CWorld Site

Back
/ Update
7 min
English
over-the-wire /
bandit /
hacking-games /
ctf /
linux

Over the Wire - [01]Bandit (3)

This is the article chapter 03 of the series "Over the Wire - [01]Bandit".
views | comments

This is the article chapter 02 of the series “Over the Wire - [01]Bandit”. Checkout Over the Wire - [01]Bandit (1) for more information.

Level 27#

Good job getting a shell! Now hurry and grab the password for bandit27!

./bandit27-do cat /etc/bandit_pass/bandit27
bash

Password: upsNCc7vzaRDx6oZ****************

Level 28#

There is a git repository at ssh://bandit27-git@localhost/home/bandit27-git/repo via the port 2220. The password for the user bandit27-git is the same as for the user bandit27.

t=$(mktemp -d) && cd $t
git clone ssh://bandit27-git@localhost:2220/home/bandit27-git/repo
cd ./repo
cat ./README
bash

Password: Yz9IpL0sBcCeuG7m****************

Level 29#

There is a git repository at ssh://bandit28-git@localhost/home/bandit28-git/repo via the port 2220. The password for the user bandit28-git is the same as for the user bandit28.

Clone the repository and find the password for the next level.

t=$(mktemp -d) && cd $t
git clone ssh://bandit28-git@localhost:2220/home/bandit28-git/repo
cd ./repo
cat ./README.md
# # Bandit Notes
# Some notes for level29 of bandit.
#
# ## credentials
#
# - username: bandit29
# - password: xxxxxxxxxx

git log --patch
bash

Password: 4pT1t5DENaYuqnqv****************

Level 30#

There is a git repository at ssh://bandit29-git@localhost/home/bandit29-git/repo via the port 2220. The password for the user bandit29-git is the same as for the user bandit29.

Clone the repository and find the password for the next level.

t=$(mktemp -d) && cd $t
git clone ssh://bandit29-git@localhost:2220/home/bandit29-git/repo
cd ./repo
cat ./README.md
# # Bandit Notes
# Some notes for bandit30 of bandit.
#
# ## credentials
#
# - username: bandit30
# - password: <no passwords in production!>

git branch -avv
git log --all --graph --patch
bash

Password: qp30ex3VLz5MDG1n****************

Level 31#

There is a git repository at ssh://bandit30-git@localhost/home/bandit30-git/repo via the port 2220. The password for the user bandit30-git is the same as for the user bandit30.

Clone the repository and find the password for the next level.

t=$(mktemp -d) && cd $t
git clone ssh://bandit30-git@localhost:2220/home/bandit30-git/repo
cd ./repo
cat ./README.md
# just an epmty file... muahaha

git tag
git show secret
bash

Password: fb5S2xb7bRyFmAvQ****************

Level 32#

There is a git repository at ssh://bandit31-git@localhost/home/bandit31-git/repo via the port 2220. The password for the user bandit31-git is the same as for the user bandit31.

Clone the repository and find the password for the next level.

Password: 3O9RfhqyAlVBEZpV****************

Level 33#

After all this git stuff, it’s time for another escape. Good luck!

Password: tQdtbs5D5i2vJwkO****************

Level 34#

At this moment, level 34 does not exist yet.

cat ./README.txt
# Congratulations on solving the last level of this game!
#
# At this moment, there are no more levels to play in this game. However, we are constantly working
# on new levels and will most likely expand this game with more levels soon.
# Keep an eye out for an announcement on our usual communication channels!
# In the meantime, you could play some of our other wargames.
#
# If you have an idea for an awesome new level, please let us know!
bash

Passwords#

All these passwords are encrypted by tr (13 positions), gzip and xxd. All the decrypt actions had appeared on the level solutions. Only when you have problem can you check this. It is updated on 2024-07-10.

Over the Wire - [01]Bandit (3)
https://cworld0.com/blog/over-the-wire-bandit-3
Author CWorld
Published at July 27, 2024
Copyright CC BY-NC-SA 4.0
Buy me a cup of coffee ☕.

A 类业余无线电台的那些事

Over the Wire - [01]Bandit (2)
Comment seems to stuck. Try to refresh?✨