본문 바로가기

wargame/bandit

Level 17 → Level 18 Level Goal There are 2 files in the homedirectory: passwords.old and passwords.new. The password for the next level is in passwords.new and is the only line that has been changed between passwords.old and passwords.new NOTE: if you have solved this level and see ‘Byebye!’ when trying to log into bandit18, this is related to the next level, bandit19 홈 디렉토리에는 passwords.old과 passwords.new, 2개의 파일이 ..
Level 16 → Level 17 Level Goal The credentials for the next level can be retrieved by submitting the password of the current level to a port on localhost in the range 31000 to 32000. First find out which of these ports have a server listening on them. Then find out which of those speak SSL and which don’t. There is only 1 server that will give the next credentials, the others will simply send back to you whatever y..
Level 15 → Level 16 Level Goal The password for the next level can be retrieved by submitting the password of the current level to port 30001 on localhost using SSL encryption. Helpful note: Getting “HEARTBEATING” and “Read R BLOCK”? Use -ign_eof and read the “CONNECTED COMMANDS” section in the manpage. Next to ‘R’ and ‘Q’, the ‘B’ command also works in this version of that command… 비밀번호는 현재 단계의 비밀번호를 SSL 암호화을 사용하여..
Level 14 → Level 15 Level Goal The password for the next level can be retrieved by submitting the password of the current level to port 30000 on localhost. 비밀번호는 현재 단계의 비밀번호를 localhost의 port 30000에 제출하면 검색할 수 있다 Code bandit14@bandit:~$ ls bandit14@bandit:~$ cd /etc/bandit_pass bandit14@bandit:/etc/bandit_pass$ nc localhost 30000 < bandit14 Correct! # 비밀번호 검색 결과, nc 명령어를 사용할 수 있음을 알았다 +) 참고1 참고2 #nc
Level 13 → Level 14 Level Goal The password for the next level is stored in /etc/bandit_pass/bandit14 and can only be read by user bandit14. For this level, you don’t get the next password, but you get a private SSH key that can be used to log into the next level. Note: localhost is a hostname that refers to the machine you are working on 비밀번호는 사용자 bandit14로만 읽을 수 있는 /etc/bandit_pass/bandit14에 저장되어 있다 이번 단계에선 비밀번호를..
Level 12 → Level 13 Level Goal The password for the next level is stored in the file data.txt, which is a hexdump of a file that has been repeatedly compressed. For this level it may be useful to create a directory under /tmp in which you can work using mkdir. For example: mkdir /tmp/myname123. Then copy the datafile using cp, and rename it using mv (read the manpages!) 비밀번호는 반복하여 압축한 파일을 hexdump로 변환한 data.txt에 저장되..
Level 11 → Level 12 Level Goal The password for the next level is stored in the file data.txt, where all lowercase (a-z) and uppercase (A-Z) letters have been rotated by 13 positions 비밀번호는 모든 소문자와 대문자에 ROT13이 적용된 data.txt 파일에 저장되어 있다 +) 참고 ROT13이란 알파벳에서 13번째 뒤에 문자로 대체하는 문자 대치 암호를 뜻한다 ROT13에 대한 설명(en) ROT13에 대한 설명(kr) Code bandit11@bandit:~$ ls data.txt bandit11@bandit:~$ man tr bandit11@bandit:~$ cat data.txt | tr ..
Level 10 → Level 11 Base64 정리 Level Goal The password for the next level is stored in the file data.txt, which contains base64 encoded data 비밀번호는 base64로 인코딩된 데이터가 포함된 data.txt 파일에 저장되어 있다 Base64 Base64이란 64개의 문자로 이진파일을 아스키 문자열로 대치하는 인코딩 방식을 뜻한다 Base64에 대한 설명(en) Base64에 대한 설명(kr) Code bandit10@bandit:~$ cat data.txt VGhlIHBhc3N3b3JkIGlzIElGdWt3S0dzRlc4TU9xM0lSRnFyeEUxaHhUTkViVVBSCg== bandit10@bandit:~$ man base64 ..