Post

OverTheWire: Bandit Level 27 → Level 28

The Bandit wargames are aimed at absolute beginners. It will teach the basics needed to be able to play other wargames.

Posted
Preview Image
By David Varghese
1 min read

Level Goal

There is a git repository at ssh://bandit27-git@localhost/home/bandit27-git/repo. The password for the user bandit27-git is the same as for the user bandit27.
Clone the repository and find the password for the next level.

Commands you may need to solve this level

git

1
2
3

> whatis git  
Git (3pm)        - Perl interface to the Git version control system  
git (1)          - the stupid content tracker

Helpful Reading Material

Version Control (Git) · the missing semester of your cs education

About Git - GitHub Docs

Solution

From the question, we understand that at this level we are going to be working with Git. Before we clone the repository let’s make a folder in the /tmp directory as from some of the previous levels we know we only have proper permissions to save files in the /tmp folder.

1
2
3
4
5
6
7

bandit27@bandit:~$ cd /tmp/

bandit27@bandit:/tmp$ mkdir git_level27

bandit27@bandit:/tmp$ cd git_level27

bandit27@bandit:/tmp/git_level27$

Now that we have created our working directory let’s clone the repository.

Clone Git Repository

The password for the repository is the same as bandit27

1

Password: 3ba3118a22e93127a4ed485be72ef5ea

Now that we have the repository cloned to our machine. Let us see what files are present in the repository.

View Repo Content

We see that there is a file called “README” in the folder. Let us have a look at the contents of this file.

Note: The .git directory found in the repository is created by git that consists of files that are required for the proper functioning of the features that are provided by git.

1
2

bandit27@bandit:/tmp/git_level27/repo$ cat README   
The password to the next level is: 0ef186ac70e04ea33b4c1853d2526fa2

And there we go we have the password for the next level !!!

Logout of the current session and log in as bandit28 to start the next level

1
2
3
4
5

ssh bandit28@bandit.labs.overthewire.org -p 2220

This is a OverTheWire game server. More information on http://www.overthewire.org/wargames

bandit28@bandit.labs.overthewire.org's password: 0ef186ac70e04ea33b4c1853d2526fa2
Security, OverTheWire
overthewire bandit ctf security linux
This post is licensed under CC BY 4.0 by the author.