OverTheWire: Bandit Walkthrough — Level 19–22

Samxia99
3 min readFeb 15, 2024

--

Hello everybody, let’s start another part of On The Way (OTW) with explanations and solved answers.

hello Folks!!! it’s a samxia99

I have written this article to help beginners and to explain how I solved some levels. It includes six levels in each part and is designed to be useful for those looking for guidance. I hope my walkthrough will be helpful.

Just a quick reminder that the game has been updated, so the password has also been changed. I hope this password is helpful!

Bandit Level 19 → Level 20

  • Level Goal

To gain access to the next level, you should use the setuid binary in the home directory. Execute it without arguments to find out how to use it. The password for this level can be found in the usual place (/etc/bandit_pass) after you have used the setuid binary.

we need to execute it without arguments so we use by setuid.

Pass:-VxCazJaVykI6W36BkBU0mJTCM8rR95XT

Bandit Level 20 → Level 21

  • Level Goal

There is a setuid binary in the homedirectory that does the following: it makes a connection to localhost on the port you specify as a commandline argument. It then reads a line of text from the connection and compares it to the password in the previous level (bandit20). If the password is correct, it will transmit the password for the next level (bandit21).

NOTE: Try connecting to your own network daemon to see if it works as you think.

  • command used

ssh, nc, cat, bash, screen, tmux, Unix ‘job control’ (bg, fg, jobs, &, CTRL-Z, …)

“Let’s try to catch a password using echo and a previous password.”

Pass:-NvEJF7oVjkddltPSrdKEFOllh9V1IBcq

Bandit Level 21 → Level 22

  • Level Goal

A program is running automatically at regular intervals from cron, the time-based job scheduler. Look in /etc/cron.d/ for the configuration and see what command is being executed.

  • command used

cron, crontab, crontab(5) (use “man 5 crontab” to access this)

Pass:-WdDozAdTM2z9DiFEQ2mGlwngMfj4EZff

Bandit Level 22 → Level 23

  • Level Goal

A program is running automatically at regular intervals from cron, the time-based job scheduler. Look in /etc/cron.d/ for the configuration and see what command is being executed.

NOTE: Looking at shell scripts written by other people is a very useful skill. The script for this level is intentionally made easy to read. If you are having problems understanding what it does, try executing it to see the debug information it prints.

  • command used

cron, crontab, crontab(5) (use “man 5 crontab” to access this)

Try to solve in every way possible.

Pass:-QYw0Y2aiA672PsMmh9puTQuhoz8SyR2G

Hopefully, this write-up will be useful for everybody, I have tried to make it easy to read. and this password is not working in your case so try to solve it yourself.

PS: I will write the next part right after this.

--

--

Samxia99
Samxia99

Written by Samxia99

This is for me to document my journey through hacking, CTFs and Hacker tool's | i also love to read novel.

No responses yet