Level: 0→1
Level: 1→2
Level: 2→3
Level: 3→4
Level: 4→5
Level: 5→6
Level: 6→7
Level: 7→8
Level: 8→9
Level: 9→10
Level: 10→11
Level: 11→12
Level: 12→13
Level: 13→14
Level: 14→15
Level: 15→16
Level: 16→17
Level: 17→18
Level: 18→19
Level: 19→20
Level: 20→21
Level: 21→22
Level: 22→23
Level: 23→24
Level: 24→25
Level: 25→26
Level: 26→27
Level: 27→28
Level: 28→29
Level: 29→30
Level: 30→31
Level: 31→32
Level: 32→33
Level: 33→34

~ Level 32→33 ~

Level Description

After all this git stuff its time for another escape. Good luck!

Commands required for this level: sh and man

Research Before Solving

Research is gone through during the walkthrough.

Solution Walkthrough

Upon logging into the OverTheWire server as bandit32 we are met with a peculiar greeting.

We appear to be in a different shell than what we are accustomed to. Attempting to type in a command gives the following output:

Turning to the internet for help, we find that we are in a Bourne Shell. This shell was the predecessor to the bash shell which we have mainly used up to this point. The level description states that we need to escape. This must mean that we need to escape this shell to find the password.

We will once again turn to the internet for help. Further research finds that .sh shell scripts use exit codes. These are denoted using a $ along with a digit from 0-255. Multiple sources state the number 0 is used when a task has been completed succesfully, thus returning a user back to the original shell. Let's try to type $0 into the prompt to see if it will help us exit:

The $ shows that we succefully exited to a bash shell! Now that we can use the commands we are used to, use ls to list any files.

We see the file that put us into the Bourne Shell. Using cat on it, we see a good amount of gibberish. Let's see the file's type by using file uppershell

The file says setuid, remembering back to previous levels, this type of file allowed us to have escalated priveleges. If we run the file, we will return back to the other shell. Instead, let's just use cat on the file where previous passwords have been stored.

We've located the password to the final level! Close out of your ssh client and reopen one before moving on.

Password: c9c3199ddf4121b10cf581a98d51caee

Previous Level

Next Level