Final Part - OverTheWire Bandit CTF Walkthrough | Complete Linux Journey for Cybersecurity

[00:00:02]Hi, I think I'm audible.

[00:00:14]So, welcome to the fifth and final part of all the wire bund. I hope in the in the live I hope in the live amount we'll complete all the challenges from bunded challenge mean bunded series so our learning target I'll give time for people to join Hi. Hi. I'm good.

[00:01:09]Hi. Hi. Hi. Shut up.

[00:01:14]Okay.

[00:01:21]I think I model the screen again.

[00:02:03]Yeah, thank you. Audio. Thank you. We'll just give another five minutes for people to join.

[00:02:36]Let's take uh and keep the challenge we are doing already level 21.

[00:02:43]So the level this level will be interesting actually.

[00:03:03]So we'll just give another five minutes for people to join.

[00:03:20]Give me 2 minutes. I'll I'll be right back.

[00:04:05]Speech. Speech. Speech.

[00:04:18][crying] I Foreign speech. Foreign speech.

[00:05:58]Very I think my face is better now.

[00:07:08]We'll start in 2 minutes.

[00:07:14]Up to like 3 hours because I'm planning to complete the series with this part.

[00:07:51]Instagram story.

[00:07:54]Just post one story and come Hi. Hi.

[00:09:53]It's start now.

[00:10:31]Okay, we'll start. So last uh recording last time.

[00:10:39]So what I did is I just recorded the session. So in the line uh in this uh what we call uh in this live the fifth part of bundit series we'll try to cover all the challenges up to like level 21 actually. So level 21 to level 34 we'll complete it because we have some time. Okay, since it's weekend I'll try to cover all the things with a detailed explanation. Okay, so this is uh bund part five. So I'll post it in YouTube. I'll just cut it at cut it cut the rest of the initial recordings. So okay. So last time.

[00:11:32]So that would be helpful I think.

[00:11:40]So last level so that we I mean so just like uh so in time.

[00:12:12]I just want to skip level 21 level 23 direct in the city of I was able to jump from 21 to directly to 23 level 212 So interesting.

[00:12:49]Next.

[00:12:51]Okay.

[00:13:04]I'll try to answer. Okay.

[00:13:06]So we'll jump.

[00:13:10]So the programmer is running at regular intervals job already.

[00:13:23]Okay.

[00:13:26]Okay. uh cd etc / 22.

[00:13:47]So get ground.

[00:13:56]Okay. So let's read it again.

[00:14:14]for the password.

[00:14:28]Okay. So, so 21 to 22 23 already. Okay. So, let's just skip it.

[00:14:45]actually 22 to 23.

[00:14:49]So I'll just revisit I'm revisiting it.

[00:14:52]So 22 to 23.

[00:14:58]Sorry for that but still okay. It's okay.

[00:15:05]Okay. So 20 last 22 loop the basics.

[00:15:37]So already 22 to 23.

[00:15:44]Okay. Program is running automatically is being executed.

[00:15:51]Sorry.

[00:15:56]each and every minute, monthly.

[00:16:13]Okay.

[00:16:18]Okay. So in the script sorry so my name who am I who am I target hash value.

[00:16:50]So value mean okay I mean so for so in the bunds bund uh bundit 22.

[00:18:05]It's not a directory. Okay.

[00:18:16]Oh, okay.

[00:18:21]So, cdmission.

[00:18:30]Okay. So, temporary folder.

[00:18:39]Okay.

[00:18:40]cannot open directory.

[00:18:51]So who remaining in the current session user who2 to I am user bandit 23 import my target.

[00:19:53]Okay. So already temporary single value single string So already explain So /te okay in the password 23 password 23 Okay.

[00:21:07]So successfully 23.

[00:21:19]So 23 password successfully we are logged in using bund.

[00:21:37]So 24 in the fold maybe cd/ cd/c 243 24.

[00:22:18]Okay. So 24 Okay.

[00:22:52]Okay. So 243 level 23 we are just making a trial and error.

[00:23:17]Okay, it is nothing wrong.

[00:23:24]So, so we should also do those breaking stuffs. Okay, so this is just a learning.

[00:23:44]It's been so many years since I tried.

[00:23:46]Let's try our luck. Okay. So, /te.

[00:24:05]Oh, no such file or directory. Oh, okay.

[00:24:13]I think has fixed it because previously what I did is I just directly jumped into level 24. Okay. So, but no issues.

[00:24:29]Uh first 24 actually previously I was able to do it but it is better to maybe in the script either change and over the wire but uh previously I was able to do it. So so many years back like two or three years back I was able to do it but still it is a good learning for us because uh okay so no worries but okay so one of the way uh I script 24 director 24.

[00:25:44]But 25 Okay, no worries.

[00:26:08]So, 23.

[00:26:15]Okay. 234.

[00:26:30]Okay. A program is running automatically at regular intervals from chron.

[00:26:37]What command is being executed? Look in what command is being 23 24.

[00:26:58]We can.

[00:27:01]Okay. 24.

[00:27:04]Okay.

[00:27:14]Okay.

[00:27:31]Okay. So, so for the see what command is being executed.

[00:27:42]This level requires you to create create your own first shell script first shell script. This is a very big step and you should be proud of yourself when you beat this level.

[00:28:04]script.

[00:28:14]Keep in mind that you that your shell script is removed once executed. So you may want to keep a copy.

[00:28:24]Okay. The shell script once executed remove So understand my nameal 23 24.

[00:29:00]Global global variable exit.

[00:29:21]Exit.

[00:29:23]Executing and deleting all scripts in O. Okay.

[00:29:29]Once exec.

[00:29:36]So for in loop condition if I= 23 then time out 23 Okay. Then time out.

[00:30:19]Okay. Uh then remove.

[00:30:31]Okay.

[00:30:37]Okay. So it is not like going like old stone way.

[00:30:48]It is also good but it is better to go there. Okay.

[00:30:54][clears throat] Prevents error. If the directory is empty, the wild card dissolves into nothing instead of lastics.

[00:31:09]Try except.

[00:31:11]Okay. First line. Yes.

[00:31:15]Next. My name equal to identifies the current user using the script. It runs 24. Okay. 24 exits changes the directory to target folder. If the folder does not exit exist the script stops immediately.

[00:31:31]Uh okay.

[00:31:40]Okay. Okay. Exit. Okay. So okay cd / pool uh spit 24.

[00:32:26]Okay.

[00:32:33]Standard check to skip the current directory and parent directory.

[00:33:00]Okay. time executes regular files ex explicitly owned by bund [clears throat] exits executes your script. It kills it forcefully.

[00:33:31]If it takes longer than 60 seconds, delete your script uh script immediately after execute execution regardless of whether it succeeds or failed. Okay, so deletes your script immediately after execution regardless of whether it succeeded or fail. fail.

[00:34:03]Uh okay.

[00:34:17]Okay.

[00:34:20]For I Okay.

[00:34:28]Okay.

[00:34:29]>> [screaming] >> The bas instructs to create a file named password.txt.

[00:35:10]Okay. So, in the fold.

[00:35:25]Okay.

[00:35:28]So, Okay, can you understand?

[00:35:55]23.

[00:36:01]So uh in the 20 sorry 24 actually 24 directory.

[00:36:12]Okay.

[00:36:20]Bash createor.

[00:36:39]Okay.

[00:36:43]Give the nano.

[00:37:02]Uh extract password of footer.

[00:37:20]extracted password.

[00:37:28]Okay.

[00:37:36]Touch.

[00:37:52]So no worries.

[00:38:01]So I mean uh if you are following up please comment because so that I I'll also get it you are understanding what I'm trying to do.

[00:38:12]Okay. So password script file scriptsh Search.

[00:38:52]Okay.

[00:38:59]password.

[00:39:01]So pass 24 password.

[00:39:12]So, so tmp/ password txt script.sh in the script.

[00:39:57]What we call script CP. Okay. So okay my name my name.

[00:40:36]Okay.

[00:40:41]SH first already bestractice. lesson experiment 23.

[00:41:16]So CP script.

[00:41:31]24.

[00:41:38]Okay.

[00:41:44]24.

[00:41:46]Okay.

[00:41:48]Once in the scripting copy. Okay. Successfully it has been copied to this folder.

[00:41:58]So 24 executing and deleting all scripts.

[00:42:22]Exeute.

[00:42:24]Okay.

[00:42:40]Okay.

[00:42:50]A whole lot of them.

[00:43:22]in the script. Okay.

[00:43:36]Okay.

[00:43:38]Let's wait and see how it is coming back. Okay.

[00:43:50]So we wait for the 1 minute. Okay.

[00:44:19]We have to wait for 60 seconds. That is what it is happening.

[00:44:23]Okay. Close. Sorry.

[00:44:39]So last 60 seconds.

[00:44:41]I think we should get the script now.

[00:45:05]etc. Bunded passed 24 We have to wait. I mean, let's wait.

[00:45:54]No worries.

[00:45:56]Scriptor.

[00:46:12]Uh maybe password so that it will be easy for us to hold password.

[00:47:15]full permission.

[00:47:18]Okay.

[00:47:30]Shell script.

[00:47:32]Okay.

[00:47:54]So, it's better to do it again. Okay.

[00:48:00]So, Full permission.

[00:49:40]Okay.

[00:49:42]So scripting.

[00:50:08]Okay. So I hope this will be executed password/b password.

[00:51:00]Okay. Delete password.

[00:51:05]Super minute.

[00:51:12]So temporary password.

[00:51:39]24.

[00:51:42]Okay.

[00:52:00]mostly persistence. Okay.

[00:52:12]So 24 password almost like 30 seconds.

[00:52:30]Okay.

[00:52:52]So 24 successful 24 password.

[00:53:11]Okay. So we are going to write another shell script in if I remember that will be really cool. So I hope everyone is everyone is able to see the live migra.

[00:53:33]It will be helpful for me.

[00:54:11]Okay. So now my home um will go to the next level [snorts] side by side practice so that it will be helpful for you. You can ask your doubts too. So demon is listening on port.

[00:54:39]mean demon is listening on port 30,0002 30,000 listen and I will give the password for bund 25 if given the password for 24 and secret numeric fourdigit pin code in the password in the 24 password Okay. Fourdigit pin. Okay. There is no way to retrieve the pin code except by going through all the 10,000 combinations. Okay.

[00:55:15]Okay. 10,000 combinations.

[00:55:20]You don't need to create new connections each time.

[00:55:25]Okay.

[00:55:32]Depends on the scenario.

[00:55:35]Okay.

[00:55:40]Password password.

[00:56:03]Secret pin the secret 10,000 combination Okay.

[00:56:51]0 0 0 0000100 02 0 0300 03 1 0 0 1 0 0 1 2 0 30.

[00:57:36]Okay. So permutation combinations combination 0 0 mean 4 digitle 49 digit. Okay.

[00:57:57]So the combinations simple mathematical 1 into 2 into 3 into 4. Okay. 1 into two 2 into 3 6 6 into 4 24 actually. So I'm understanding it now. Okay. Now okay formula.

[00:58:40]So total number of total objects number of objects chosen at once. Okay.

[00:58:55]exclamation factorial factori. Okay.

[00:59:03]So combination stands for an combination 24 factorial.

[00:59:30]Simple mathematics.

[00:59:33]Okay.

[00:59:43]N - R factorial for the number of times. Okay.

[01:00:00]n is the total number of items. R is the number of total items you are selecting and arranging. So good. I have This is how you learn mathematics.

[01:00:41]This is part of engineering actually.

[01:00:43]Okay. So applying science and mathematics to solve a problem is called engineering.

[01:00:58]Okay. So that's why I'm trying to teach you here. Okay. So every total choices 10 digits. Okay.

[01:01:18]10 digit.

[01:01:20]Okay.

[01:01:46]the power.

[01:01:51]Okay.

[01:01:53]The digits are okay.

[01:02:24]So possibility first actually I was wrong. So the power.

[01:02:44]Okay.

[01:02:46]Number of equals. So, okay. So first four sorry 0 to 9 possibilities 2 3 4 5 6 7 8 9 slot combinations equal to four slots 10 ^ 10 into 10 into 10 into 10.

[01:03:45]Okay.

[01:03:48]Okay. N the power four. Okay. In the formula the power is the formula. Okay.

[01:04:09]So n into 4 n to the power n ^ r. Okay. The power r 10 ^ 4 into 10 into 10 10 into 10 100 into 10,000,000 into 10 10,000. Okay. up 10,000 possibilities.

[01:04:36]Okay. So, this is how you apply mathematics to solve a problem. Okay.

[01:04:41]So, R for okay so n facus r fac this is for different thing but the power okay so you don't need to create new connection each connection with combination of numbers already password already listening 3000 demon is listening local host 302 listening behind the process mean something is running behind Okay.

[01:05:49]Background process in Linux that runs independently of a user session and performs continuous task like handling network connection, scheduling or printing something running behind the demon. Okay. So without any user interaction so by supplying our combinations. Okay.

[01:06:11]Okay. So, okay.

[01:06:19]But I want to show you how to create it with this thing already temporary.

[01:06:38]Okay.

[01:06:39]So, already.

[01:07:21]Okay. So for I for Okay.

[01:07:44]01200 combination.

[01:07:54]Okay. So now password. Okay.

[01:08:20]So current password Okay.

[01:08:49]So, Done.

[01:09:13]Script.

[01:09:18]Okay.

[01:09:26]Okay.

[01:09:29]Local host.

[01:09:40]Okay.

[01:09:42]So okay password wrong password.

[01:10:15]Password for user 25. Yes.

[01:10:30]>> [crying] >> Yeah.

[01:11:19]Okay.

[01:11:25]password loop directly into NC. foreign.

[01:12:03]Okay.

[01:12:26]exe. But uh password Ir simple. Oh go.

[01:13:49]Let's see.

[01:14:00]You don't Okay, it's not coming.

[01:14:33]It's okay.

[01:15:02]You want go to the port?

[01:15:30]Come on.

[01:15:55]>> [snorts] >> I want to see how this is printed.

[01:16:08]Don't do nothing.

[01:16:23]So 398 39 397.

[01:16:37]Okay.

[01:16:40]3998 Correct.

[01:17:00]Oh, the B >> [crying] >> Nice.

[01:17:57]script.

[01:18:02]So, okay. Now, I have showed you since time is limited.

[01:18:08]I'm stopping here. experimentation but it hasn't printed.

[01:18:25]We might have got the thing socket Okay.

[01:18:45]Connection socket.

[01:19:03]Secret try and accept. Try and accept block.

[01:19:13]Okay.

[01:19:15]Loop range 10,000. Okay.

[01:19:51]Python file.

[01:19:58]Python.

[01:20:00]Okay, since we got into the next level since we are limited with time, I'm jumping on to the next level. So but it will be interesting for you to get to know that is the whole uh whole idea behind it.

[01:20:55]25.

[01:20:59]Okay, logging into 26 from should be fairly easy. The shell for use at 22 is not bin bash. Okay, but something else find out what it is, how it works and how to break it off.

[01:21:13]26.

[01:21:26]Note, if you are a Windows user and typically use PowerShell to SSH into bundell is known to cause issues with intended solutions to this level, you should use command prompt to instead target. Okay.

[01:22:12]Okay. Okay.

[01:22:22]already SSH privilem CH O 6 0 S.

[01:22:53]Okay.

[01:23:12]SSH.

[01:23:22]Okay.

[01:23:34]Level 26.

[01:23:50]connect.

[01:24:00]Every command Sorry. Bund 24 26 22 connection closed legacy to bin. Okay.

[01:24:57]Connection.

[01:25:23]Cat more va pd.

[01:26:19]Okay.

[01:26:28]Why is it closed?

[01:26:50]So, There is a folder called etc/s.

[01:27:10]Okay. So configuration database that stores essential information for all user accounts in systems.

[01:27:21]Okay.

[01:27:27]25. Okay.

[01:27:36]Okay.

[01:27:39]Okay.

[01:27:49]25.

[01:27:52]Okay.

[01:28:02]What does the login name for the specific user account the password has safely hidden okay the unique numeric ID level 10.

[01:28:34]Okay.

[01:28:36]Login shell. Instead of standard command prompt like bin bash, this user is restricted to a custom script called show text.

[01:28:52]So, show text.

[01:29:10]Custom script used as limited trap like login it is not about solving challenge. Uh Okay.

[01:29:44]So, it is not about finding the solution. It is about like finding the approach.

[01:30:08]approach.

[01:30:11]Okay.

[01:30:38]So because the login is custom scriptustom script so I know how to solve it. So screen.

[01:31:03]Okay. So I hope so.

[01:31:30]Okay.

[01:31:36]Connection stop. Okay.

[01:31:46]connection.

[01:32:08]Login.

[01:32:19]in the short extend.

[01:32:22]Okay.

[01:32:37]And there in the short text from slash USR/ USR/ export. What?

[01:33:52]So the short export sets the terminal environment variable to basic Linux text capabilities.

[01:34:20]replaces the active shell process with more page tooler to display the contents of text.

[01:34:29]Oh, okay. So replaces the active shell process.

[01:34:50]Active shell process more text.x Okay.

[01:35:03]Once more process finishing.

[01:35:21]What is more in SSH?

[01:35:44]more I mean terminal man.

[01:36:01]Okay.

[01:36:17]Okay.

[01:36:28]Okay.

[01:36:44]Okay.

[01:36:52]This is messing up my terminal. Okay.

[01:36:55]So, Close the more interact.

[01:37:12]Output Display.

[01:37:39]Okay.

[01:37:47]Interact.

[01:37:49]Okay. process 66% 83% close.

[01:38:07]Okay. What do we What do we need to look good? Okay.

[01:38:43]more interactive.

[01:39:03]more more interest.

[01:39:14]So take Okay.

[01:39:38]recommend order ID.

[01:40:12]Lightweight terminal based text editor.

[01:40:14]Okay.

[01:40:19]Okay. So read command line based terminal based text editor command.

[01:40:46]Okay.

[01:40:58]Read. It is used to command to mode to insert read the contents of another file directly in your current open file.

[01:41:04]Placing the text on the below. So current contents of the another cont.

[01:41:35]Okay.

[01:42:08]password.

[01:42:20]We got the password.

[01:42:23]So, etc. Password Bash 22.

[01:43:03]Okay.

[01:43:10]What is USR?

[01:43:15]primary folder where most of your daily programs the name is short for user system resource I think program files for everyone to use.

[01:43:34]Okay. So, USR stand there standard user can run the program inside. Okay. So, so Terminal export terminal Linux terminal exec process.

[01:44:42]Okay.

[01:44:48]RC home.

[01:44:57]So text.

[01:45:02]Okay.

[01:45:06]Okay.

[01:45:15]used to replace the current shell.

[01:45:18]Current edminal based. Okay.

[01:46:11]Okay, I mean we still So basic. So Okay.

[01:47:17]Okay. Socess 27. Okay. This will be confusing but full text file text.xt full text.xt exit current terminal. So current shell.

[01:47:49]Okay.

[01:48:09]password.

[01:48:22]26.

[01:48:32]Sorry.

[01:48:36]So once 26 password 26 password actually so 25 to 26 26 I mean 25 to 26. We are okay with that. But 26 to 27.

[01:49:21]Good job getting a shell. Now hurry up and grab the password for Bundy 27.

[01:49:27]Okay. So, 27 Okay. So, password.

[01:50:16]Okay.

[01:50:22]Okay.

[01:50:32]We claim Okay. So, 27.

[01:51:21]So, the level hasn't been completed yet.

[01:51:24]So, screen because the custom script. So, so no worries.

[01:52:12]So set actually 26 to 27.

[01:52:26]Set command shell options. Set you don't No worries.

[01:53:13]Set shell shell equal to bin sh bin bin uh bin / shar bin This has bash for another bubble.

[01:54:24]We have to trial and error.

[01:54:48]Change the shell to bash. Okay.

[01:54:56]for set. Uh, as I already told Get out of this. Okay.

[01:56:10]set.

[01:56:20]Okay.

[01:56:24]Shouta Inside the video on the tripod.

[01:57:00]escape / okay because this is some kind of a hectic process but still we'll try to crack it.

[01:57:22]Okay, but still this is a good experience for us.

[01:57:52]be good for you, too.

[01:58:18]So current that is the whole pointal / bash So in the insert mode insert mode.

[01:58:57]So, soal setal bash custom script local shell variable named shell but doesn't change your current command line but actually temporar you can verify this okay so temporary switch current session only type the path directly to launch.

[02:00:01]Oh, echo. Okay. Sorry. Echo.

[02:00:10]Okay.

[02:00:28]So that is the whole point we need to understand something custom script has been in the background.

[02:00:44]Okay.

[02:00:50]So this is one of the bypass method.

[02:00:51]Okay.

[02:01:05]binary. Okay.

[02:01:14]Um this is like a dynamically linked file. Okay. So, okay.

[02:01:39][sighs] Okay.

[02:01:52]for 26.

[02:02:03]So txt mean so previous. So exit. So previous we have a temporary shell now. So we don't have to waste it.

[02:02:31]Bundit dot slash dot / bundit in the file cat. So, okay. Cat etc. Okay.

[02:02:51]28 27. Okay.

[02:02:56]So, we'll try to complete uh the whole thing. Okay.

[02:03:10]So hi.

[02:03:18]Hi. Thank you.

[02:03:21]So very interesting.

[02:03:26]I think it will be efficient for us to you in a suitable um efficient for us to understand uh how a custom script can be like bypassed.

[02:03:39]Okay.

[02:03:55]Anything you have any doubt related to cyber security and also So this is very messy.

[02:04:57]Level 27 level. Okay.

[02:05:13]Successfully logged in. Okay.

[02:05:25]Let's see 27 to 28. There is a g repository. Uh okay, this is getting interesting. Uh g there is a git repository at SSH bund.

[02:05:36]Okay. Home get repo via the port 222.

[02:05:40]The password for the 27 G is the same as the user for okay for your local machine not the clone the repository file from your local machine not the over the wide machine.

[02:05:55]Okay. So local version control version control system. Okay. Tracks changes for every file means.

[02:06:33]Okay.

[02:06:36]So, okay. This is an interesting fact actually. So version 27 password for the user password. Okay.

[02:07:16]Uh clone clone clone the repository and find the password.

[02:07:36]Okay. So get clone SSH in the command port in the port.

[02:08:09]Cloning repo. Permission denied could not read the read from repository. Okay.

[02:08:43]There you go.

[02:08:56]Clone report.

[02:09:00]Okay.

[02:09:31]Public permission denied.

[02:09:35]Oh, okay. Sorry.

[02:09:52]Okay.

[02:10:02]password.

[02:10:07]Okay.

[02:10:09]100% receiving objects.

[02:10:12]Okay.

[02:10:28]read me.

[02:10:32]Okay. Password for the simpleific.

[02:10:55]Let's see.

[02:11:10]Okay, let's see how it is related 28 to 29.

[02:11:21]Okay.

[02:11:24]Local tempire get so mess up.

[02:11:52]Okay.

[02:11:54]Okay. So tempostory already same as the user.

[02:12:17]Okay.

[02:12:23]password.

[02:12:30]Okay, super temporary isolated.

[02:12:43]Okay.

[02:12:45]So, so I'll explain.

[02:12:50]Meanwhile, uh we'll see this. So, we are trying to enumerate this repository.

[02:13:04]There is Okay. Sorry.

[02:13:11]Bund some nodes for level 29 read.

[02:13:23]Okay.

[02:13:38]Read me file. Okay.

[02:13:57]text in the repository.

[02:14:12]So the details related to this challenge from your local machine. Okay. Find the password then version version.

[02:15:15]Okay. So, okay. So, okay. So entire project management.

[02:15:32]So simple version. So version.

[02:15:54]Okay. So you can use it. It will be updated.

[02:15:58]Okay. So, okay.

[02:16:15]So, Get log commit history.

[02:16:38]It lists all the record changes made to a project in reverse chronological order. Most recent commits first. So first most recent com.

[02:16:50]Okay. So, get log padme.

[02:17:00]Okay. Super.

[02:17:03]Okay.

[02:17:18]Okay.

[02:17:28]previous value.

[02:17:34]Okay.

[02:17:46]So master branch. Okay. So, so previous version.

[02:18:11]Okay. So, okay.

[02:18:20]simple. Okay. So, okay.

[02:18:45]28 29 sorry 28 29 actually we have almost reached the almost reached 30 okay we'll complete it Okay.

[02:19:08]Okay.

[02:19:17]MKD don't know. So don't clone. Okay.

[02:19:37]Get 29 29 29 password.

[02:19:58]Okay.

[02:20:06]No passwords in production.

[02:20:15]Sorry.

[02:20:26]So log file log.

[02:20:30]Okay. So different.

[02:20:37]So okay.

[02:20:42]So so we have to check out the list of branches.

[02:20:46]So branch independent line of development that acts as separate workspace Workspace testing production pre-production development stages Maximum primary authority baseline that stores stable production ready.

[02:21:51]Okay.

[02:21:54]Okay.

[02:21:55]The technique. So branches.

[02:22:15]Okay.

[02:22:19]Okay.

[02:22:22]Uh change branch get ah get check out to change or switch branches in g use the command g switch or get checkout. Okay. Get switch.

[02:22:45]Get switch. Okay.

[02:22:51]Origin.

[02:22:52]Okay.

[02:23:08]Okay.

[02:23:10]master.

[02:23:14]So start.

[02:23:16]Okay.

[02:23:18]So get log.

[02:23:36]Okay.

[02:23:38]So Oh, cat read.

[02:23:47]Okay. So, separate workspace.

[02:24:08]Okay.

[02:24:15]Okay.

[02:24:31]password.

[02:24:34]Okay. But master read.

[02:24:58]Okay. So that is the whole point here.

[02:25:02]So proof. Okay.

[02:25:16]Okay.

[02:25:18]Secure. Okay. So development security operations team.

[02:25:23]Git repository.

[02:25:27]So possibility.

[02:25:40]Okay. So exit exit level 30. Okay.

[02:26:03]So we'll go through get itself. So I think it will be finished within like 20 minutes. Let's see depends.

[02:26:15]Okay. Temporary MK S3 in MKD TMP3. Okay. TMP3.

[02:26:35]Okay.

[02:26:37]Uh Okay.

[02:26:51]30 30. Okay.

[02:27:01]So, password.

[02:27:06]Okay.

[02:27:09]CD repo ls read me just an empty file.

[02:27:19]So okay.

[02:27:22]Okay.

[02:27:37]list of get commands get add I'm a hacker give resto commands.

[02:28:16]Okay. So perspective assignment get enumeration focus on uncovering hidden metadata credentials sensitive history and infrastructure details.

[02:28:26]Okay. So display release tag which helps me out software versioning and potential n vulnerabilities tag. What is g tag?

[02:28:50]G tag is a im mark or bookmark that points to a specific commit in a repository history. Okay. used to label software.

[02:29:03]Okay.

[02:29:08]Secret.

[02:29:12]Okay.

[02:29:17]to tag.

[02:29:30]Get show. Uh suppose get shown to view the comprehensive detail of specific tag including the author data annotation.

[02:29:46]secret.

[02:29:49]Okay. So, Okay, simple.

[02:30:19]Okay, we have successfully logged in.

[02:30:21]The password is correct. It seems level 31 to 32. 31 to 32.

[02:30:28]We can finish it.

[02:30:31]Okay.

[02:30:39]4. Okay.

[02:30:59]Okay.

[02:31:13]Okay, this time your task is to push a file to remote repository. Uh file name key.txt txt master.

[02:31:24]What is push upload your locality?

[02:31:43]Okay. So every push This good system.

[02:32:19]password.

[02:32:21]Password password if not ready. If not already done.

[02:32:54]Okay.

[02:32:57]Link your local folder to remote repository. Get remote.

[02:33:12]Okay. Nano key txt.

[02:33:19]Okay.

[02:33:26]Master for one file.

[02:33:45]Add Are you key.xt.

[02:34:21]What does get add doparate?

[02:34:32]Moves changes from local working directory. Local working directory staging area. Okay. Also known as index.

[02:34:42]Okay. Step-bystep process. Okay.

[02:34:55]way to include next repository snapshot before we are committing to it.

[02:35:04]Okay.

[02:35:13]Okay.

[02:35:16]Y key dot txt master default. Okay. Your name and email address were configured automatically based on your username and host name.

[02:35:48]Please check they are accurate and okay.

[02:35:51]Okay.

[02:36:01]Upload your local commit to central server.

[02:36:15]Uh default branch name upload your local command to central command. Okay.

[02:36:57]So, get push origin uploads your local commits to remote repository with sources central for your project. Okay.

[02:37:04]origin.

[02:37:07]Okay.

[02:37:24]Okay.

[02:37:31]key.x.

[02:37:43]Okay.

[02:37:47]Okay.

[02:37:48]So, okay. Fail to push ref.

[02:37:59]Okay. Well done. Here is the password to next level.

[02:38:05]Counting objects. Delta comparison using. Okay. Writing objects refused.

[02:38:11]Attempting to validate files. Remote.

[02:38:14]Okay. Well done. Here's the password.

[02:38:27]forcess repository.

[02:38:47]Remote server compromise repository.

[02:39:03]So hi I mean Linux hacking challenge. So already four part of the video.

[02:39:27]Node Repository NodeJS.

[02:39:42]Okay.

[02:39:56]NodeJS local systemic Node JS Supply NodeJS is so supply chain compromise supply chain attack compromise access the widely used JavaScript attackers maintenance account the published malicious versions containing malware that dropped the remote access txt entire organization even Docker instance.

[02:41:36]Okay. So background supply chain compromis Windows, Linux, Mac.

[02:42:08]Oh, super super service.

[02:42:12]Okay. So, logic. Okay.

[02:42:20]But there is a big thing that they trying to explain.

[02:42:31]Okay. So reverse engineer. Okay. So that is the whole point of this challenge.

[02:42:47]password.

[02:42:56]Okay.

[02:43:00]Okay. But it was interesting. I hope so.

[02:43:04]I'm thinking for you because G is also very important to know. Okay.

[02:43:18]Lucrative for attractive for attackers.

[02:43:36]We almost come to the end.

[02:43:40]Oh, welcome to the upperase shell. Upper case shell.

[02:43:47]Okay.

[02:43:53]Okay.

[02:44:05]Okay.

[02:44:07]So, so our termin is showing SH1. Okay.

[02:44:11]SH1.

[02:44:13]Okay.

[02:44:29]Yes. message uh message 20 31 32 but 31 already session.

[02:45:06]Okay.

[02:45:24]Simple cat.

[02:45:43]Okay.

[02:45:51]Okay.

[02:45:53]But uh Okay.

[02:45:55]Okay. Permission denied.

[02:46:04]Okay.

[02:46:54]I'm trying to understand.

[02:46:57]Okay.

[02:47:16]Capital variable dollar zero incript.

[02:47:49]Okay. Special variable holds the name or path used to invoke the shell itself.

[02:48:23]312.

[02:48:31]Okay.

[02:48:32]trying to understand current.

[02:48:37]Okay.

[02:48:39]31. Okay.

[02:49:03]Okay.

[02:49:26]Okay.

[02:49:29]Okay.

[02:49:47]so that I can explain clearly.

[02:50:16]Hi. Hi.

[02:50:19]So MacBook Pro specs service uh service.

[02:50:29]So it is M4 uh port pro M4 Pro.

[02:50:36]So name or path used to invoke script.

[02:50:48]Okay. Shell itself.

[02:51:09]Okay. So, no worries.

[02:51:46]So escape character.

[02:51:59]So Permission sh What does sh C command do?

[02:52:43]SHCash.

[02:53:05]So okay.

[02:53:13]So Okay.

[02:53:50]Okay.

[02:54:02]Z.

[02:54:04]Okay. Echo.

[02:54:07]Echo.

[02:54:10]Okay. Super use. Okay.

[02:54:28]Okay. Uh we see that 332.

[02:54:47]Okay. Who am I 20 33? Okay. 33 Bundy 32 access. Okay.

[02:55:04]So 33 sorry 33. Okay.

[02:55:27]So 323mm 33. Okay, I think I am making sense.

[02:56:03]read.

[02:56:06]So since when the current shell access we'll be able to retrieve the password bandit data pass. So let's bund it 33. Okay, I hope I'm making sense. First I'm just summarizing again.

[02:57:00]Correct.

[02:57:06]zero shell script current is a special variable that expands the name used Okay. So this is the whole point. So escape 33. Okay.

[02:57:49]So we are end of the we are coming to the end of the series.

[02:57:57]Last final readme.txt. Okay. 33 to 34. Okay. 334.

[02:58:08]Okay. So congratulations on solving the last level of this game. At this moment there are no more levels to play in this game.

[02:58:19]However, we are constantly working. I mean, but I think last level you got an idea.

[02:58:26]I think so.

[02:58:38]So that is the whole thing.

[02:58:44]Echo Okay.

[02:58:59]Okay. So in the escape character It's a special variable that expands to name used to invoke the script itself.

[02:59:38]Okay. So now execute level 33.

[03:00:13]Okay. Level 31. Okay. 31.

[03:00:19]We'll try 31. 31 Z bash command not Okay. Okay.

[03:00:56]So, not found. Did you mean dollar >> [clears throat] >> So, okay.

[03:01:40]SH SH.

[03:01:56]Okay.

[03:02:10]So in the upper case basic so upper shell arrow because it should not be confusing, right? Okay. Hello, bro. So, so the whole part so I'll give you 10 minutes. So, I think uh we have we have completed the level actually.

[03:02:58]We have completed the level actually.

[03:03:02]Well, that there are no more levels.

[03:03:06]Okay.

[03:03:20]So, I'll give you 10 minutes if you have I mean I'll answer you. I'm giving you time because uh next week next next week I'll come with a different different CTF. Okay, I'll think and come with a different CTF so that we we can have a funfilled challenge. Okay, so comment. I'll try to answer your question.

[03:04:28]question.

[03:04:32]So we have completed all the things we have successfully completed within okay as I have given commitment.

[03:04:41]So I told you that I'll come live and uh live or give a recording and show you the all challenge. Since you have completed all the things we are left with questions for today cyber security.

[03:04:56]So I'll give another like five minutes.

[03:05:00]So that is the whole thing.

[03:05:41]I'll happy to answer your questions. If there is no questions, we can end this live. I'll give another one or two minutes.

[03:06:06]If there is no questions, I think we can end the session. I'll give another one minute.

[03:06:20]Okay.

[03:06:28]So audit will come with different challenges, different uh scenarios that will cover the basics and fundamentals of cyber security. So this bund challenge will help you challenge the challenge bashting and then we have covered about how credentials can be stolen how it can be enumerated.

[03:07:04]So we have learned a lot about Linux. I think how to break it, how to how we can like approach to fix it.

[03:07:12]Vulnerability in the sense weak vulnerability is something that related to software or something you can say but weakenes worldwide. So crucial. So okay. So whether it can be ethical hacker or nonical hacker. So everyone should know the basics and fundamentals with help of like so.

[03:08:11]So okay. So that is the whole point of this live. So I think I have covered better things for you. So subscribe to the channel. Uh I'll I'm giving commitment uh to get into live every week or I'll give a recording of any series of challenges or CTF.

[03:08:36]So, so many of the people asked how can I learn cyber security? This is how you learn cyber security basically. So, okay. When I started my journey, so that is the whole point. So, playing these CTFs will give you uh uh a strong foothold on the needed things in cyber security to be honest. Okay. So, that is the whole point.

[03:09:09]I think uh I covered almost all the things. So we can end the live here. Uh question so I'll answer the questions. So see you all. Uh we'll see you in the next live.

[03:09:23]Bye.