본문 바로가기

Wargame/Bandit

[ Docker ] Bandit Wargame 만들기 - 6번 문제 ( 8 / 33 )

1. Bandit6 목표

The password for the next level is stored somewhere on the server and has all of the following properties:

owned by user bandit7
owned by group bandit6
33 bytes in size

Commands you may need to solve this level
ls , cd , cat , file , du , find , grep

 

2. Bandit6 구현

# 비밀번호 root 입력 접속
ssh -oStrictHostKeyChecking=no root@localhost -p 2220

chown -R root:root /home/bandit6/.[!.]*

mkdir -p /var/lib/dpkg/info/ && echo HKBPTKQnIay4Fw76bEy8PVxKEDQRKTzs > /var/lib/dpkg/info/bandit7.password

chmod 640 /var/lib/dpkg/info/bandit7.password

useradd bandit7 && echo -e "HKBPTKQnIay4Fw76bEy8PVxKEDQRKTzs\nHKBPTKQnIay4Fw76bEy8PVxKEDQRKTzs" | passwd bandit7

chown bandit7:bandit6 /var/lib/dpkg/info/bandit7.password

chmod 755 /home/bandit7

chown root:root /home/bandit7

 

 

3. Bandit6 문제풀의

# bandit6 로 설정한 패스워드를 입력하여 접속한다.
# DXjZPULLxYr17uwoI01bNLQbtFemEgo7
ssh bandit6@localhost -p 2220

# /dev/null 을 비트 버킷이라고 함
find / -size 33c -user bandit7 -group bandit6 2>/dev/null

cat `find / -size 33c -user bandit7 -group bandit6 2>/dev/null`