bandit → Bandit Level 28
bandit_28/README.md
OverTheWire git gitlog gitshow commithistory There is a git repository at ssh://bandit28-git@bandit.labs.overthewire.org/home/bandit28-git/repo via the port 2220. The password for the user bandit28-git is the same as for the user bandit28.

Bandit Level 28

  • Same as before: clone the repo at ssh://bandit28-git@localhost/home/bandit28-git/repo.
    • this time the README.md inside has the password field filled with `xxxxxxxxxx
  • The password was probably in a previous commit before someone cleaned it up.
  • git log shows the commit history and git show <hash> lets us inspect any individual commit.
    • Found a commit with the message “fix info leak”
    • The commit right before it still had the real password visible in the diff

Password

0ef186ac70e04ea33b4c1853d2526fa2

← Bandit Level 27 ↑ Index Bandit Level 29 →