Level Goal

There is a git repository at ssh://bandit29-git@localhost/home/bandit29-git/repo. The password for the user bandit29-git is the same as for the user bandit29.
Clone the repository and find the password for the next level.

Solution

cloning the repo and listing the files in the working directory we find a file named README.md which is an ASCII text file.

hmm, no passwords in production!, by initution there must be a development branch that contain a version of this file with the information needed for the developemnt environment, but let’s get some information about the branches in this repo.

the dev and sploits-dev branches seems interesting but let’s get the commits log for this every branch in this repo.

the commit message [add data needed for development] seems interesting.

great, we found the password for next level and we are done!.