OverTheWire-Bandit CTF

最新推荐文章于 2024-05-20 09:02:22 发布

DaisyDragonD

最新推荐文章于 2024-05-20 09:02:22 发布

阅读量392

点赞数

分类专栏： OverTheWire Bandit CTF 文章标签： linux ssh 服务器

本文链接：https://blog.csdn.net/mengzh620/article/details/130146321

版权

OverTheWire 同时被 3 个专栏收录

3 篇文章 0 订阅

订阅专栏

CTF

3 篇文章 0 订阅

订阅专栏

Bandit

1 篇文章 0 订阅

订阅专栏

sshpass -f filename ssh bandit0@bandit.overthewire.labs.org -p 2220

ssh bandit0@bandit.overthewire.labs.org -p 2220
cat ./-file dashed file
find . -type f | xargs file
man xargs

bandit5@bandit:~/inhere$ ls | xargs cat
cat: maybehere00: Is a directory
cat: maybehere01: Is a directory
cat: maybehere02: Is a directory
cat: maybehere03: Is a directory
cat ‘spaces files’
cat /space/files
find . -type f -size 1033c ! -executable . can be iglected

find / -type f -user bandit7 -group bandit6 -size 33c
cat data.txt | grep ‘millionth’
sort data.txt | uniq -c
cat data.txt | sort | uniq -c | grep -v ‘10’
strings data.txt | grep ‘=’
echo ‘VGhlIHBhc3N3b3JkIGlzIDZ6UGV6aUxkUjJSS05kTllGTmI2blZDS3pwaGxYSEJNCg’ | base64 -d
echo ‘Gur cnffjbeq vf WIAOOSFzMjXXBC0KoSKBbJ8puQm5lIEi’ | rot13

12 xxd -r data.txt > something
file someting
mv something something.gz
gunzip something.gz
bunzip2
tar -xf
ls -l

13 ssh -i sshkey.private bandit14@localhost -p 2220

14 nc localhost port

15 cat /etc/bandit_pass/bandit15 | openssl s_client -connect localhost 30000 -ign_eof

16 nmap -T4 -p31000-32000 localhost
cat /ect/bandit_pass/ bandit17 | openssl s_client -connect localhost 3xxxx -ign_eof

nano bandit17 private key

chmod 600 bandit
ssh -i bandit17 bandit17@bandit.overthewire.labs.org -p 2220

quit vi :q!

17 diff password.new password.old

18 sshpass -f bandit18 ssh bandit18@bandit.labs.overthewire.org -p 2220 ‘cat readme’

19 ./bandit20-do id
./bandit20-do cat /etc/bandit_pass/bandit20

20 nc -lvp 8888
passwd

./suconnect 8888

21 cd /etc/cron.d
cat cronjob_bandit22
cat /usr/bin/cronjob_bandit22.sh
cat /tmp/t7O6lds9S0RqQh9aMcz6ShpAoZKF7fgv

22 cd /etc/cron.d
cat cronjob_bandit23
cat /usr/bin/cronjob_bandit23.sh
echo “I am user bandit23” |md5sum | cut -d ’ ’ -f1
cat /tmp/8ca319486bfbbc3663ea0fbe81326349

23 cd /etc/cron.d ???

24 nano loops.sh

#!/bin/bash 
for i in {000.9999}
do
echo "PasswordOfBandit24 $i"
done

chmod 777 loops.sh
loops.sh > loops.txt
cat loops.txt | nc localhost 30002

25 v
:r /etc/bandit_pass/bandit26

26 v
:set shell=/bin/bash
:shell
bandit26:
./bandit27-do cat /etc/bandit_pass/bandit27

27/28/29
git clone ssh://bandit27-git@localhost:2220/home/bandit27-git/repo
got repo
git log # check the log
git branch -a
git show
git checkout
git reflog