Writeups OverTheWireBanditLinuxShell Escape

Bandit 32 Writeup - OverTheWire

Writeup for Bandit level 32 from OverTheWire: escaping an uppercase-converting shell using $0.

Contents

Wargame: Bandit

Level: 32

Category: Linux Fundamentals

Description

The login shell is a custom “UPPERCASE SHELL” that converts all input to uppercase before executing it. Standard commands like cat become CAT which are not found. The goal is to escape to a normal shell.

Overview

Solution

>> $0
$ whoami
bandit33
$ cat /etc/bandit_pass/bandit33

Password

odHo63fHiFqcWWJG9rLiLDtPm45KzUKy

← Back to Blog