In the last post, we gained access to bandit20. Now, let’s find the password for bandit21. Level 21 Level Goal There is a setuid binary in the homedirectory that does the following: it makes a connection to localhost on the port you specify as a commandline argument. It then reads a line…

After a small break, I’m back! In the last post, we gained access to bandit19. Now, let’s find the password for bandit20. Level 20 Level Goal To gain access to the next level, you should use the setuid binary in the homedirectory. Execute it without arguments to find out how to use…

In the last post, we gained access to bandit18. Now, let’s find the password for bandit19. Level 19 Level Goal The password for the next level is stored in a file readme in the homedirectory. Unfortunately, someone has modified .bashrc to log you out when you log in with SSH. Commands you…

In the last post, we gained access to bandit17. Now, let’s find the password for bandit18. Level 18 Level Goal There are 2 files in the homedirectory: passwords.old and passwords.new. The password for the next level is in passwords.new and is the only line that has been changed between passwords.old and passwords.new …

In the last post, we gained access to bandit16. Now, let’s find the password for bandit17. Level 17 Level Goal The credentials for the next level can be retrieved by submitting the password of the current level to a port on localhost in the range 31000 to 32000. First find out which…

In the last post, we gained access to bandit15. Now, let’s find the password for bandit16. Level 16 Level Goal The password for the next level can be retrieved by submitting the password of the current level to port 30001 on localhost using SSL encryption. Helpful note: Getting “HEARTBEATING” and “Read R…

In the last post, we gained access to bandit14. Now, let’s find the password for bandit15. Level 15 Level Goal The password for the next level can be retrieved by submitting the password of the current level to port 30000 on localhost. Commands you may need to solve this level ssh, telnet…

In the last post, we gained access to bandit13. Now, let’s work on entering bandit14. Level 14 Level Goal The password for the next level is stored in /etc/bandit_pass/bandit14 and can only be read by user bandit14. For this level, you don’t get the next password, but you get a private SSH…

In the last post, we gained access to bandit12. Now, let’s find the password for bandit13. Level 13 Level Goal The password for the next level is stored in the file data.txt, which is a hexdump of a file that has been repeatedly compressed. For this level it may be useful to…