Level: 0→1
Level: 1→2
Level: 2→3
Level: 3→4
Level: 4→5
Level: 5→6
Level: 6→7
Level: 7→8
Level: 8→9
Level: 9→10
Level: 10→11
Level: 11→12
Level: 12→13
Level: 13→14
Level: 14→15
Level: 15→16
Level: 16→17
Level: 17→18
Level: 18→19
Level: 19→20
Level: 20→21
Level: 21→22
Level: 22→23
Level: 23→24
Level: 24→25
Level: 25→26
Level: 26→27
Level: 27→28
Level: 28→29
Level: 29→30
Level: 30→31
Level: 31→32
Level: 32→33
Level: 33→34

~ Level 27→28 ~

Level Description

There is a git repository at ssh://bandit27-git@localhost/home/bandit27-git/repo. The password for the user bandit27-git is the same as for the user bandit27.

Clone the repository and find the password for the next level.

There is only one command that may be required to solve this level: git.

Research Before Solving

The only research we need to perform for this level is looking at the man pages of git. This tool is called a Distributed Version Control System and it allows a group of programmers to work on files simultaneously. Users can upload and download updated files with simple commands. We are advised we need to clone the given repository so that we may locate the password. Looking through we find the command known as git clone

Solution Walkthrough

Start by logging into the server as bandit27. The first thing we need to do is create a directory under /tmp so that we have permissions to clone the repository. After changing the permissions, we will clone the repository with the following command: git clone ssh://bandit27-git@localhost/home/bandit27-git/repo. We are asked to confirm by typing yes and hitting enter.

Next we are prompted for the password to the repository, the description states it's the same password that we used to gain shell access as bandit27.

You should then see some shell output confirming the process was completed. Now, we can use ls to list the contents of our directory. After viewing the contents we will use cd to move into the cloned git repository.

Once inside of the repository, issue another ls command.

We can then use cat on the file named README to see its contents.

That was a relatively easy level! The password to the next level is: 0ef186ac70e04ea33b4c1853d2526fa2. Before moving on we need to remove the directory under /tmp that we created. My directory was named /tmp/user so I will issue the following command: rm -rf /tmp/user.

Previous Level

Next Level