Over The Wire


Bandit

Host: bandit.labs.overthewire.org

Port: 2220

Level 30

ssh bandit30@bandit.labs.overthewire.org -p 2220
password: xbhV3HpNGlTIdnjUrdAlPzc2L6y9EOnS

Objective:

There is a git repository at ssh://bandit30-git@localhost:2220/home/bandit30-git/repo via the port 2220. The password for the user bandit30-git is the same as for the user bandit30.

Clone the repository and find the password for the next level.

CLI:

bandit30@bandit:~$ mktemp -d
/tmp/tmp.8MJdmmbENz
bandit30@bandit:~$ cd /tmp/tmp.8MJdmmbENz

bandit30@bandit:/tmp/tmp.8MJdmmbENz$ git clone ssh://bandit30-git@localhost:2220/home/bandit30-git/repo
Cloning into 'repo'...
bandit30-git@localhost's password:
remote: Enumerating objects: 4, done.
remote: Counting objects: 100% (4/4), done.
remote: Total 4 (delta 0), reused 0 (delta 0), pack-reused 0
Receiving objects: 100% (4/4), done.
bandit30@bandit:/tmp/tmp.8MJdmmbENz$ ls
repo

bandit30@bandit:/tmp/tmp.8MJdmmbENz$ cd repo
bandit30@bandit:/tmp/tmp.8MJdmmbENz/repo$ ls
README.md
bandit30@bandit:/tmp/tmp.8MJdmmbENz/repo$ cat README.md
just an epmty file... muahaha
bandit30@bandit:/tmp/tmp.8MJdmmbENz/repo$ git tag
secret
bandit30@bandit:/tmp/tmp.8MJdmmbENz/repo$ git show secret
OoffzGDlzhAlerFJ2cAiz1D41JW1Mhmt
bandit30@bandit:/tmp/tmp.8MJdmmbENz/repo$

Bandit