Over The Wire

Bandit

Host: bandit.labs.overthewire.org

Port: 2220

Level 28

ssh bandit28@bandit.labs.overthewire.org -p 2220
password: AVanL161y9rsbcJIsFHuw35rjaOM19nR

Objective:

There is a git repository at ssh://bandit28-git@localhost/home/bandit28-git/repo via the port 2220. The password for the user bandit28-git is the same as for the user bandit28.

Clone the repository and find the password for the next level.

CLI:

bandit28@bandit:~$ mktemp -d
/tmp/tmp.KWGAJSSlGx
bandit28@bandit:~$ cd /tmp/tmp.KWGAJSSlGx

bandit28@bandit:/tmp/tmp.KWGAJSSlGx$ git clone ssh://bandit28-git@localhost:2220/home/bandit28-git/repo
Cloning into 'repo'...
bandit28-git@localhost's password:
remote: Enumerating objects: 9, done.
remote: Counting objects: 100% (9/9), done.
remote: Compressing objects: 100% (6/6), done.
remote: Total 9 (delta 2), reused 0 (delta 0), pack-reused 0
Receiving objects: 100% (9/9), done.
Resolving deltas: 100% (2/2), done.

bandit28@bandit:/tmp/tmp.KWGAJSSlGx$ ls
repo
bandit28@bandit:/tmp/tmp.KWGAJSSlGx$ cd repo
bandit28@bandit:/tmp/tmp.KWGAJSSlGx/repo$ ls -la
total 16
drwxrwxr-x 3 bandit28 bandit28 4096 Apr 2 20:04 .
drwx------ 3 bandit28 bandit28 4096 Apr 2 20:04 ..
drwxrwxr-x 8 bandit28 bandit28 4096 Apr 2 20:04 .git
-rw-rw-r-- 1 bandit28 bandit28 111 Apr 2 20:04 README.md

bandit28@bandit:/tmp/tmp.KWGAJSSlGx/repo$ cat README.md

# Bandit Notes
Some notes for level29 of bandit.

## credentials

- username: bandit29
- password: xxxxxxxxxx


bandit28@bandit:/tmp/tmp.KWGAJSSlGx/repo$ git log
commit 14f754b3ba6531a2b89df6ccae6446e8969a41f3 (HEAD -> master, origin/master, origin/HEAD)
Author: Morla Porla
Date: Thu Oct 5 06:19:41 2023 +0000

fix info leak

commit f08b9cc63fa1a4602fb065257633c2dae6e5651b
Author: Morla Porla
Date: Thu Oct 5 06:19:41 2023 +0000

add missing data

commit a645bcc508c63f081234911d2f631f87cf469258
Author: Ben Dover
Date: Thu Oct 5 06:19:41 2023 +0000

initial commit of README.md
bandit28@bandit:/tmp/tmp.KWGAJSSlGx/repo$ git show f08b9cc63fa1a4602fb065257633c2dae6e5651b
commit f08b9cc63fa1a4602fb065257633c2dae6e5651b
Author: Morla Porla
Date: Thu Oct 5 06:19:41 2023 +0000

add missing data
bandit
diff --git a/README.md b/README.md
index 7ba2d2f..b302105 100644
--- a/README.md
+++ b/README.md
@@ -4,5 +4,5 @@ Some notes for level29 of bandit.
## credentials

- username: bandit29
-- password:
+- password: tQKvmcwNYcFS6vmPHIUSI3ShmsrQZK8S

bandit28@bandit:/tmp/tmp.KWGAJSSlGx/repo$

Bandit