OverTheWire:Bandit:Solution:Part1(Level 0 to Level 10):

Aman Chauhan
4 min readMay 20, 2022
fig-1.0

Hi,

My dear hackers in this blog in am going to cover the Over The Wire’s Wargame called badnit. Its a absolute beginners level challenge.Here you learn some basic knowledge of linux (i.g- commands,filesystem…etc) that basic need for hacking.

You have to connect to the system through SSH and find out a hidden password to login to the next system as soon as you complete a level its become harder and you its provide you some Helpful Reading Material for each level that help you to complete the level and you learn some basic knowledge that required in hacking field. No other talk lets go and hack.

— — — — — — — — — Let The Party Begin — — — — — — — — —

Connect to system through SSH to the bandit’s system by following commnad:

ssh [username]@[host name] -p [port no]

Here the username is bandit[level no.]

Host name is bandit.labs.overthewire.org

And port no. is 2220.

fig-2.0

Level 0 —

You can get in this this system through following credentials:

Username: bandit0

Password: bandit0

Port will same 2220 you can see it in the image below(fig-2.0).

fig-3.0

Now lets connect to the system and find the password for the next system:

fig-4.0

In the above picture we can see we login to the system and get a file name readme in this file we get the password for the next level.

For login to the next system you have to just change the username bandit0 to bandit1 and use that password that you find here:

Level 1 —

Username: bandit1

Password:boJ9jbbUNNfktd78OOpsqOltutMc3MY1

fig-5.0

Here you can see a file name ‘’ and its stores the password for the next level if you what to know more about you can check out Helpful Reading Material of this level.

Level 2—

Username: bandit2

Password: CV1DtqXWVFXTvM2F0k09SHz0YwRINYA9

fig-6.0

You can see here a file name spaces in this file name for read this file you have to put it in double quotes like cat “file name”. Now you get the pass word for level 3.

Level 3 —

Username: bandit3

Password: UmHadQclWmgdLOKQ3YNgjWxGoRMb5luK

fig-7.0

Here we got a directory named inhere and in this directory we got a hidden file named as .hidden this hidden file contains password that we use to get into next system.

Level 4 —

Username: bandit4

Password: pIwrPrtPN36QITSp3EQaw936yaFoFgAB

fig-8.0

Here again we got inhere directory in this directory we got 9 file but password stored in -file07 file.

Level 5 —

Username: bandit5

Password: koReBOKuIDDepwhWk7jZC0RTdopnAYKh

fig-9.0

Here we got a inhere directory and in it there is another 20directories, in directory maybehere07 a hidden file name as .file2 this is the file that contains the password (inhere/maybehere07/.file2).

Level 6 —

Username: bandit6

Password: DXjZPULLxYr17uwoI01bNLQbtFemEgo7

fig-11.0

Here we use find command(find / -type f -size 33c 2>/dev/null) for search a file which is 33 bytes in size because you know its a property for our password file

fig-12.0

We got the password its store in /var/lib/dpkg/info/bandit7.password

Level 7 —

Username: bandit7

Password: HKBPTKQnIay4Fw76bEy8PVxKEDQRKTzs

fig-13.0

Here we get a data.txt file property of our password is its next to millionth so we use grep command to find that word in this list and we will get password.

Level 8 —

Username: bandit8

Password: cvX2JJa4CFALtqS87jk27qwqGhBM9plV

fig-14.0

Here we got a file data.txt we have to find a line which only line of text that occurs only once so we use this command- (cat data.txt | sort | uniq -u). And we will get the password.

Level 9 —

Username: bandit9

Password: UsvVyFSfZZWbi6wgC7dAFyFuR6jQQUhR

fig-15.0

In the data.txt file the password is stored in human readable form so we use strings command to read this data.txt file.

fig-16.0

The password property is that its preceded by several ‘=’ characters. So that is the password of the next system.

Level 10 —

Username: bandit10

Password: truKLdjsbJ5g7yyJ2X2R0o3a5HQJFuLk

This series will continue………..

Sign up to discover human stories that deepen your understanding of the world.

No responses yet

Write a response