본문 바로가기

개인 공부/Bandit

(8)
Bandit 30 ~ 32 Bandit 30 -> 31 1. There is a git repository at ssh://bandit30-git@localhost/home/bandit30-git/repo. The password for the user bandit30-git is the same as for the user bandit30. Clone the repository and find the password for the next level. ※ Bandit30 PW : xbhV3HpNGlTIdnjUrdAlPzc2L6y9EOnS ※ git tag : 특정 커밋을 태그해 두는 것 ※ git show [tag] : 태그된 내용을 확인 01. git clone을 통해 ssh://bandit30-git@localhost:222..
Bandit27 ~ 29(git) Bandit27 -> 28 1. There is a git repository at ssh://bandit27-git@localhost/home/bandit27-git/repo. The password for the user bandit27-git is the same as for the user bandit27. Clone the repository and find the password for the next level. ※ git clone [REPO git 주소] : git의 저장소를 복제해오는 명령어 ※ badnit27 PW : YnQpBuifNMas1hcUFk70ZmqkhUU2EuaS 01. git clone을 활용해서 bandit27-git/repo 다운로드 bandit27@bandit:/t..
Bandit 24 ~ 26 Bandit24 -> 25 1. A daemon is listening on port 30002 and will give you the password for bandit25 if given the password for bandit24 and a secret numeric 4-digit pincode. There is no way to retrieve the pincode except by going through all of the 10000 combinations, called brute-forcing. You do not need to create new connections each time ※ Bruteforce Attack (무작위 대입공격) : 비밀번호를 0~9, a-z, A-Z, 특수문자..
Bandit 21 ~ 23 Bandit21 -> 22 1. A program is running automatically at regular intervals from cron, the time-based job scheduler. Look in /etc/cron.d/ for the configuration and see what command is being executed. ※ cron : 스케줄링 프로그램(/etc/cron.d) * * * * * *(분(0~59) 시간(0~23) 일(1~31) 월(1~12) 요일(1-6:월~토(일:0,7))) 01. /etc/cron.d에서 스캐줄된 파일 찾는다 bandit21@bandit:/etc/cron.d$ ls cronjob_bandit15_root cronjob_bandit23 e2..
Bandit 17 ~ 20 Bandit17 -> 18 1.There are 2 files in the homedirectory: passwords.old and passwords.new. The password for the next level is in passwords.new and is the only line that has been changed between passwords.old and passwords.new NOTE: if you have solved this level and see ‘Byebye!’ when trying to log into bandit18, this is related to the next level, bandit19 ※ cmp, diff, diff3, comm cmp : 두 파일을 비교하는..
Bandit 13 ~ 16 Bandit13->14 1.The password for the next level is stored in /etc/bandit_pass/bandit14 and can only be read by user bandit14. For this level, you don’t get the next password, but you get a private SSH key that can be used to log into the next level. Note: localhost is a hostname that refers to the machine you are working on ※암호 알고리즘 --> 무결성을 지키기위해 사용! 양방향 암호 알고리즘 : 키를 통해 암호화를 시킬 수 있고 복호화도 시킬 수 있다..
Bandit 7 ~ 12 2023.04.03 - [Bandit] - Bandit(0 ~ 7) Bandit(0 ~ 7) URL : https://overthewire.org/wargames/bandit/ SSH Port : 2220 OS : kali-linux-2022.1-installer-amd64.iso Bandit 0 -> 1 1. The goal of this level is for you to log into the game using SSH. The host to which you need to connect is bandit.labs.overthewire.or jisu069.tistory.com URL : https://overthewire.org/wargames/bandit/ SSH Port : 2220 OS : k..
Bandit(0 ~ 6) URL : https://overthewire.org/wargames/bandit/ SSH Port : 2220 OS : kali-linux-2022.1-installer-amd64.iso Bandit 0 -> 1 1. The goal of this level is for you to log into the game using SSH. The host to which you need to connect is bandit.labs.overthewire.org, on port 2220. The username is bandit0 and the password is bandit0. Once logged in, go to the Level 1 page to find out how to beat Leve 2. T..