Git/Linux Hacking | Bandit: OverTheWire (Level 30)

Key Takeaways

hey guys John Hammond here bandit level 30 from the new over the wire levels so I've got the repository downloaded and cloned and everything after I've logged into the account here so let's just dive right in now that it's created the normal steps that I've been going through and a couple of the other ones were checking out the files that we have currently in the in the repository they say it's just an empty file so we'll check out the log messages see if there are any previous commits and that's all that we have so obviously just get showing that there was nothing that was there before it's the only commit there ever was so I figured okay well I'll learn my lesson from the last level check out the branches and there's nothing else particularly interesting there I check out ok what are all the references that we've seen so far well we are just again at the head of the clone from here so what I started to do is I started to explore some more of the get internals because you'll see that whenever you have a git repository you have this dot git folder that is created whenever you run git init or clone repository etc so if you move into that directory you've got other interesting things you can look at a little bit of the internals and kind of more that you can read about as how git works the PAC files that it uses between Z Lib compression its deflate etc blah blah blah and the references so that's something that I want to check out because I checked out this PAC refs folder or file sorry so I explored that and we have the initial commit message that we saw up top the same sha-1 hash but there's something else here we have a refs tag secret so I want to check out what that was I figured well I will take a look at this get show that hash and it gives me another hash this is kind of confusing because you may think like well that's probably just another sha-1 identifier but it's not it is actually the password for the next level that is going to get us to bandit 31 so let's keep track of that make sure that we save it and I want to show this to you because I thought it was kind of funny and interesting I jumped on this bandwagon of looking at these new over the wire tutorial or abandoned level sorry because they're released just yesterday so why was trying to go through them like as soon as I could and this was all around the same time that I occur to this discord server for some more some more communication and cool conversations between the people that actually follow and watch me following the stream and we were looking at Bandit together and you can see originally last night Saturday July 21st this has a different commit message than what it has like right now like this was Sunday July 22nd with a different commit message so I thought that was kind of peculiar because when we were going through this last night I was talking with this other individual Dee colt super cool guy on the on the server and we kept like poking at this we kept looking all around but no matter what we were doing we just couldn't find it we were looking at packed files we were reading up on it and then this morning Dee called props to him honestly he was the one that found what seemed to be the solution but then we kind of realized that hey the challenge had changed like from last night we have the new commit message we have the new timestamp on it but he found this cool guide wildly inaccurate a hackers guide to get and this had a bunch of really interesting stuff so I was looking at some more about the tags I ran show ref I think and that determined okay these are the other references that we're looking at here if I if you actually do that get show - ref it will give us okay here is that same shot one hash that we looked at just now in the packed files and the pack refs and I thought that was really kind of interesting because once we solve it we were like oh hang on this was different from last night so I showed that to him and it says this looks different because this is the current 1.179 hash and then this is the previous stuff that I had looked at the other night when it was three three to seven and a completely different time so from some conversations with the people it looked like the solution to this wasn't even in the original release that's kind of awesome to see just kind of the creators of bandit and over the wire guys releasing these challenges and creating new ones like as we are moving through them that was really really cool so hey if you aren't on the discord server please totally check it out link will be in description please come and hang out with us if you like cool CTF hackers cyber programmer guys come join the party and I want to give a shout out to the people who love me on patreon so if you are not on that bandwagon already I would be SuperDuper grateful if you would join this list of awesome people I want to say thank you and I said at the end of every video because I can't say it enough it's incredible and really surreal to me that you've been willing to kind of jump jump on this this thing with me attack attack YouTube and kind of I don't know showcase some cool stuff so thank you for being willing to go on this journey with me $1 are on $1 a month on patreon will give you a shout out just like this at the end of every video $5 a month will give you early access to everything I create on YouTube but just before it's released if you did like this video please you press that like button maybe leave me a comment if you're willing to subscribe and check me out on patreon discord in my website