Skip to content
This repository has been archived by the owner on Feb 11, 2024. It is now read-only.

Bandit : shelby #8

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 52 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
@@ -1 +1,53 @@
Assignment submissions here

Q.0-1] ls , cat readme
Q.1-2] ls , cat ./-
Q.2-3] cat ‘spaces in the file name’ aBZ0W5EmUfAf7kHTQeOwd8bauFJ2lAiG
Q.3-4]ls, ls -a, cd inhere, cat .hidden 2EW7BBsr6aMMoJ2HjW067dm8EgX26xNe
Q. 4-5]file cd inhere , file ./* , cat ./-file07 lrIWWI6bB37kxfiCQZqUdOIYfr6eEeqR
Q.5-6] ls , cd inhere, ls , find . -size 1033c , cat ./maybehere07/.file2.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Explain the find command you have used here

Password : P4L4vucdmLnm8I7Vl7jG1ApGSfjYKqJU

Q.6-7] ls , cd inhere , file./* , cat ./-file07 z7WtoNQU2XfjmMtWA8u5rN4vzqu4v99S
Q.7-8] data.txt grep millionth TESKZC0XvTetK0S9xNwm25STk5iWrBvP
Q.8-9] sort data.txt , uniq data.txt EN632PlfYiZbn3PhVK3XOGSlNInNE00t
Q.9-10] strings grep = data.txt G7w8LIi6J3kTb8A7j9LgrywtEUlyyp6s
Q.10-11] base64 - -decode data.txt 6zPeziLdR2RKNdNYFNb6nVCKzphlXHBM
Q.11-12] cat data.txt | tr a-zA-Z n-za-mN-ZA-M JVNBBFSmZwKKOP0XbFXOoW8chDz5yVRv
Q.12-13]ls, mkdir /tmp/mdg , cd /tmp/mdg, cp ~/data.txt, ls, mv data.txt mdg1, xxd -r mdg1 > mdg2 , file mdg2 , mv mdg2 .gz , gunzip mdg2.gz , repeat these zipping until you get the file. wbWdlBxEir4CaE8LaPhauuOo6pwRmrDw


Q 13-14].Do same as done in lvl 16-17 after we gett the rsa private key  fGrHPx402xGC7U7rXKDaxiWFTOiF0EN

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How do you get the private key here? Also write the exact commands used in this level


Q.14-15] nc localhost 30000 jN2kgmIXJ6fShzhT2avhotn4Zcka6tnt

Q.15-16] openssl s_client -connect localhost:30001 , JQttfApK4SeyHwDlI9SXGR50qclOAil1
Q.16-17] nmap -p 31000 - 32000 localhost
we’ll get 5 ports individually tryout each port with openssl s_client -connect localhost:port.
now in the fourth port we’ll get la rsa key ,
save it using echo “privatekey” > private16.key
ssh [email protected] -p 2220 -I private16.key

Q.17-18] diff passwords.new , passwords.old hga5tuuCLF6fFzUpnagiMN8ssu9LFrdg

Q.18-19] ssh [email protected] -p 2220 cat readme. awhqfNnAbc1naukrpqDYcF95h7HoMTrC


q.19-20]id ./bandit20-do id , ./bandit20-do cat /etc/bandit_pass/bandit20 VxCazJaVykI6W36BkBU0mJTCM8rR95XT

Q.20-21] Use two terminals

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Explain your approach for this level

. on one command: nc -lvp 1234
on two command: ./suconnect 1234
Now provide the terminal 1 the password for lvl 20 it will return back password for lvl 21
NvEJF7oVjkddltPSrdKEFOllh9V1IBcq

Q.21-22] cd /etc/cron.d/, cat cronjob_bandit22 , cat /usr/bin/cronjob_bandit22.sh , cat /tmp/t7O6lds9S0RqQh9aMcz6ShpAoZKF7fgv
Password : WdDozAdTM2z9DiFEQ2mGlwngMfj4EZff

Q.22-23] cd /etc/cron.d/ , cat cronjob_bandit23 , cat /usr/bin/cronjob_bandit23.sh , echo I am user bandit23 | md5sum | cut -d ' ' -f 1. , cat /tmp/8ca319486bfbbc3663ea0fbe81326349

QYw0Y2aiA672PsMmh9puTQuhoz8SyR2G


Q.23-24] VAfGXJ1PBSsPSnvsjI8p759leLZ9GGar