Level30

Level Goal

There is a git repository at ssh://bandit30-git@localhost/home/bandit30-git/repo. The password for the user bandit30-git is the same as for the user bandit30.

Solution

As with the previous few levels, we will need to use git to solve this one. If we follow the same steps as the last level we will see that there is a README in this repo as well, but there is no password in it or previous commits or other branches.

root@0xCAB: /writeups/overthewire/bandit/level30/

$ la repo
.git README.md

$ cat repo/README
just an epmty file... muahaha

$ git log
commit a325f29e1cc26b0f0dc5f89b4348e389b408cc87 (HEAD -> master, origin/master, origin/HEAD)
Author: Ben Dover
Date: Thu Sep 1 06:30:28 2022 +0000
initial commit of README.md

$ git branch -a
* master
remotes/origin/HEAD -> origin/master
remotes/origin/master

$

Lets check to see if the repository has been tagged.

root@0xCAB: /writeups/overthewire/bandit/level30/

$ git tag -l
secret

$

We can then show information about that tag and see the password for bandit31.

root@0xCAB: /writeups/overthewire/bandit/level30/

$ git show secret
OoffzGDlzhAlerFJ2cAiz1D41JW1Mhmt

$