Bandit level 12

Connect to the server:

ssh -p 2220 bandit12@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit12

cd /tmp
mkdir example
cd
cp data.txt /tmp/example

Here we're moving to the /tmp directory and creating a sub-directory called example, then copying the file to /tmp/example.

file data.txt

file => checking what kind of file data.txt is

xxd -r data.txt > data

xxd -r => reversing the hex data back to the binary form

The > operator => redirects the data output to a new file

xxd -r data.txt > data => reversing the hex data back to the binary form and put the binary form to a new file called data.

file data

When we're checking the file data again, we're gonna find out that the data was a gzip compressed data. So for the next step we gonna change the name to data.gz so that we can decode the data using gzip.

mv data data.gz

mv => move (rename) files

mv data data.gz => we're changing the files name from data to data.gz

gzip -d data.gz

gzip -d = decode the gzip's data.

file data

when we check the file type again we'll find out that it was a bzip2 data. Now, we just need to rename the file again to data.bz - in order to use bzip2 to decode the data.

mv data data.bz
bzip2 -d data.bz

we're changing the data's name and using bzip2 -d to decode the data

So, u'll notice that if we use the file data again, it will says that its a gzip compressed data again. So because i think i already show you how to decode it, you can just do it all over again.

when you use file data again and you reached the data : POSIX tar achive (GNU), you can decode it using this command. Dont forget to change the file to tar datatype

mv data data.tar
tar xf data.tar

Basically, we're extracting the contents of the data.tar archive.

tar => The command used to manage archive files.

x => Extracts the contents of the archive.

f => Tells tar that the next argument specifies the archive filename.

data.tar => The archive file we want to extract.

At the end, after reaching the climax of this repetitive task. When you use file data, its gonna shows you that the data : ASCII text. That's when we finally finished our job and can just use cat command to display the password.

“The Moment You Think of Giving Up, Think of the Reason Why You Held on So Long.” ~ Natsu Dragneel, Fairy Tail

Bandit level 6

Connect to the server:

ssh -p 2220 bandit6@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit6

The question said that the password is stored somewhere in the next level, so i started finding from the root (/)

find / -user bandit7 -group bandit6 -size 33c

we find out that the password is located in /var/lib/dpkg/info/bandit7.password

so we just need to display it

cat /var/lib/dpkg/info/bandit7.password

Bandit level 7

Connect to the server:

ssh -p 2220 bandit7@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit7

grep "millionth" data.txt

grep => use to search for specific keywords

Bandit level 8

Connect to the server:

ssh -p 2220 bandit8@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit8

sort data.txt | uniq -u

sort => use to sort a file

uniq => detect multiple line from a file

uniq -u => uniq -unique, detect the only string that's not repeated

Bandit level 9

Connect to the server:

ssh -p 2220 bandit9@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit9

sort data.txt | grep -a "===="

grep -a => process a binary file as if it were text

Bandit level 10

Connect to the server:

ssh -p 2220 bandit10@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit10

base64 -d data.txt

base64 => encode or decode file or, standard input to standard output

base64 -d => decode data

Bandit level 11

Connect to the server:

ssh -p 2220 bandit11@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit11

tr 'A-Za-z' 'N-ZA-Mn-za-m' <<< "Gur cnffjbeq vf TEBbmJCB8DlA0zTewHxVQ0JPLxMvDkeA"

tr => translate or delete character

A-Z:a-z, N-Z:A-M, n-z:a-m => so this is what we called rot13, its replace the char with the 13th letter after it. This translated as A-Z same as a-z, N-Z same as A-M, n-z same as a-m.

• “I’ve been facing adversity from the day I was born! No matter how many of you there are, or what happens, I’ll overcome it all.”

My Goat Asta from Black Clover

Bandit0

Connect to the server:

ssh -p 2220 bandit0@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit0

ls

listing files and sub-directory located in the directory

cat readme

cat : command commonly used to display file's content

displaying the content of file name's readme

Bandit1

Connect to the server:

ssh -p 2220 bandit1@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit1

ls

listing files and sub-directory located in the directory

cat ./-

cat : command commonly used to display file's content

using ./ = current directory

so cat ./- => displaying the content of "-" located in the current directory

Bandit2

Connect to the server:

ssh -p 2220 bandit2@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit2

ls

listing files and sub-directory located in the directory

cat ./"--spaces in this filename--"

cat : command commonly used to display file's content

using "" => the inside of the double column is the file name

Bandit3

Connect to the server:

ssh -p 2220 bandit3@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit3

cd inhere

change directory to inhere

ls -a

listing all files and sub-directory located in the directory

cat "...Hiding-From-You"

cat : command commonly used to display file's content

Bandit4

Connect to the server:

ssh -p 2220 bandit4@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit4

cd inhere

change directory to inhere

cat ./-file07

display it manually

Bandit5

Connect to the server:

ssh -p 2220 bandit4@bandit.labs.overthewire.org

using secure shell to connect to bandit.labs.overthewire.org through port 2220 with the username : bandit4

cd inhere

change directory to inhere

find -readable -size 1033c

find = command to find a file with certain requirement

-readable = readable file

-size 1033c => size 1033 byte

so find -readable -size 1033c => find readable file with the size of 1033 byte

"No one knows what the future holds, that's why its potential is infinite." ~My Goat => Okabe Rintarou (Hoouin Kyouma)