit27-git/repo
The password to the next level is: AVanL161y9rsbcJIsFHuw35rjaOM19nR
level 28-29
git log to check logs of previous updation
go to previou update usng commet using git checkout comment
then reading README.md file
- username: bandit29
- password: tQKvmcwNYcFS6vmPHIUSI3ShmsrQZK8S
level 30-31
git branch -a checking diif branch found dev file
then check git checkout dev
- username: bandit30
- password: xbhV3HpNGlTIdnjUrdAlPzc2L6y9EOnS
level 31-32
git tag
git show tag
OoffzGDlzhAlerFJ2cAiz1D41JW1Mhmt
level 32-33
git add -f key.txt
git commit -m "Key.txt added"
git push origin master
by using this process we can create and push files
Well done! Here is the password for the next level:
remote: rmCBvG56y58BXzv98yZGdO7ATVL5dW8y
level 33
$o to invoke shell
cat /etc/bandit_pass/bandit33
odHo63fHiFqcWWJG9rLiLDtPm45KzUKy