118 lines
4.5 KiB
Plaintext
Executable File
118 lines
4.5 KiB
Plaintext
Executable File
shinobi@veneno:~$ ssh bandit.labs.overthewire.org -p 2220
|
|
The authenticity of host '[bandit.labs.overthewire.org]:2220 ([16.16.163.126]:2220)' can't be established.
|
|
ED25519 key fingerprint is SHA256:C2ihUBV7ihnV1wUXRb4RrEcLfXC5CXlhmAAM/urerLY.
|
|
This key is not known by any other names
|
|
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
|
|
Warning: Permanently added '[bandit.labs.overthewire.org]:2220' (ED25519) to the list of known hosts.
|
|
_ _ _ _
|
|
| |__ __ _ _ __ __| (_) |_
|
|
| '_ \ / _` | '_ \ / _` | | __|
|
|
| |_) | (_| | | | | (_| | | |_
|
|
|_.__/ \__,_|_| |_|\__,_|_|\__|
|
|
|
|
|
|
This is an OverTheWire game server.
|
|
More information on http://www.overthewire.org/wargames
|
|
|
|
!!! You are trying to log into this SSH server on port 2220 with a username
|
|
!!! that does not match the bandit game.
|
|
|
|
shinobi@bandit.labs.overthewire.org's password:
|
|
|
|
shinobi@veneno:~$ ssh bandit0@bandit.labs.overthewire.org -p 2220
|
|
_ _ _ _
|
|
| |__ __ _ _ __ __| (_) |_
|
|
| '_ \ / _` | '_ \ / _` | | __|
|
|
| |_) | (_| | | | | (_| | | |_
|
|
|_.__/ \__,_|_| |_|\__,_|_|\__|
|
|
|
|
|
|
This is an OverTheWire game server.
|
|
More information on http://www.overthewire.org/wargames
|
|
|
|
bandit0@bandit.labs.overthewire.org's password:
|
|
|
|
,----.. ,----, .---.
|
|
/ / \ ,/ .`| /. ./|
|
|
/ . : ,` .' : .--'. ' ;
|
|
. / ;. \ ; ; / /__./ \ : |
|
|
. ; / ` ; .'___,/ ,' .--'. ' \' .
|
|
; | ; \ ; | | : | /___/ \ | ' '
|
|
| : | ; | ' ; |.'; ; ; \ \; :
|
|
. | ' ' ' : `----' | | \ ; ` |
|
|
' ; \; / | ' : ; . \ .\ ;
|
|
\ \ ', / | | ' \ \ ' \ |
|
|
; : / ' : | : ' |--"
|
|
\ \ .' ; |.' \ \ ;
|
|
www. `---` ver '---' he '---" ire.org
|
|
|
|
|
|
Welcome to OverTheWire!
|
|
|
|
If you find any problems, please report them to the #wargames channel on
|
|
discord or IRC.
|
|
|
|
--[ Playing the games ]--
|
|
|
|
This machine might hold several wargames.
|
|
If you are playing "somegame", then:
|
|
|
|
* USERNAMES are somegame0, somegame1, ...
|
|
* Most LEVELS are stored in /somegame/.
|
|
* PASSWORDS for each level are stored in /etc/somegame_pass/.
|
|
|
|
Write-access to homedirectories is disabled. It is advised to create a
|
|
working directory with a hard-to-guess name in /tmp/. You can use the
|
|
command "mktemp -d" in order to generate a random and hard to guess
|
|
directory in /tmp/. Read-access to both /tmp/ is disabled and to /proc
|
|
restricted so that users cannot snoop on eachother. Files and directories
|
|
with easily guessable or short names will be periodically deleted! The /tmp
|
|
directory is regularly wiped.
|
|
Please play nice:
|
|
|
|
* don't leave orphan processes running
|
|
* don't leave exploit-files laying around
|
|
* don't annoy other players
|
|
* don't post passwords or spoilers
|
|
* again, DONT POST SPOILERS!
|
|
This includes writeups of your solution on your blog or website!
|
|
|
|
--[ Tips ]--
|
|
|
|
This machine has a 64bit processor and many security-features enabled
|
|
by default, although ASLR has been switched off. The following
|
|
compiler flags might be interesting:
|
|
|
|
-m32 compile for 32bit
|
|
-fno-stack-protector disable ProPolice
|
|
-Wl,-z,norelro disable relro
|
|
|
|
In addition, the execstack tool can be used to flag the stack as
|
|
executable on ELF binaries.
|
|
|
|
Finally, network-access is limited for most levels by a local
|
|
firewall.
|
|
|
|
--[ Tools ]--
|
|
|
|
For your convenience we have installed a few useful tools which you can find
|
|
in the following locations:
|
|
|
|
* gef (https://github.com/hugsy/gef) in /opt/gef/
|
|
* pwndbg (https://github.com/pwndbg/pwndbg) in /opt/pwndbg/
|
|
* gdbinit (https://github.com/gdbinit/Gdbinit) in /opt/gdbinit/
|
|
* pwntools (https://github.com/Gallopsled/pwntools)
|
|
* radare2 (http://www.radare.org/)
|
|
|
|
--[ More information ]--
|
|
|
|
For more information regarding individual wargames, visit
|
|
http://www.overthewire.org/wargames/
|
|
|
|
For support, questions or comments, contact us on discord or IRC.
|
|
|
|
Enjoy your stay!
|
|
|
|
bandit0@bandit:~$
|
|
|