Challenge Information
Platform: OverTheWire
Wargame: Bandit
Levels: 00-33
Description: The Bandit wargame is aimed at absolute beginners. It teaches the basics needed to play other wargames.
High-Level Summary
| Level | Description |
|---|---|
| 00–04 | Basic Linux navigation and command-line skills |
| 05–06 | Searching for the password file with find |
| 07–08 | Searching for the password within a file |
| 09 | Searching for human-readable strings and processing them |
| 10 | Working with Base64-encoded data |
| 11 | Working with ROT13-encoded data |
| 12 | Working with repeatedly compressed and manipulated data |
| 13 | Using another user’s private SSH key |
| 14–15 | Communicating securely with local ports and services |
| 16 | Basic port scanning and secure communication with local ports and services |
| 17 | File modifications and differences |
| 18 | Bypassing the automatic logout feature |
| 19–20 | Working with setuid binaries |
| 21–23 | Working with scheduled tasks |
| 24 | Writing a PIN code brute-forcing script and connecting to a local daemon |
| 25 | Breaking out of the Vi text editor |
| 26 | Using a binary with SUID permissions for privilege escalation |
| 27–28 | Working with Git repositories |
| 29 | Working with Git branches |
| 30 | Working with Git tags |
| 31 | Uploading data to a Git repository |
| 32 | Breaking out of the uppercase shell |
| 33 | Checking the goodbye message |
Table 1 - Objectives throughout the different levels
Notes
Throughout this walkthrough series, the words password and flag are used interchangeably.
Basic Concept
We complete level x to advance to level x+1.
SSH Connection Details
- Host:
bandit.labs.overthewire.org - Port: 2220
The general SSH connection command follows this format, where x represents the current level number:
ssh [email protected] -p 2220
Listing 1 - Connecting to the Bandit wargame labs via SSH