OverTheWire - Bandit

There is a git repository at ssh://bandit30-git@localhost/home/bandit30-git/repo via the port 2220. The password for the user bandit30-git is the same as for the user bandit30. Here are the details which we have from the previous level: Host: bandit.labs.overthewire.org Port: 2220 Username: bandit30 Password: qp30ex3VLz5MDG1n91YowTv4Q8l7CDZL This level is similar like previous level, we are again dealing with a git repository located at ssh://bandit30-git@localhost/home/bandit30-git/repo via port 2220. The password for the user bandit30-git is the same as for the user bandit30. Let’s construct the command to clone the repository to our system. ...

There is a git repository at ssh://bandit31-git@localhost/home/bandit31-git/repo via the port 2220. The password for the user bandit31-git is the same as for the user bandit31. Here are the details which we have from the previous level: Host: bandit.labs.overthewire.org Port: 2220 Username: bandit31 Password: fb5S2xb7bRyFmAvQYQGEqsbhVyJqhnDy This level is similar like previous level, we are again dealing with a git repository located at ssh://bandit31-git@localhost/home/bandit31-git/repo via port 2220. The password for the user bandit31-git is the same as for the user bandit31. Let’s construct the command to clone the repository to our system. ...

After all this git stuff, it’s time for another escape. Good luck! Here are the details which we have from the previous level: Host: bandit.labs.overthewire.org Port: 2220 Username: bandit32 Password: 3O9RfhqyAlVBEZpVb6LYStshZoqoSx5K So, The SSH syntax will be: sshpass -p 3O9RfhqyAlVBEZpVb6LYStshZoqoSx5K ssh [email protected] -p 2220 I tested some payloads to break the shell, but they didn’t work. To investigate further, I decided to see which shell is used by bandit32 by logging in through bandit31, whose credentials we have from previous challenges. This approach is similar to the challenge Bandit: Level 25 => Level 26. ...

At this moment, level 34 does not exist. Here are the details which we have from the previous level: Host: bandit.labs.overthewire.org Port: 2220 Username: bandit33 Password: tQdtbs5D5i2vJwkO8mEyYEyTL8izoeJ0 So, The SSH syntax will be: sshpass -p tQdtbs5D5i2vJwkO8mEyYEyTL8izoeJ0 ssh [email protected] -p 2220