Let The Wargames Begin
Decided to try my hand at playing through a wargame. A wargame is an ethical and legal hacking and cracking environment where users get to test their computer skills as they progress from level to level.
ssh -l level1 io.smashthestack.org -p2224
This command on a linux terminal allows you to access the wargames network. I'm doing this project solo and in secret. Eventually I would like to be able to join one of the local / international capture the flag tournament with a team... It would be nice to have a team... I'm not entirely sure if I would be able to find my dream team at university... Thankfully, I have two very close people that would probably be very interesting in giving the wargames a go.
How to get started ------------------
Currently you are "level1" user. This means you can access only files that are owned by level1, or are accessible by everybody. (or accessible to one of the groups you belong)
level1@io:~# cd /levels level1@io:/levels# ls -las level01 8 -r-sr-x--- 1 level2 level1 7500 Nov 16 2007 level01
When you run it will ask you for a password. Which you must somehow find. Given the correct password it will launch a new shell with level2 rights.
level1@io:/levels$ ./level01 [something you have to figure out goes here] Win. level1@io:/levels$ id uid=1001(level1) gid=1001(level1) euid=1002(level2) groups=1001(level1),1029(nosu) ----------------- \_________> new privileges
as you can see, by the output of the "id" command you now have euid (effective user id) of level2. You can now read files that belong to level2. The point is to use this right to read the password file for the next level.
level1@io:/levels$ cat /home/level2/.pass [BINGO YOU DID IT]
