Level15

Level Goal

The password for the next level can be retrieved by submitting the password of the current level to port 30001 on localhost using SSL encryption.

Solution

The goal of this level is similar to the last, except we now have to connect using SSL. We can still accomplish this using the ncat utility by passing the –ssl flag.

root@0xCAB: /writeups/overthewire/bandit/level15/

$ cat /etc/bandit_pass/bandit15
jN2kgmIXJ6fShzhT2avhotn4Zcka6tnt

$ ncat --ssl 127.0.0.1 30001
jN2kgmIXJ6fShzhT2avhotn4Zcka6tnt
Correct!
JQttfApK4SeyHwDlI9SXGR50qclOAil1

$

We can also use the openssl s_client utility for this.

root@0xCAB: /writeups/overthewire/bandit/level15/

$ openssl s_client -connect 127.0.0.1:30001
CONNECTED(00000003)
...
read R BLOCK
jN2kgmIXJ6fShzhT2avhotn4Zcka6tnt
Correct!
JQttfApK4SeyHwDlI9SXGR50qclOAil1

$