OverTheWire.org Walkthrough: Bandit

~ Level 10→11 ~

Level Description

The password for the next level is stored in the file data.txt, which contains base64 encoded data

The following commands may be required to solve this level: grep, sort, uniq, strings, base64, tr, tar, gzip, bzip2, and xxd.

A link to a Wikipedia article about base64 is also provided.


Research Before Solving

Since we were given a link to an article detailing base64 and we are advised the file containting the password is enocded using base64, let's pull up the command's documentation inside of the Linux console.

Type base --help and press enter.

Output for base64 --help

According to the documentation, base64 can be used to encode and decode a file. To decode we simply need to use the switch of -d.

Solution Walkthrough

Start by logging into the OverTheWire server using ssh bandit10@bandit.labs.overthewire.org -p 2220 and then pasting in the password retrieved from the previous level.

Next, we will issue an ls to see if data.txt is listed as it has been with previous levels.

Output of ls command showing data.txt file

It is! Since data.txt is here, we will go ahead and use base64 -d data.txt and see what the output is.

Nice work! We've found the password for the next level: IFukwKGsFW8MOq3IRFqrxE1hxTNEbUPR. Before continuing on, exit out of the session and record the password.