Over The Wire


Bandit

Host: bandit.labs.overthewire.org

Port: 2220



Level 12

ssh bandit12@bandit.labs.overthewire.org -p 2220
password: JVNBBFSmZwKKOP0XbFXOoW8chDz5yVRv

Objective:

The password for the next level is stored in the file data.txt, which is a hexdump of a file that has been repeatedly compressed. For this level it may be useful to create a directory under /tmp in which you can work using mkdir. For example: mkdir /tmp/myname123. Then copy the datafile using cp, and rename it using mv (read the manpages!)

CLI:

bandit12@bandit:~$ mktemp -d
/tmp/tmp.tXJKa7KVxR
bandit12@bandit:~$ cd /tmp/tmp.tXJKa7KVxR
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ cp ~/data.txt .
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
data.txt
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ mv data.txt hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ cat hexdump_data | head
00000000: 1f8b 0808 6855 1e65 0203 6461 7461 322e ....hU.e..data2.
...
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ xxd -r hexdump_data compressed_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ mv compressed_data compressed_data.gz
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.gz hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ gzip -d compressed_data.gz
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ xxd compressed_data
00000000: 425a 6839 3141 5926 5359 481b 3202 0000 BZh91AY&SYH.2...
...
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ mv compressed_data compressed_data.bz2
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.bz2 hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ bzip2 -d compressed_data.bz2
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ xxd compressed_data
00000000: 1f8b 0808 6855 1e65 0203 6461 7461 342e ....hU.e..data4.
...
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ mv compressed_data compressed_data.gz
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.gz hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ gzip -d compressed_data.gz
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ cat compressed_data
data5.bin0000644000000000000000000002400014507452550011247 0ustar
rootrootdata6.bin0000644000000000000000000000033114507452550011251 0ustar rootrootBZh91AY&SYJ!�1����&�2i6��I�P�2���@�@4��k�ʀ@��8M|�V1@��P����2[j.�v'�1��s���TTI��V��*�A�^O
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ mv compressed_data compressed_data.tar
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.tar hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ tar -xf compressed_data.tar
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.tar data5.bin hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ xxd data5.bin | head
00000000: 6461 7461 362e 6269 6e00 0000 0000 0000 data6.bin.......
...
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ tar -xf data5.bin
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.tar data5.bin data6.bin hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ xxd data6.bin | head
00000000: 425a 6839 3141 5926 5359 0403 8894 0000 BZh91AY&SY......
...
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ bzip2 -d data6.bin
bzip2: Can't guess original name for data6.bin -- using data6.bin.out
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.tar data5.bin data6.bin.out hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ tar -xf data6.bin.out
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.tar data5.bin data6.bin.out data8.bin hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ xxd data8.bin
00000000: 1f8b 0808 6855 1e65 0203 6461 7461 392e ....hU.e..data9.
...
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ mv data8.bin data8.gz
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.tar data5.bin data6.bin.out data8.gz hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ gzip -d data8.gz
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ ls
compressed_data.tar data5.bin data6.bin.out data8 hexdump_data
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$ cat data8
The password is wbWdlBxEir4CaE8LaPhauuOo6pwRmrDw
bandit12@bandit:/tmp/tmp.tXJKa7KVxR$

Bandit