OverTheWireBandit教程（1-10）
这个网站还挺好玩的于是我就抽点时间做了一下
OverTheWire的登录网址：OverTheWire: Bandit
本人用的是远程连接软件mobaxterm，windows自带的ssh版本不对用不了
Bandit Level 0
Level Goal
The goal of this level is for you to log into the game using SSH. The host to which you need to connect is bandit.labs.overthewire.org, on port 2220. The username is bandit0 and the password is bandit0. Once logged in, go to the Level 1 page to find out how to beat Level 1.
Commands you may need to solve this level
ssh
Helpful Reading Material
- Secure Shell (SSH) on Wikipedia
- How to use SSH on wikiHow
leve0很简单就是一个简单的ssh连接密码和账号都是一样的bandit0
在new session中配置就可以
登入成功后拿到的东西 ，那密码就因该是这个文件了。
Bandit Level 0 → Level 1
Level Goal
The password for the next level is stored in a file called readme located in the home directory. Use this password to log into bandit1 using SSH. Whenever you find a password for a level, use SSH (on port 2220) to log into that level and continue the game.
Commands you may need to solve this level
ls , cd , cat , file , du , find
简单的说利用ls,cd,cat,file,du,find找到下一关的密码，这里主要考察的是文件读取，就简单的翻一下，但是先要利用ssh登入bandit1。（记得要logout，再重新登入就可）
Bandit Level 1 → Level 2
Level Goal
The password for the next level is stored in a file called - located in the home directory
Commands you may need to solve this level
ls , cd , cat , file , du , find
Helpful Reading Material
- Google Search for “dashed filename”
- Advanced Bash-scripting Guide - Chapter 3 - Special Characters
查看就可以
cat ./-
Bandit Level 2 → Level 3
Level Goal
The password for the next level is stored in a file called spaces in this filename located in the home directory
Commands you may need to solve this level
ls , cd , cat , file , du , find
Helpful Reading Material
- Google Search for “spaces in filename”
和上一关一样，但是文件变成空格了，需要\转义
aBZ0W5EmUfAf7kHTQeOwd8bauFJ2lAiG
Bandit Level 3 → Level 4
Level Goal
The password for the next level is stored in a hidden file in the inhere directory.
Commands you may need to solve this level
ls , cd , cat , file , du , find
考察隐藏文件的技巧
2EW7BBsr6aMMoJ2HjW067dm8EgX26xNe
Bandit Level 4 → Level 5
Level Goal
The password for the next level is stored in the only human-readable file in the inhere directory. Tip: if your terminal is messed up, try the “reset” command.
Commands you may need to solve this level
ls , cd , cat , file , du , find
利用file命令
lrIWWI6bB37kxfiCQZqUdOIYfr6eEeqR
Bandit Level 5 → Level 6
Level Goal
The password for the next level is stored in a file somewhere under the inhere directory and has all of the following properties:
- human-readable
- 1033 bytes in size
- not executable
Commands you may need to solve this level
ls , cd , cat , file , du , find
考察 find的使用
P4L4vucdmLnm8I7Vl7jG1ApGSfjYKqJU
andit Level 6 → Level 7
Level Goal
The password for the next level is stored somewhere on the server and has all of the following properties:
- owned by user bandit7
- owned by group bandit6
- 33 bytes in size
Commands you may need to solve this level
ls , cd , cat , file , du , find , grep
考察find，注意三个属性
z7WtoNQU2XfjmMtWA8u5rN4vzqu4v99S
Bandit Level 7 → Level 8
Level Goal
The password for the next level is stored in the file data.txt next to the word millionth
Commands you may need to solve this level
man, grep, sort, uniq, strings, base64, tr, tar, gzip, bzip2, xxd
利用grep
TESKZC0XvTetK0S9xNwm25STk5iWrBvP
Bandit Level 8 → Level 9
Level Goal
The password for the next level is stored in the file data.txt and is the only line of text that occurs only once
Commands you may need to solve this level
grep, sort, uniq, strings, base64, tr, tar, gzip, bzip2, xxd
Helpful Reading Material
- Piping and Redirection
利用uniq
EN632PlfYiZbn3PhVK3XOGSlNInNE00t
Bandit Level 9 → Level 10
Level Goal
The password for the next level is stored in the file data.txt in one of the few human-readable strings, preceded by several ‘=’ characters.
Commands you may need to solve this level
grep, sort, uniq, strings, base64, tr, tar, gzip, bzip2, xxd
利用strings
G7w8LIi6J3kTb8A7j9LgrywtEUlyyp6s
Bandit Level 10 → Level 11
Level Goal
The password for the next level is stored in the file data.txt, which contains base64 encoded data
Commands you may need to solve this level
grep, sort, uniq, strings, base64, tr, tar, gzip, bzip2, xxd
Helpful Reading Material
- Base64 on Wikipedia
利用base64解码
6zPeziLdR2RKNdNYFNb6nVCKzphlXHBM