OverTheWire: Bandit Level 27 → Level 28
The Bandit wargames are aimed at absolute beginners. It will teach the basics needed to be able to play other wargames.
Level Goal
There is a git repository at
ssh://bandit27-git@localhost/home/bandit27-git/repo
. The password for the userbandit27-git
is the same as for the userbandit27
.
Clone the repository and find the password for the next level.
Commands you may need to solve this level
git
1
2
3
> whatis git
Git (3pm) - Perl interface to the Git version control system
git (1) - the stupid content tracker
Helpful Reading Material
Version Control (Git) · the missing semester of your cs education
Solution
From the question, we understand that at this level we are going to be working with Git. Before we clone the repository let’s make a folder in the /tmp
directory as from some of the previous levels we know we only have proper permissions to save files in the /tmp
folder.
1
2
3
4
5
6
7
bandit27@bandit:~$ cd /tmp/
bandit27@bandit:/tmp$ mkdir git_level27
bandit27@bandit:/tmp$ cd git_level27
bandit27@bandit:/tmp/git_level27$
Now that we have created our working directory let’s clone the repository.
The password for the repository is the same as bandit27
1
Password: 3ba3118a22e93127a4ed485be72ef5ea
Now that we have the repository cloned to our machine. Let us see what files are present in the repository.
We see that there is a file called “README” in the folder. Let us have a look at the contents of this file.
Note: The .git
directory found in the repository is created by git that consists of files that are required for the proper functioning of the features that are provided by git.
1
2
bandit27@bandit:/tmp/git_level27/repo$ cat README
The password to the next level is: 0ef186ac70e04ea33b4c1853d2526fa2
And there we go we have the password for the next level !!!
Logout of the current session and log in as bandit28 to start the next level
1
2
3
4
5
ssh [email protected] -p 2220
This is a OverTheWire game server. More information on http://www.overthewire.org/wargames
[email protected]'s password: 0ef186ac70e04ea33b4c1853d2526fa2