Wargames-Bandit-Level20

Level 20

Level Goal

There is a setuid binary in the homedirectory that does the following: it makes a connection to localhost on the port you specify as a commandline argument. It then reads a line of text from the connection and compares it to the password in the previous level (bandit20). If the password is correct, it will transmit the password for the next level (bandit21).

NOTE: Try connecting to your own network daemon to see if it works as you think

Solution

提示是執行給定的程序，如果收到當前的password就可以給出下一關的password，那麼直接nc開一個server監聽，然後再起個shell用程序連接即可：

bandit20@bandit:~$ nc -lp 6666
VxCazJaVykI6W36BkBU0mJTCM8rR95XT
NvEJF7oVjkddltPSrdKEFOllh9V1IBcq

bandit20@bandit:~$ ./suconnect 6666
Read: VxCazJaVykI6W36BkBU0mJTCM8rR95XT
Password matches, sending next password