Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
World desk3 min

What Is OverTheWire Bandit and How Do Its Levels Work?

OverTheWire Bandit is a beginner-friendly SSH wargame: solve each level’s goal, use what you find to access the next, and build practical command-line skills along the way.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

OverTheWire Bandit is a free, online command-line wargame for absolute beginners. You connect to it over SSH, solve a goal at each level, and use the information you uncover to access the next one. Its challenges build practical familiarity with files, text, network services and SSH—not a single command or trick.

How Bandit level progression works

Bandit is arranged as a sequence of level pages. Start at Level 0, then follow each page’s instructions to reach the next stage. A level is complete when you solve its goal; the result—usually a password or other access information—lets you log in for the next level. The official Bandit overview describes the game as aimed at absolute beginners and intended to teach basics useful in other wargames.

As an Amazon Associate I earn from qualifying purchases.

The first transition illustrates the pattern: at Level 0 → Level 1, find a file called readme in the home directory and use the password in it to log in as bandit1. The Level 0 → Level 1 instructions describe that goal and warn that passwords are not saved automatically and may occasionally change.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to start Level 0

The official Level 0 page gives the connection target and initial credentials. You need an SSH client and an internet connection; the instructions do not require buying a particular device or book.

  1. Open a terminal with an SSH command available.
  2. Connect to bandit.labs.overthewire.org on port 2220 using the username bandit0. The initial password is also bandit0: ssh [email protected] -p 2220.
  3. When prompted, enter bandit0 as the password. Password characters may not appear while you type; submit the entry normally.
  4. Once connected, read the current level’s goal and work out how to meet it. After solving it, follow the next level page to continue.

What kinds of skills do the levels use?

The levels apply everyday command-line ideas in different contexts. The examples below are representative, not a complete inventory of the game.

Example level Task type What it exercises
Level 9 → Level 10 Finding readable text in data Searching or inspecting file contents to locate a human-readable string preceded by equals signs.
Level 16 → Level 17 Network services and SSL/TLS Identifying listening ports and distinguishing services that use SSL/TLS.
Level 13 → Level 14 SSH key handling Using a supplied private key to make the next login.
Level 25 → Level 26 Working with a nonstandard shell Adapting when the login environment behaves differently from a typical shell; the level page also includes a Windows note.

Across the sequence, the official goals include file inspection, encoded text, network services, SSL/TLS and SSH keys. The point is to learn how to investigate a goal using the command line, not to memorize one fixed recipe.

How to get unstuck without skipping the learning

Use the system’s built-in documentation and the feedback the game gives you. The Bandit overview recommends reading a command’s manual with man <command>, and using help <command> for shell built-ins. The official level guidance also emphasizes paying attention to error messages and points to a hint file for a later challenge.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Read the goal carefully and check the files, names and permissions in the current account before guessing.
  • Look up unfamiliar commands and options in their manual pages; use shell help for built-ins.
  • Read errors as clues. They can show whether a path, command, permission or connection is the problem.
  • Keep your own local notes, including passwords you need for later logins. The game does not save them automatically, and they may change.
  • If you remain stuck, the overview points players to the project’s chat for help.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

SSH troubleshooting: “broken pipe” in a virtual machine

The official overview notes that some virtual-machine network adapters configured for NAT may produce an SSH “broken pipe” error. It suggests adding IPQoS throughput to /etc/ssh/ssh_config; if that does not resolve the problem, it recommends changing the adapter to bridged networking. These are the site’s suggestions for this particular issue, not a guarantee for every operating system or network setup. If you change SSH configuration, follow your system’s documentation and consider asking an administrator if the machine is managed.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.