Over The Wire


Bandit

Host: bandit.labs.overthewire.org

Port: 2220



Level 29

ssh bandit29@bandit.labs.overthewire.org -p 2220
password: tQKvmcwNYcFS6vmPHIUSI3ShmsrQZK8S

Objective:

There is a git repository at ssh://bandit29-git@localhost/home/bandit29-git/repo via the port 2220. The password for the user bandit29-git is the same as for the user bandit29.

Clone the repository and find the password for the next level.

CLI:

bandit29@bandit:~$ mktemp -d
/tmp/tmp.kLJgDrE6Pl
bandit29@bandit:~$ cd /tmp/tmp.kLJgDrE6Pl

bandit29@bandit:/tmp/tmp.kLJgDrE6Pl$ git clone ssh://bandit29-git@localhost:2220/home/bandit29-git/repo
Cloning into 'repo'...
bandit29-git@localhost's password:
remote: Enumerating objects: 16, done.
remote: Counting objects: 100% (16/16), done.
remote: Compressing objects: 100% (11/11), done.
remote: Total 16 (delta 2), reused 0 (delta 0), pack-reused 0
Receiving objects: 100% (16/16), done.
Resolving deltas: 100% (2/2), done.

bandit29@bandit:/tmp/tmp.kLJgDrE6Pl$ ls
repo
bandit29@bandit:/tmp/tmp.kLJgDrE6Pl$ cd repo
bandit29@bandit:/tmp/tmp.kLJgDrE6Pl/repo$ ls -la total 16
drwxrwxr-x 3 bandit29 bandit29 4096 Apr 2 20:25 .
drwx------ 3 bandit29 bandit29 4096 Apr 2 20:25 ..
drwxrwxr-x 8 bandit29 bandit29 4096 Apr 2 20:25 .git
-rw-rw-r-- 1 bandit29 bandit29 131 Apr 2 20:25 README.md

bandit29@bandit:/tmp/tmp.kLJgDrE6Pl/repo$ cat README.md
# Bandit Notes
Some notes for bandit30 of bandit.

## credentials

- username: bandit30
- password:

bandit29@bandit:/tmp/tmp.kLJgDrE6Pl/repo$ git branch -a
* master
remotes/origin/HEAD -> origin/master
remotes/origin/dev
remotes/origin/master
remotes/origin/sploits-dev

bandit29@bandit:/tmp/tmp.kLJgDrE6Pl/repo$ git checkout dev
Branch 'dev' set up to track remote branch 'dev' from 'origin'.
Switched to a new branch 'dev'
bandit29@bandit:/tmp/tmp.kLJgDrE6Pl/repo$ ls -la
total 20
drwxrwxr-x 4 bandit29 bandit29 4096 Apr 2 20:26 .
drwx------ 3 bandit29 bandit29 4096 Apr 2 20:25 ..
drwxrwxr-x 2 bandit29 bandit29 4096 Apr 2 20:26 code
drwxrwxr-x 8 bandit29 bandit29 4096 Apr 2 20:26 .git
-rw-rw-r-- 1 bandit29 bandit29 134 Apr 2 20:26 README.md

bandit29@bandit:/tmp/tmp.kLJgDrE6Pl/repo$ cat README.md
# Bandit Notes
Some notes for bandit30 of bandit.

## credentials

- username: bandit30
- password: xbhV3HpNGlTIdnjUrdAlPzc2L6y9EOnS

bandit29@bandit:/tmp/tmp.kLJgDrE6Pl/repo$

Bandit