25 May 2022 - mike
There is a git repository at ssh://bandit30-git@localhost/home/bandit30-git/repo. The password for the user bandit30-git is the same as for the user bandit30.
Clone the repository and find the password for the next level.
Let’s get started by sshing in.
ssh -p 2220 bandit30@bandit.labs.overthewire.org
password: 5b90576bedb2cc04c86a9e924ce42faf
Now let’s clone that repo
git clone ssh://bandit30-git@localhost/home/bandit30-git/repo
cd in to see what’s up…
Just an empty README.md
So we check git logs for version history… nothing.
What about other branches? Nope… nothing
So if we dig into git’s tagging feature, we can see there is one called secret
git show secret gives us our password:
47e603bb428404d265f59c42920d81e5
wargames
footer