{"id":1257,"date":"2019-09-12T00:03:25","date_gmt":"2019-09-11T16:03:25","guid":{"rendered":"http:\/\/van-yzt.com\/?p=1257"},"modified":"2019-09-12T00:03:25","modified_gmt":"2019-09-11T16:03:25","slug":"bandit-level-28-%e2%86%92-level-29","status":"publish","type":"post","link":"https:\/\/huzi-baozi.com\/?p=1257","title":{"rendered":"Bandit Level 28 \u2192 Level 29"},"content":{"rendered":"<p>There is a git repository at ssh:\/\/bandit28-git@localhost\/home\/bandit28-git\/repo. The password for the user bandit28-git is the same as for the user bandit28.<\/p>\n<p>Clone the repository and find the password for the next level.<\/p>\n<h2>\n\u89e3\u5bc6<\/h2>\n<pre><code class=\"language-shell\">bandit28@bandit:~$ mktemp -d\n\/tmp\/tmp.0HXHG7V3Lt\nbandit28@bandit:~$ cd \/tmp\/tmp.0HXHG7V3Lt\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt$ git clone ssh:\/\/bandit28-git@localhost\/home\/bandit28-git\/repo\nCloning into 'repo'...\nCould not create directory '\/home\/bandit28\/.ssh'.\nThe authenticity of host 'localhost (127.0.0.1)' can't be established.\nECDSA key fingerprint is SHA256:98UL0ZWr85496EtCRkKlo20X3OPnyPSB5tB5RPbhczc.\nAre you sure you want to continue connecting (yes\/no)? yes\nFailed to add the host to the list of known hosts (\/home\/bandit28\/.ssh\/known_hosts).\nThis is a OverTheWire game server. More information on http:\/\/www.overthewire.org\/wargames\n\nbandit28-git@localhost's password:\nremote: Counting objects: 9, done.\nremote: Compressing objects: 100% (6\/6), done.\nremote: Total 9 (delta 2), reused 0 (delta 0)\nReceiving objects: 100% (9\/9), done.\nResolving deltas: 100% (2\/2), done.\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt$ cd repo\/\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ ls\nREADME.md\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ cat README.md\n# Bandit Notes\nSome notes for level29 of bandit.\n\n## credentials\n\n- username: bandit29\n- password: xxxxxxxxxx\n\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ git log\ncommit 073c27c130e6ee407e12faad1dd3848a110c4f95\nAuthor: Morla Porla &lt;morla@overthewire.org&gt;\nDate:   Tue Oct 16 14:00:39 2018 +0200\n\n    fix info leak\n\ncommit 186a1038cc54d1358d42d468cdc8e3cc28a93fcb\nAuthor: Morla Porla &lt;morla@overthewire.org&gt;\nDate:   Tue Oct 16 14:00:39 2018 +0200\n\n    add missing data\n\ncommit b67405defc6ef44210c53345fc953e6a21338cc7\nAuthor: Ben Dover &lt;noone@overthewire.org&gt;\nDate:   Tue Oct 16 14:00:39 2018 +0200\n\n    initial commit of README.md\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ git checkout b67405defc6ef44210c53345fc953e6a21338cc7\nNote: checking out 'b67405defc6ef44210c53345fc953e6a21338cc7'.\n\nYou are in 'detached HEAD' state. You can look around, make experimental\nchanges and commit them, and you can discard any commits you make in this\nstate without impacting any branches by performing another checkout.\n\nIf you want to create a new branch to retain commits you create, you may\ndo so (now or later) by using -b with the checkout command again. Example:\n\n  git checkout -b &lt;new-branch-name&gt;\n\nHEAD is now at b67405d... initial commit of README.md\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ ls\nREADME.md\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ cat README.md\n# Bandit Notes\nSome notes for level29 of bandit.\n\n## credentials\n\n- username: bandit29\n- password: &lt;TBD&gt;\n\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ git checkout 186a1038cc54d1358d42d468cdc8e3cc28a93fcb\nPrevious HEAD position was b67405d... initial commit of README.md\nHEAD is now at 186a103... add missing data\nbandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt\/repo$ cat README.md\n# Bandit Notes\nSome notes for level29 of bandit.\n\n## credentials\n\n- username: bandit29\n- password: bbc96594b4e001778eee9975372716b2\n<\/code><\/pre>\n<h2>\n\u77e5\u8bc6\u70b9<\/h2>\n<ol>\n<li>\n<code>git<\/code>\u4f5c\u4e3a\u7248\u672c\u8ffd\u8e2a\u5de5\u5177\uff0c\u67e5\u770b\u5386\u53f2<code>log<\/code>\uff1b<\/li>\n<li>\n\u68c0\u51fa(<code>checkout<\/code>)\u5230\u67d0\u4e2aSHA\u5386\u53f2\u70b9\uff1b<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>There is a git repository at ssh:\/\/bandit28-git@localhost\/home\/bandit28-git\/repo. The password for the user bandit28-git is the same as for the user bandit28. Clone the repository and find the password for the next level. \u89e3\u5bc6 bandit28@bandit:~$ mktemp -d \/tmp\/tmp.0HXHG7V3Lt bandit28@bandit:~$ cd \/tmp\/tmp.0HXHG7V3Lt bandit28@bandit:\/tmp\/tmp.0HXHG7V3Lt$ git clone ssh:\/\/bandit28-git@localhost\/home\/bandit28-git\/repo Cloning into &#8216;repo&#8217;&#8230; Could not create directory &#8216;\/home\/bandit28\/.ssh&#8217;. The authenticity of &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/huzi-baozi.com\/?p=1257\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Bandit Level 28 \u2192 Level 29&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1257","post","type-post","status-publish","format-standard","hentry","category-bandit"],"_links":{"self":[{"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=\/wp\/v2\/posts\/1257","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1257"}],"version-history":[{"count":1,"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=\/wp\/v2\/posts\/1257\/revisions"}],"predecessor-version":[{"id":1258,"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=\/wp\/v2\/posts\/1257\/revisions\/1258"}],"wp:attachment":[{"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1257"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1257"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/huzi-baozi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1257"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}