Git/Linux Hacking | Bandit: OverTheWire (Level 29)

Key Takeaways

hey guys John Hammond here continuing on some of the Bandit over the wire levels that just recently came out looking at level 29 and it looks like they're up to like level 32 now so let's jump in this is another git repository that we can download once we connect to the user account so head on over to our terminal connect and let's make a directory for us to work in and then we can get cloned that repo suite yep we will need the password there so let's just get that out throw it in our great alright so we have the repository let's check out what this readme says it says okay potentials for bandit 30 but no password in production hmm so let's check out what other commits they might have been initial commute of readme okay let's get show that okay that's the same thing did I grabbed the wrong one or something whatever just try this one or it says we fixed user name oh yeah or mistily it was 30 though no okay originally it was 29 they fixed it to 30 so I see but still no change in the password okay so this this note of no password in production makes me think of like well this is the master branch right like if I check out what branch of the development I'm on I only see that I am on master but that's what we have downloaded right now is our local copy but there may be other remote branches or other like versions or like functionality of the software that needs to still be developed if you're doing this in a real like github repository so there is typically a development branch so if I wanted to see all the other possible branches I can do git branch tack a and there's some notes here the okay we have for most origin head where we are currently for origin master dev and a master and sploit stem so let's check out some of these and the way we can do that is literally get check out and in the name of that branch great okay so get logs you were at initial commit I've read me blah blah blah let's check out what this one is can get show that and no password there looks like it has just two ascii add data needed for developments was that the original one that we missed oh yeah okay great so just like that looks like we have the password for bandit 30 if we wanted to we could again check out those other branches and that will let us explore whatever that Floyd's dev was and other things that they have in there but something that I like to do and this is probably pretty cheesy and a bad hack but get log if I like to just grep for the commits and then I'll cut them up and get just the identifiers and I can scrape whatever I need if I don't want that last one but what I'll do I'll following that as I'll like Rao read line just pipe that into a while loop and then I'll do get show I think it's no page or something and it'll yell at me if I'm wrong yeah what is that and get show that doesn't paginate sometimes it will just completely ignore it no breathe all right I'm gonna abort that mission we can just like we don't need that that argument I may be thinking of a completely different command who knows or no page me or whatever but yeah sometimes you can just pipe it all out and give that to less or whatever you want to do and you can just try and find like okay here's everything in green or red that they actually modified or added in the repository by just using that sha-1 ID all along another cool thing is get grep like if we wanted to get grep for password you could track down like okay where was it wherever in whatever many cases and that's a good way to just search for a specific thing in wherever you are in your repository whatever branch or whatever can be message you're looking at etcetera so keep those in mind but this challenge was just about checking out the different branches that you can access then that get repository so keep note of bandit 30 again we've got that password saved and now we can move on to that in the next video so cool I want to give a small plug for the discord server that we just recently got started up after a stream that I tried for the first time this weekend it's a lot of cool people just kind of joking around having a great time jamming out talking about cyber talking about programming talking about CTS and hacking stuff so if you want to be part of that scene you want to hang it with other people that throw out memes and talk about code every now and again it's it's pretty cool so please come chime in and we'll go through some more challenges and do it for real along with that I want to give a special shout out to my supporters people that are giving me some love on patreon I cannot say thank you enough especially because this list is getting a little bit longer and it's it's really incredible to see you guys pour some love into this because I'm so so grateful you're willing to go on this adventure with me thanks so much $1 on patreon will give you a shout out just like this at the end of every video $5 a month on patreon will give you early access to any of the videos that are record no my record in bulk and I'll release them slowly YouTube will just gradually deploy them one after another like day by day but if you want them all at once from the videos ready just $5 a month that all it takes hey if you did like this video please do press that like button maybe leave me a comment if you're willing if you're subscribed if you want to or check us out on discord check me out on patreon go to my website Dublin do all the cool sharing thanks thanks guys see you next video