Bandit30->31

Level Goal

There is a git repository at ssh://bandit30-git@localhost/home/bandit30-git/repo via the port 2220. The password for the user bandit30-git is the same as for the user bandit30.

Clone the repository and find the password for the next level.

Commands useful to solve the level

Helpful Reading Material

Tagging

Where to start?

Once again, if you need information about retrieving the repository, go check bandit27 level.

Here, we can notice that nothing we did precedently works. As we had to do with the other levels, we have to learn another git capability and use it to retrieve the password.

Part 1 : Viewing the points of interest in the history

One capability of git is to tag some commits as important, let's see if we can use it to our advantage and retrieve the password.

Hint

Using the git-tag command, can you figure out how to view all the tags of the git repository?

Solution

Let's run the following command :

git tag

This allows us to list all the tags within the git repository. This command outputs a secret tag which seems to be the door that separates us from our password.

Part 2 : Retrieving the information

Now that we got our tag, we have to retrieve the information that's hidden within it.

Hint

Using again the git-show man page, can you find a way to retrieve the informations within the secret tag?

Solution

Let's run the following command :

git show secret

This command lets us view the informations that were added during the tag creation. Of course they include this level password, thus allowing us to jump to the next level.

Full Solution

git tag to list all the tags in the repository.
git show secret to view the informations within the secret tag and retrieve our password.

You can now jump to the next level