tutorial · bandit

Bandit Level 28

Clone a remote git repo over SSH (from your local machine) and find the password in the repo.
banditgitssh
Optional narration
Marks this level complete in your browser.

Goal

There’s a git repository reachable via SSH:

ssh://[email protected]:2220/home/bandit27-git/repo

Clone it from your local machine (not from within Bandit), then find the next password in the repository.

Hints

  • Use the password for user bandit27-git (same as bandit27).
  • After cloning, search for obvious files like README.
  • If it’s not in the current branch, check git history.
Solution (click to reveal)

On your local machine:

mkdir -p ~/overthewire && cd ~/overthewire

git clone ssh://bandit27-git@bandit.labs.overthewire.org:2220/home/bandit27-git/repo bandit27-repo
cd bandit27-repo

ls -la
cat README

The repo content contains the password for Level 29.

Notes

  • You can use rg/grep -R to search the repo for “password”.