Bandit01 / 09
The starter wargame for Linux terminal skills — SSH, reading files, permissions and basic tools. You can begin from scratch.
bandit.labs.overthewire.org:2220
writeups →
Work through the OverTheWire wargames with level-by-level writeups, and learn the concepts through wargame-independent topic guides — all in one repo, by watching the terminal. 🐧
OverTheWire is a free platform that teaches Linux and security skills in a game format. From beginner to advanced, in the recommended order:
The starter wargame for Linux terminal skills — SSH, reading files, permissions and basic tools. You can begin from scratch.
Binary analysis and simple exploit techniques. You inspect binary behaviour with ltrace/strace. Bandit recommended first.
Cryptography fundamentals — from classic ciphers to modern approaches. You crack encrypted messages.
Web security — HTTP, source-code analysis, SQL injection, XSS and more. Played in the browser.
Binary exploitation — buffer overflow, format string and basic exploit development. Requires reading assembly.
Intermediate binary exploitation. More complex scenarios than Narnia, ASLR and various protections.
Advanced binary exploitation. Minimum hints, maximum difficulty — for experienced exploit developers only.
Mixed binary exploitation & RE — a different vulnerability class each level: TOCTOU, library hijack, self-modifying code, FSOP, ELF parser, format string. A capstone after Behemoth + Utumno.
A broad lab that begins with network/socket programming and walks the entire classic binary-exploitation curriculum — endianness, overflow, format string, heap, ret2libc/ROP, then cryptanalysis + RE/keygen. Source isn't given at most levels.
Files where commands and concepts are kept as wargame-independent reference — now all readable inside the site. Click a category to open the reader.
The guides explain the method, not the passwords (except Krypton, where the password is the decryption output). Try it yourself first, then look if you get stuck.
A curated selection of external resources collected in the repo — for when you want to go deeper.