Warning: This post contains a solution!
Only continue if:
1.) you want to see a possible alternative solution or
2.) you are stuck and need a hint!
Connect to the server using the following credentials:
Server: bandit.labs.overthewire.org
Port: 2220
Username: bandit29
Password: bbc9xxxxxxxxxxxxxxxxxxxxxxxxxxxx
Level Goal is:
There is a git repository at ssh://bandit29-git@localhost/home/bandit29-git/repo
. The password for the user bandit29-git
is the same as for the user bandit29
.
Clone the repository and find the password for the next level.
Clone the repository and check folders/files.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
| Y:\Sites\www.overthewire.org\bandit\level29_30
λ git clone ssh://bandit29-git@bandit.labs.overthewire.org:2220/home/bandit29-git/repo
Cloning into 'repo'...
This is a OverTheWire game server. More information on http://www.overthewire.org/wargames
bandit29-git@bandit.labs.overthewire.org password:
remote: Counting objects: 16, done.
remote: Compressing objects: 100% (11/11), done.
remote: Total 16 (delta 2), reused 0 (delta 0)
Receiving objects: 100% (16/16), done.
Resolving deltas: 100% (2/2), done.
Y:\Sites\www.overthewire.org\bandit\level29_30
λ cd repo\
Y:\Sites\www.overthewire.org\bandit\level29_30\repo (master -> origin)
λ cat README.md
# Bandit Notes
Some notes for bandit30 of bandit.
## credentials
- username: bandit30
- password: <no passwords in production!>
|
The comment ‘<no passwords in production!>’ sounds like there is a development branch exisiting in the repository. Check existing branches:
1
2
3
4
5
6
| λ git branch -a
* master
remotes/origin/HEAD -> origin/master
remotes/origin/dev
remotes/origin/master
remotes/origin/sploits-dev
|
Change branch to origin/dev
and take a look at the content of the file README
.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
| λ git checkout origin/dev
Note: switching to 'origin/dev'.
[...]
HEAD is now at 33ce2e9 add data needed for development
Y:\Sites\www.overthewire.org\bandit\level29_30\repo (HEAD detached at 33ce2e9 -> origin)
λ cat README.md
# Bandit Notes
Some notes for bandit30 of bandit.
## credentials
- username: bandit30
- password: 5b90xxxxxxxxxxxxxxxxxxxxxxxxxxxx
|