OverTheWire Bandit
34 levels of Linux and shell fundamentals, one writeup per level.
14 writeups
-
Bandit 0 → 1: getting a foothold
Aug 05, 2026
The one where you just have to get in the door — SSH basics and reading your first file.
-
Bandit 1 → 2: the file called -
Aug 06, 2026
A filename made of one character the shell had already claimed.
-
Bandit 2 → 3: spaces in the filename
Aug 06, 2026
Whitespace is an argument separator before it's a character in a name.
-
Bandit 3 → 4: the empty directory that isn't
Aug 06, 2026
ls told me there was nothing there. ls was being polite.
-
Bandit 4 → 5: file before cat
Aug 06, 2026
Ten files, one of them readable — and a command that tells you which without printing any of them.
-
Bandit 5 → 6: three properties, one file
Aug 06, 2026
Twenty directories, one file that matches the description — and a lesson about which filter to reach for.
-
Bandit 6 → 7: searching the whole filesystem, quietly
Aug 06, 2026
The level where ls stops helping, and where 2>/dev/null finally made sense.
-
Bandit 7 → 8: don't read the file, search it
Aug 06, 2026
I cat'd a four-megabyte file into my terminal so you don't have to.
-
Bandit 8 → 9: the line that only happens once
Aug 07, 2026
A file full of passwords where the only thing marking the real one is that it isn't repeated.
-
Bandit 9 → 10: readable text in a binary file
Aug 07, 2026
Most of the file isn't text. The password is, and it's wearing a marker.
-
Bandit 10 → 11: base64 is not a lock
Aug 07, 2026
Encoded, not encrypted — and one flag undoes it.
-
Bandit 11 → 12: rot13, and what I got wrong about it
Aug 07, 2026
Every letter shifted thirteen places — plus a mistake I made reading the command.
-
Bandit 12 → 13: the hexdump matryoshka
Aug 07, 2026
Over an hour, split across a morning and an afternoon. The level that made me learn what /tmp is for.
-
Bandit 13 → 14: the key that wouldn't open the door next to it
Aug 08, 2026
An SSH key instead of a password, a localhost that refused, and an hour of finding out why scp is on the allowed list.