https://panman4040.github.io/tags/overthewire/Recent content in OverTheWire on an's security blogHugoenMon, 01 Jun 2026 17:14:12 +0700https://panman4040.github.io/training/overthewire/bandit/Mon, 01 Jun 2026 17:13:16 +0700https://panman4040.github.io/training/overthewire/bandit/<h1 id="bandit">Bandit</h1> <h2 id="bandit-0">Bandit 0</h2> <p>Pretty straightforward, log into the game with SSH per below</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>ssh -p <span style="color:#ae81ff">2220</span> bandit0@bandit.labs.overthewire.org </span></span></code></pre></div><p>After that, we can simply use <code>cat readme</code> to get our password</p> <p>Password: <code>ZjLjTmM6FvvyRnrb2rfNWOZOTa6ip5If</code></p> <h2 id="bandit-1">Bandit 1</h2> <p>Using <code>-</code> as an argument refers to <strong>STDIN/STDOUT</strong>. So we have to do the following:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>cat ./- </span></span></code></pre></div><p>Password: <code>263JGJPfgU6LtdEvgfWU1XP5yac29mFx</code></p> <h2 id="bandit-2">Bandit 2</h2> <p>Pretty straightforward, can use TAB to autocomplete the query.</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>cat ./--spaces<span style="color:#ae81ff">\ </span>in<span style="color:#ae81ff">\ </span>this<span style="color:#ae81ff">\ </span>filename-- </span></span></code></pre></div><p>Notice how the spaces are separated with <code>\</code></p>https://panman4040.github.io/training/overthewire/Mon, 01 Jun 2026 17:13:16 +0700https://panman4040.github.io/training/overthewire/