diff --git a/OverTheWire/Bandit/17.key b/OverTheWire/Bandit/17.key new file mode 100644 index 0000000..2a98544 --- /dev/null +++ b/OverTheWire/Bandit/17.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEogIBAAKCAQEAvmOkuifmMg6HL2YPIOjon6iWfbp7c3jx34YkYWqUH57SUdyJ +imZzeyGC0gtZPGujUSxiJSWI/oTqexh+cAMTSMlOJf7+BrJObArnxd9Y7YT2bRPQ +Ja6Lzb558YW3FZl87ORiO+rW4LCDCNd2lUvLE/GL2GWyuKN0K5iCd5TbtJzEkQTu +DSt2mcNn4rhAL+JFr56o4T6z8WWAW18BR6yGrMq7Q/kALHYW3OekePQAzL0VUYbW +JGTi65CxbCnzc/w4+mqQyvmzpWtMAzJTzAzQxNbkR2MBGySxDLrjg0LWN6sK7wNX +x0YVztz/zbIkPjfkU1jHS+9EbVNj+D1XFOJuaQIDAQABAoIBABagpxpM1aoLWfvD +KHcj10nqcoBc4oE11aFYQwik7xfW+24pRNuDE6SFthOar69jp5RlLwD1NhPx3iBl +J9nOM8OJ0VToum43UOS8YxF8WwhXriYGnc1sskbwpXOUDc9uX4+UESzH22P29ovd +d8WErY0gPxun8pbJLmxkAtWNhpMvfe0050vk9TL5wqbu9AlbssgTcCXkMQnPw9nC +YNN6DDP2lbcBrvgT9YCNL6C+ZKufD52yOQ9qOkwFTEQpjtF4uNtJom+asvlpmS8A +vLY9r60wYSvmZhNqBUrj7lyCtXMIu1kkd4w7F77k+DjHoAXyxcUp1DGL51sOmama ++TOWWgECgYEA8JtPxP0GRJ+IQkX262jM3dEIkza8ky5moIwUqYdsx0NxHgRRhORT +8c8hAuRBb2G82so8vUHk/fur85OEfc9TncnCY2crpoqsghifKLxrLgtT+qDpfZnx +SatLdt8GfQ85yA7hnWWJ2MxF3NaeSDm75Lsm+tBbAiyc9P2jGRNtMSkCgYEAypHd +HCctNi/FwjulhttFx/rHYKhLidZDFYeiE/v45bN4yFm8x7R/b0iE7KaszX+Exdvt +SghaTdcG0Knyw1bpJVyusavPzpaJMjdJ6tcFhVAbAjm7enCIvGCSx+X3l5SiWg0A +R57hJglezIiVjv3aGwHwvlZvtszK6zV6oXFAu0ECgYAbjo46T4hyP5tJi93V5HDi +Ttiek7xRVxUl+iU7rWkGAXFpMLFteQEsRr7PJ/lemmEY5eTDAFMLy9FL2m9oQWCg +R8VdwSk8r9FGLS+9aKcV5PI/WEKlwgXinB3OhYimtiG2Cg5JCqIZFHxD6MjEGOiu +L8ktHMPvodBwNsSBULpG0QKBgBAplTfC1HOnWiMGOU3KPwYWt0O6CdTkmJOmL8Ni +blh9elyZ9FsGxsgtRBXRsqXuz7wtsQAgLHxbdLq/ZJQ7YfzOKU4ZxEnabvXnvWkU +YOdjHdSOoKvDQNWu6ucyLRAWFuISeXw9a/9p7ftpxm0TSgyvmfLF2MIAEwyzRqaM +77pBAoGAMmjmIJdjp+Ez8duyn3ieo36yrttF5NSsJLAbxFpdlc1gvtGCWW+9Cq0b +dxviW8+TFVEBl1O4f7HVm6EpTscdDxU+bCXWkfjuRb7Dy9GOtt9JPsX8MBTakzh3 +vBgsyi/sN3RqRBcGU40fOoZyfAMT8s1m/uYv52O6IgeuZ/ujbjY= +-----END RSA PRIVATE KEY----- \ No newline at end of file diff --git a/OverTheWire/Bandit/24.md b/OverTheWire/Bandit/24.md index 8702128..cd79e50 100644 --- a/OverTheWire/Bandit/24.md +++ b/OverTheWire/Bandit/24.md @@ -2,7 +2,7 @@ ``` ssh bandit24@bandit.labs.overthewire.org -p 2220 -UoMYTrfrBFHyQXmg6gzctqAwOmw1IohZ +VAfGXJ1PBSsPSnvsjI8p759leLZ9GGar ``` The challenge here is to write a script that loops and calls netcat. @@ -12,8 +12,8 @@ The challenge here is to write a script that loops and calls netcat. ``` #!/bin/bash -PWD='UoMYTrfrBFHyQXmg6gzctqAwOmw1IohZ' -for n in `seq 1 9999`; +PWD='VAfGXJ1PBSsPSnvsjI8p759leLZ9GGar' +for i in {0000..9999}; do echo "$PWD $n" #echo a line into the stdin of nc done | nc localhost 30002 @@ -21,6 +21,6 @@ done | nc localhost 30002 ``` > Correct! -> The password of user bandit25 is uNG9O58gUE7snukf3bvZ0rxhtnjzSGzG +> The password of user bandit25 is p7TaowMYrmu23Ol8hiZh9UvD0O9hpx8d > > Exiting. diff --git a/OverTheWire/Bandit/25.md b/OverTheWire/Bandit/25.md index 7aac7be..96946ec 100644 --- a/OverTheWire/Bandit/25.md +++ b/OverTheWire/Bandit/25.md @@ -2,10 +2,16 @@ ``` ssh bandit25@bandit.labs.overthewire.org -p 2220 -uNG9O58gUE7snukf3bvZ0rxhtnjzSGzG +p7TaowMYrmu23Ol8hiZh9UvD0O9hpx8d ``` Need to manually select the shell +`/etc/passwd` has shell info +`more` can change the shell with `:set shell /bin/bash` then `:shell` +``` +bandit26@bandit:~$ cat /etc/bandit_pass/bandit26 +c7GvcKlw9mC7aUQaPx7nwFstuAIBw1o1 +``` \ No newline at end of file diff --git a/OverTheWire/Bandit/26.key b/OverTheWire/Bandit/26.key new file mode 100644 index 0000000..26db380 --- /dev/null +++ b/OverTheWire/Bandit/26.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpQIBAAKCAQEApis2AuoooEqeYWamtwX2k5z9uU1Afl2F8VyXQqbv/LTrIwdW +pTfaeRHXzr0Y0a5Oe3GB/+W2+PReif+bPZlzTY1XFwpk+DiHk1kmL0moEW8HJuT9 +/5XbnpjSzn0eEAfFax2OcopjrzVqdBJQerkj0puv3UXY07AskgkyD5XepwGAlJOG +xZsMq1oZqQ0W29aBtfykuGie2bxroRjuAPrYM4o3MMmtlNE5fC4G9Ihq0eq73MDi +1ze6d2jIGce873qxn308BA2qhRPJNEbnPev5gI+5tU+UxebW8KLbk0EhoXB953Ix +3lgOIrT9Y6skRjsMSFmC6WN/O7ovu8QzGqxdywIDAQABAoIBAAaXoETtVT9GtpHW +qLaKHgYtLEO1tOFOhInWyolyZgL4inuRRva3CIvVEWK6TcnDyIlNL4MfcerehwGi +il4fQFvLR7E6UFcopvhJiSJHIcvPQ9FfNFR3dYcNOQ/IFvE73bEqMwSISPwiel6w +e1DjF3C7jHaS1s9PJfWFN982aublL/yLbJP+ou3ifdljS7QzjWZA8NRiMwmBGPIh +Yq8weR3jIVQl3ndEYxO7Cr/wXXebZwlP6CPZb67rBy0jg+366mxQbDZIwZYEaUME +zY5izFclr/kKj4s7NTRkC76Yx+rTNP5+BX+JT+rgz5aoQq8ghMw43NYwxjXym/MX +c8X8g0ECgYEA1crBUAR1gSkM+5mGjjoFLJKrFP+IhUHFh25qGI4Dcxxh1f3M53le +wF1rkp5SJnHRFm9IW3gM1JoF0PQxI5aXHRGHphwPeKnsQ/xQBRWCeYpqTme9amJV +tD3aDHkpIhYxkNxqol5gDCAt6tdFSxqPaNfdfsfaAOXiKGrQESUjIBcCgYEAxvmI +2ROJsBXaiM4Iyg9hUpjZIn8TW2UlH76pojFG6/KBd1NcnW3fu0ZUU790wAu7QbbU +i7pieeqCqSYcZsmkhnOvbdx54A6NNCR2btc+si6pDOe1jdsGdXISDRHFb9QxjZCj +6xzWMNvb5n1yUb9w9nfN1PZzATfUsOV+Fy8CbG0CgYEAifkTLwfhqZyLk2huTSWm +pzB0ltWfDpj22MNqVzR3h3d+sHLeJVjPzIe9396rF8KGdNsWsGlWpnJMZKDjgZsz +JQBmMc6UMYRARVP1dIKANN4eY0FSHfEebHcqXLho0mXOUTXe37DWfZza5V9Oify3 +JquBd8uUptW1Ue41H4t/ErsCgYEArc5FYtF1QXIlfcDz3oUGz16itUZpgzlb71nd +1cbTm8EupCwWR5I1j+IEQU+JTUQyI1nwWcnKwZI+5kBbKNJUu/mLsRyY/UXYxEZh +ibrNklm94373kV1US/0DlZUDcQba7jz9Yp/C3dT/RlwoIw5mP3UxQCizFspNKOSe +euPeaxUCgYEAntklXwBbokgdDup/u/3ms5Lb/bm22zDOCg2HrlWQCqKEkWkAO6R5 +/Wwyqhp/wTl8VXjxWo+W+DmewGdPHGQQ5fFdqgpuQpGUq24YZS8m66v5ANBwd76t +IZdtF5HXs2S5CADTwniUS5mX1HO9l5gUkk+h0cH5JnPtsMCnAUM+BRY= +-----END RSA PRIVATE KEY----- \ No newline at end of file diff --git a/OverTheWire/Bandit/26.md b/OverTheWire/Bandit/26.md new file mode 100644 index 0000000..5bf6ce4 --- /dev/null +++ b/OverTheWire/Bandit/26.md @@ -0,0 +1,13 @@ +# Bandit Level 26 + +``` +ssh bandit26@bandit.labs.overthewire.org -p 2220 +c7GvcKlw9mC7aUQaPx7nwFstuAIBw1o1 +``` + +`more` can change the shell with `:set shell /bin/bash` then `:shell` + +``` +bandit26@bandit:~$ ./bandit27-do cat /etc/bandit_pass/bandit27 +YnQpBuifNMas1hcUFk70ZmqkhUU2EuaS +``` \ No newline at end of file diff --git a/OverTheWire/Bandit/27.md b/OverTheWire/Bandit/27.md new file mode 100644 index 0000000..092b6ed --- /dev/null +++ b/OverTheWire/Bandit/27.md @@ -0,0 +1,18 @@ +# Bandit Level 27 + +``` +ssh bandit27@bandit.labs.overthewire.org -p 2220 +YnQpBuifNMas1hcUFk70ZmqkhUU2EuaS +``` + +``` +bandit27@bandit:~$ git clone ssh://bandit27-git@localhost:2220/home/bandit27-git/repo /tmp/derp +bandit27@bandit:/tmp/derp$ ls -alh +total 1.2M +drwxrwxr-x 3 bandit27 bandit27 4.0K Jun 17 04:05 . +drwxrwx-wt 20 root root 1.2M Jun 17 04:05 .. +drwxrwxr-x 8 bandit27 bandit27 4.0K Jun 17 04:05 .git +-rw-rw-r-- 1 bandit27 bandit27 68 Jun 17 04:05 README +bandit27@bandit:/tmp/derp$ cat README +The password to the next level is: AVanL161y9rsbcJIsFHuw35rjaOM19nR +``` \ No newline at end of file diff --git a/OverTheWire/Bandit/28.md b/OverTheWire/Bandit/28.md new file mode 100644 index 0000000..941aece --- /dev/null +++ b/OverTheWire/Bandit/28.md @@ -0,0 +1,19 @@ +# Bandit Level 28 + +``` +ssh bandit28@bandit.labs.overthewire.org -p 2220 +AVanL161y9rsbcJIsFHuw35rjaOM19nR +``` + +``` +bandit28@bandit:~$ git clone ssh://bandit28-git@localhost:2220/home/bandit28-git/repo /tmp/derp +bandit28@bandit:/tmp/derp$ git checkout abcff758fa6343a0d002a1c0add1ad8c71b88534 +bandit28@bandit:/tmp/derp$ cat README.md +# Bandit Notes +Some notes for level29 of bandit. + +## credentials + +- username: bandit29 +- password: tQKvmcwNYcFS6vmPHIUSI3ShmsrQZK8S +``` \ No newline at end of file diff --git a/OverTheWire/Bandit/29.md b/OverTheWire/Bandit/29.md new file mode 100644 index 0000000..24f30a4 --- /dev/null +++ b/OverTheWire/Bandit/29.md @@ -0,0 +1,32 @@ +# Bandit Level 29 + +``` +ssh bandit29@bandit.labs.overthewire.org -p 2220 +tQKvmcwNYcFS6vmPHIUSI3ShmsrQZK8S +``` + +``` +bandit28@bandit:~$ git clone ssh://bandit29-git@localhost:2220/home/bandit29-git/repo /tmp/derp +bandit28@bandit:/tmp/derp$ cat README.md +# Bandit Notes +Some notes for bandit30 of bandit. + +## credentials + +- username: bandit30 +- password: + +bandit29@bandit:/tmp/derp$ git checkout dev +Branch 'dev' set up to track remote branch 'dev' from 'origin'. +Switched to a new branch 'dev' +bandit29@bandit:/tmp/derp$ ls +code README.md +bandit29@bandit:/tmp/derp$ cat README.md +# Bandit Notes +Some notes for bandit30 of bandit. + +## credentials + +- username: bandit30 +- password: xbhV3HpNGlTIdnjUrdAlPzc2L6y9EOnS +``` \ No newline at end of file diff --git a/OverTheWire/Bandit/30.md b/OverTheWire/Bandit/30.md new file mode 100644 index 0000000..9d64c89 --- /dev/null +++ b/OverTheWire/Bandit/30.md @@ -0,0 +1,12 @@ +# Bandit Level 30 + +``` +ssh bandit30@bandit.labs.overthewire.org -p 2220 +xbhV3HpNGlTIdnjUrdAlPzc2L6y9EOnS +``` + +``` +bandit28@bandit:~$ git clone ssh://bandit30-git@localhost:2220/home/bandit30-git/repo /tmp/derp +bandit28@bandit:/tmp/derp$ cat README.md +just an epmty file... muahaha +``` \ No newline at end of file