bandit → Bandit Level 30
bandit_30/README.md
OverTheWire git gittag gitshow There is a git repository at ssh://bandit30-git@bandit.labs.overthewire.org/home/bandit30-git/repo via the port 2220. The password for the user bandit30-git is the same as for the user bandit30.

Bandit Level 30

  • Cloned the repo at ssh://bandit30-git@localhost/home/bandit30-git/repo.
    • The README is empty and there are no interesting commits or branches this time.
  • The trick here is git tags
    • git tag lists any tags in the repo and there’s one called secret.
    • git show secret reveals the contents of that tag, which is the password.
    • Tags in git are often used to mark releases or important points, but they can also be used to hide data that isn’t on any branch.

Password

5b90576bedb2cc04c86a9e924ce42faf

← Bandit Level 29 ↑ Index Bandit Level 31 →