Over The Wire

Bandit

Host: bandit.labs.overthewire.org

Port: 2220

Level 27

ssh bandit27@bandit.labs.overthewire.org -p 2220
password: YnQpBuifNMas1hcUFk70ZmqkhUU2EuaS

Objective:

There is a git repository at ssh://bandit27-git@localhost/home/bandit27-git/repo via the port 2220. The password for the user bandit27-git is the same as for the user bandit27.

Clone the repository and find the password for the next level.

CLI:

bandit27@bandit:~$ mktemp -d
/tmp/tmp.KuHdXPAYk2
bandit27@bandit:~$ cd /tmp/tmp.KuHdXPAYk2
bandit27@bandit:/tmp/tmp.KuHdXPAYk2$ ls

bandit27@bandit:/tmp/tmp.KuHdXPAYk2$ git clone ssh://bandit27-git@localhost:2220/home/bandit27-git/repo
Cloning into 'repo'...
bandit27-git@localhost's password:
remote: Enumerating objects: 3, done.
remote: Counting objects: 100% (3/3), done.
remote: Compressing objects: 100% (2/2), done.
remote: Total 3 (delta 0), reused 0 (delta 0), pack-reused 0
Receiving objects: 100% (3/3), done.

bandit27@bandit:/tmp/tmp.KuHdXPAYk2$ ls
repo
bandit27@bandit:/tmp/tmp.KuHdXPAYk2$ cd repo
bandit27@bandit:/tmp/tmp.KuHdXPAYk2/repo$
bandit27@bandit:/tmp/tmp.KuHdXPAYk2/repo$ ls -la
total 16
drwxrwxr-x 3 bandit27 bandit27 4096 Apr 2 19:43 .
drwx------ 3 bandit27 bandit27 4096 Apr 2 19:43 ..
drwxrwxr-x 8 bandit27 bandit27 4096 Apr 2 19:43 .git
-rw-rw-r-- 1 bandit27 bandit27 68 Apr 2 19:43 README
bandit27@bandit:/tmp/tmp.KuHdXPAYk2/repo$ cat README
The password to the next level is: AVanL161y9rsbcJIsFHuw35rjaOM19nR
bandit27@bandit:/tmp/tmp.KuHdXPAYk2/repo$

Bandit