Bandit16
bandit level16
ssh server: bandit.labs.overthewire.org port 2220
username: bandit16
password: JQttfApK4SeyHwDlI9SXGR50qclOAil1
This level password will come by submitting the bandit16 password in a session with the server through a service running on port in the range of 31000 and 32000, so we need to scan this rang. we will use nmap for this task
$ nmap -sV -p 31000-32000 localhost
Here it comes with 5 open ports 4 of them are just echo ports, and only one port (port 31790) is the port that would accept our connection and respond with value not just returning back what we will send to it so lets connect to it using openssl
finally if we submitted the bandit16 key the server will answer us
Correct!
and send to the screen the private key for the next level bandit17
Now we will save this in a text file to use it in bandit17.
Remember that we are not allowed to create files into our home directories so we will create it in the /temp directory
we created the temp directory and we will use nano to paste the key into a file to use it in the next level
No comments:
Post a Comment