

Level 27

Log in as bandit27 with the password.

There is a git repository at ssh://bandit27-git@localhost/home/bandit27-git/repo. The password for the user bandit27-git is the same as for the user bandit27.

I create a random directory to use for this and clone the git repository into it.

bandit27@bandit:~$ cd `mktemp -d`
bandit27@bandit:/tmp/tmp.7IEeJPmqx4$ cat /etc/bandit_pass/bandit27
3ba3118a22e93127a4ed485be72ef5ea
bandit27@bandit:/tmp/tmp.7IEeJPmqx4$ git clone bandit27-git@localhost:repo
Cloning into 'repo'...
Could not create directory '/home/bandit27/.ssh'.
The authenticity of host 'localhost (127.0.0.1)' can't be established.
ECDSA key fingerprint is SHA256:98UL0ZWr85496EtCRkKlo20X3OPnyPSB5tB5RPbhczc.
Are you sure you want to continue connecting (yes/no)? yes
Failed to add the host to the list of known hosts (/home/bandit27/.ssh/known_hosts).
This is a OverTheWire game server. More information on http://www.overthewire.org/wargames

bandit27-git@localhost's password: 
remote: Counting objects: 3, done.
remote: Compressing objects: 100% (2/2), done.
remote: Total 3 (delta 0), reused 0 (delta 0)
Receiving objects: 100% (3/3), done.
bandit27@bandit:/tmp/tmp.7IEeJPmqx4$

Next I inspect the cloned repo to find the password.

bandit27@bandit:/tmp/tmp.7IEeJPmqx4$ ls repo/
README
bandit27@bandit:/tmp/tmp.7IEeJPmqx4$ cat repo/README 
The password to the next level is: 0ef186ac70e04ea33b4c1853d2526fa2

That was easy.